last executing test programs: 4m14.494072269s ago: executing program 2 (id=975): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, r3}, 0x50) 4m12.819670482s ago: executing program 2 (id=976): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400005b6dbe53850000003300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x22}, 0x94) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB="18005080050002000100000009000100482a9397f1000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r4, &(0x7f000000c400)={0x2020}, 0x2020) 4m11.690718164s ago: executing program 2 (id=980): creat(&(0x7f0000000040)='./bus\x00', 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = dup(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops=0x3}, 0x94) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000040)={r7}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2cf3"]) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 4m10.737938895s ago: executing program 2 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) dup(r1) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f00000001c0)={0x5b42}) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f00000001c0)={0x5b42}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x30}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 4m10.424678661s ago: executing program 2 (id=986): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x1d, 0x0, 0x963a78d2, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r7, r3, 0x1f, 0x2020, 0x0, @void, @void, @value=r8, @void, r6}, 0x20) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 4m9.393339413s ago: executing program 2 (id=992): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) umount2(0x0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000000000)=0x97b3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x8}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000000c0)=0x7, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00)=0x8000000, 0x0}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000f09000/0x3000)=nil, 0x3000}, 0x3}) 4m8.535004077s ago: executing program 32 (id=992): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) umount2(0x0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000000000)=0x97b3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x8}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000000c0)=0x7, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00)=0x8000000, 0x0}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000f09000/0x3000)=nil, 0x3000}, 0x3}) 13.812952802s ago: executing program 5 (id=1723): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110015481110823040a008f8c0102030109021200010207300e99b2b13d53b7e07a08"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ec0)={0x24, 0x0, &(0x7f0000001e00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000002500)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="a01302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="200a0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x402d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0x33, {0x9, 0x21, 0x8001, 0x81, 0x1, {0x22, 0xc93}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xa, 0x1, 0xd8}}, [{{0x9, 0x5, 0x2, 0x3, 0x600, 0x0, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x4, 0x0, 0xe, 0x10, 0x6}, 0x5b, &(0x7f00000001c0)={0x5, 0xf, 0x5b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x32, "59bbf55f165c222e490487f98e1771eb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x6, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0xfa, 0x6, 0x2, 0xff0f, 0x1000, [0x30, 0x3f00, 0x81ff, 0xffc030, 0xff3f00, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0xde, "df10b1102e4997023ea290a03560b12f"}]}, 0x4, [{0x71, &(0x7f0000000400)=@string={0x71, 0x3, "d3f81d70c819d351d69bb378d927f44093287c64b5b862d5ae12a3955505dc8524a6759525021f9dfe16bb1b1d611adddce4830d17ea6bfcdcc7294831909e18c9104d9fd37931c7b7207b7493095ba515d9f0e2f868ce7cf69fb815343699e1d1d1847ae99eb3935f8127422ebf87"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x84, &(0x7f0000000480)=@string={0x84, 0x3, "307a0792e0061131845767ce66a96b87ad08d4b795ff53ee68d72fa5c805d726a2fb39393e74f3b01ee5b495b9638e42ef29f28c897f2b5beb09e8673da89e88a08ba8a4d5dd771ddea4bff48ecfb916e4d4d2bbaec78e9f839a46f0c2f74d6b27329e47a6daf9cc185b4e1fa20e60435a9156e7a76bc0111c5bcc61be1d85bfdee1"}}, {0x4c, &(0x7f0000000540)=@string={0x4c, 0x3, "1ef689c0f77a2075f67f81de69e569ddfca57cecdf04512c24fcb705c74372a217f51b540b5182b7164d2363b0e6b4929f717b08706a1fdcb7d89fdcfd8b2d2a123a366fcfc4e7af73ea"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000840)={0x24, &(0x7f00000006c0)={0x0, 0x5, 0x81, {0x81, 0x23, "f63063669ff07ecda300e509b098f18a38cc1561012a88c27fa36413848b16ef0932c3a263ee21659d13eeae89eadbcdc3be60158e85697a7f52083c2f07d806335842be6d5f92d1580a5321c0cd85b8585b6788797aa9acfd2580e256bd35a462d97777bfc3765043bc3b1d47c1d8011eac7c501f36464e6e38634a514bf5"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f00000007c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x4, "d6415590"}, @local=@item_4={0x3, 0x2, 0x9, "d3fe0313"}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x4, 0x1, {0x22, 0xe72}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000880)={0x0, 0x17, 0xf0, "890148f6da17b1558ac20ea627d3f78ceb2aef4ae7a1b219e726bf95b8ba707868f0740bc16d99ee880d34d32fbb0e3d3e585bd238ad725588e4d39b424e2abc05c0c470bffeb41056538d9117cacf5758a63219fb3259b948df5faa951f8dd2f1e726d0fd58a5a684b183a1d20b2794dd7f3fd2a473b4fe5aab65b20416f44ffe2e5895b61a52cc3903e628537ac6619d64823883b45173229eb76d3ece8c9201694a4c2e27e6c43475b53f5ce79098ff5d16eca05e15897d06783bdf93ffb28e81a38ead1cd4e1ced2ff53ca245a5dc8ff10d7de804d7c222941de467315b549416ef5c117522377079dfcf18f9c2c"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000a00)={0x20, 0x1, 0x80, "904c15ff4e17f09842dba3ffff5d020e7f2b102884e23dcbd9a9a2f6ea40456f79d186b7424b980644c1792b8050eca061db397a0dcfd8222bb67448ec16e95d6d1d5c35e21cc9b2cee74c0866b20527b708b8aa3db050c350e034530a92585a3c716e4dc287244cb411cf9502c25b7bd41f7163622e416877825d5c505f9f5e"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$printer(r0, 0x0, 0x0) 12.638789143s ago: executing program 4 (id=1727): prlimit64(0x0, 0x1, &(0x7f0000000040)={0x9, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) r1 = add_key$fscrypt_provisioning(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x400000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000008000020850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r7, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 11.707289471s ago: executing program 4 (id=1732): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r1, &(0x7f00000008c0)}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@newchain={0x910, 0x64, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xe}, {0xe, 0xc}, {0xd, 0x1a}}, [@filter_kind_options=@f_basic={{0xa}, {0x1c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x9}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x8}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x8}}]}}, @filter_kind_options=@f_route={{0xa}, {0x8b0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9e}, @TCA_ROUTE4_TO={0x8, 0x2, 0x94}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0x3}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xda}, @TCA_ROUTE4_POLICE={0x884, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0xa44, 0xe, 0x3, 0x10001, 0x3fff800, 0x4, 0xfffffc00, 0x7, 0x3, 0x1, 0x2, 0x9, 0x5, 0x6, 0xf42, 0x7, 0xfff, 0x0, 0x9, 0xffffffff, 0x9, 0x6, 0xdfe, 0x1, 0x4, 0xa, 0x80000000, 0xffffffff, 0x200, 0x224b98f, 0x6, 0x5a, 0x0, 0x5, 0x2, 0x4, 0x5, 0x3, 0x3, 0xfffffff9, 0xda32, 0xfffffffc, 0x7, 0xfffff001, 0x2, 0x50, 0x7, 0x9, 0x6, 0xf, 0x1, 0x1, 0x5, 0x7, 0x5, 0x80000001, 0xd71, 0x0, 0x1, 0xffffff57, 0x7d, 0x80000001, 0x8, 0x1, 0x7, 0x7fff, 0x69, 0xded, 0x3, 0x9bf6, 0x4, 0x7, 0x30ee, 0x4, 0x7ffffffb, 0x5e54, 0x1, 0x3, 0xc759, 0x101, 0x4, 0xfac, 0xfffff454, 0xc, 0x4, 0x1, 0x7, 0x7, 0x7fffffff, 0xf6, 0x9, 0xfd, 0x4, 0x7f, 0x78016f15, 0x7ff, 0xffffffff, 0xe, 0x5, 0x400, 0xedad, 0x4, 0x2, 0x7, 0x60f, 0x9, 0x1, 0x9, 0x100, 0x6, 0x20, 0x34e2, 0x4, 0x4, 0x3, 0x4, 0x1, 0x7ff, 0xaf2, 0x1, 0xffffff9b, 0xa, 0xfffff801, 0xfff, 0x54f, 0x3, 0x8, 0x7, 0xa, 0x4, 0x7fff, 0xfffffff8, 0x2, 0x2, 0xb3, 0x3, 0x6, 0x80, 0xfdb5, 0x7fff, 0x3, 0x215a, 0x0, 0x200, 0x649, 0x2, 0x2, 0x401, 0x6, 0x4, 0x4, 0x0, 0x5, 0x4, 0x1ff, 0x8, 0x7, 0x9, 0x3ee, 0x611, 0x7, 0x7, 0x3, 0x4, 0x7, 0xb13, 0x7fffffff, 0x4, 0x5, 0x0, 0x5, 0xff, 0x5, 0x1, 0x86, 0x8001, 0x180, 0x6, 0x7fffffff, 0x84f3, 0x5, 0x4, 0x0, 0x3, 0x80, 0xffffff12, 0x4e, 0x8, 0xa1, 0x6, 0x2, 0xb6c, 0x5, 0x0, 0x53d5, 0x5, 0x9, 0x1ff, 0x0, 0x6, 0x1200, 0xcde1, 0x3b06, 0x3ff, 0xff, 0x0, 0x9, 0xfffffffc, 0x4506, 0x9, 0x9, 0xe, 0x3870a4e0, 0xd7, 0x6, 0x3, 0x0, 0xff23, 0x0, 0x9, 0xfffffffe, 0x1, 0xfb, 0x5, 0x4, 0xb2, 0x7, 0x10000, 0x5, 0x400, 0x8, 0x0, 0xfffffffd, 0x4, 0x200, 0x5, 0xc0b, 0xe, 0x9, 0xcda, 0x401, 0x7, 0xfffffffb, 0x3, 0x1, 0x4eda, 0x6, 0x100000, 0x8f2, 0x7, 0x3, 0x800, 0x7, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0xa4fac6a, 0x7f, 0x8, {0xff, 0x0, 0x1, 0x3, 0xb, 0x526}, {0x7, 0x2, 0x2, 0xff80, 0x5, 0x8caf}, 0x101, 0x3, 0xff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2, 0x5, 0x2, 0x1, 0x7b38c824, 0x100, 0x1, 0x7, 0x2, 0x8000, 0xd040, 0x1929, 0x0, 0x7, 0x81, 0x4, 0x80000001, 0x9, 0x6, 0x0, 0x0, 0x10000, 0x9a, 0x2, 0x8001, 0x2, 0x7, 0x2, 0x9, 0x6, 0x1, 0xffffffff, 0x5, 0x100, 0x5, 0x6, 0xfff, 0x8f6, 0x0, 0x2, 0x101, 0x8000, 0x7, 0x0, 0x8, 0x4, 0x7aa, 0x8001, 0x1, 0x3, 0xaa3, 0x24, 0x9, 0xbb, 0x2, 0xf27, 0x5c3, 0x9, 0xa, 0x7ff, 0xa33e, 0x1, 0x6, 0x80000001, 0xfffffff9, 0x2, 0x1, 0xc, 0x9, 0x8, 0x4, 0x8, 0xf, 0x6, 0x9, 0x3, 0x0, 0x5, 0x6, 0x5, 0x2, 0x7, 0x3, 0xffffffff, 0x0, 0xfff, 0x7fff, 0x2, 0x1, 0x7, 0x81, 0x6, 0x7, 0x400, 0x9, 0x200, 0x3ff, 0x50, 0x3ff, 0x8, 0x1, 0x9, 0x1, 0x0, 0xfd, 0x9, 0x144, 0x8, 0x180, 0x1, 0xfffffffb, 0x1ff, 0x408bdca5, 0x7f, 0x7, 0xfffffe00, 0x3, 0x5, 0x3, 0x6, 0x4, 0x8, 0x7, 0x9, 0x10000, 0x1, 0x65, 0x38c00, 0x9, 0x1, 0xfff, 0x0, 0x9, 0x1, 0x5, 0x21ccf3bd, 0x8, 0x4b25, 0x7fffffff, 0x4, 0x2, 0x4, 0x4, 0x6, 0xa, 0x6, 0x970d, 0x3, 0x2, 0x9, 0xd, 0x9, 0x0, 0x757b, 0xa, 0x45c0cd0e, 0x5, 0x0, 0x8, 0x7, 0xa, 0xea0, 0x1, 0x8, 0x0, 0x7, 0x7, 0x401, 0x529a00, 0x3cf, 0x8, 0x8, 0x491a, 0x40, 0x8, 0x10000, 0x9, 0x10001, 0x4, 0x5, 0x7, 0x7, 0xf, 0x1, 0x7, 0x3, 0x7, 0x9, 0x1ff, 0xfffffff7, 0x9, 0x6, 0x7, 0x79, 0xd, 0x1, 0x8, 0x101, 0x6, 0x6ad, 0x3, 0x1, 0x5, 0x4, 0xffffff98, 0x5, 0x6, 0x0, 0x40, 0x133, 0x80000000, 0x9, 0xff, 0x9, 0x4, 0xfe, 0x5, 0x7, 0x1, 0xfffffffe, 0x6, 0x7, 0xb781, 0x1, 0x5, 0x1, 0x4, 0x4, 0x8, 0x3ff, 0xd7, 0x1ff, 0x40, 0x8, 0x4, 0x6, 0x1ff, 0x3, 0x8, 0x0, 0x9a, 0x8001, 0x1, 0x7, 0x0, 0xdb, 0xa3de, 0xfffffff9, 0x7, 0xed, 0x9, 0x7fffffff, 0x2, 0x7, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x9, 0x3, 0xde, {0x6, 0x0, 0x6, 0xb, 0xc, 0x6}, {0x1, 0x0, 0x0, 0x1, 0x6, 0x8}, 0x4, 0x8, 0x6}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x22}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x910}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x0, 0xa, 0x5f, 0x92, 0x40}}]}}]}}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) 9.788652591s ago: executing program 5 (id=1737): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r2, 0x800c0910, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 8.407308216s ago: executing program 5 (id=1739): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fallocate(r0, 0x23, 0xd6a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.395305875s ago: executing program 4 (id=1740): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x715, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x4, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\xa4\xf4\xe0\xe8\xed\xf4\x1eM\xd8\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr5}) sched_setscheduler(r6, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r8) socket$kcm(0x2d, 0x2, 0x0) 8.343616807s ago: executing program 1 (id=1741): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) pipe(&(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) 7.758939237s ago: executing program 3 (id=1743): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) setgroups(0x0, 0x0) setuid(0xee00) r2 = shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000004000000060000000400000000000000", @ANYRES32, @ANYBLOB="030000000000000000000000000000000000caec1f63abc4ff77e1f5d839be5895270000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) shmctl$SHM_STAT_ANY(r2, 0xf, 0x0) 6.706398304s ago: executing program 3 (id=1745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, 0x0, 0x0) 6.247379124s ago: executing program 0 (id=1746): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000000}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') getdents64(r2, &(0x7f0000000000)=""/32, 0x20) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x39, "ab1e692784320291aad4988740cf66e781ef46b1c3f0188c6161ca922fc0f3524b46ebed477403f19ee78963d61fc8e76ca340e4a60ef79510"}, &(0x7f0000000280)=0x41) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={r3, 0x8}, &(0x7f0000000400)=0x8) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001009d99b32442739560a0e00010500000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000008800001c0012800900010069706970000000000c00028008000300ac14142c"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r7, &(0x7f0000000440)="9f61fd0ca7e996a47ee1c55062b30d843c8c73db8172e28f028c81315edd7a7f45bed0ca735c1d568901b102d14f36f452d7abeb910cd347a37fe2d000f0ffffff010001dddaef1c5088e21829630ae12efe9d52bcf20f5170eaa2f350882ef77e0b890208a3650481068d8f0e56c4e0b239bb320c169614100663effc6cc5d800000000caaf394e50a0296171c41c96dfb9d93b4f24c4f5e3b1c14d161486dafacb1f3f000007c7cdee6ba369de", 0xfffffffffffffe1e, 0x200400d1, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000100)) getpid() mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 5.264261919s ago: executing program 5 (id=1747): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe106660e6444ef3c3a19c11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d418dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.798610666s ago: executing program 3 (id=1748): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x20000004}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4004af61, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0xdddd1000}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 4.781043087s ago: executing program 0 (id=1749): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x4d, 0x0, 0x1a}, 0x40841) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) setgroups(0x0, 0x0) setuid(0xee00) r2 = shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000004000000060000000400000000000000", @ANYRES32, @ANYBLOB="030000000000000000000000000000000000caec1f63abc4ff77e1f5d839be5895270000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) shmctl$SHM_STAT_ANY(r2, 0xf, 0x0) 4.630787016s ago: executing program 4 (id=1750): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="4d642d229cd4a168dffb325be53c358f5c654b1ea38eee558dd00b6182719fd648f38ee333c92a2044268fef9f806c19a630c901e1a4b29fa2dc1b49b555d09fa7658dc092e18f68f5248b295640d9ff942ada111dbb3f0b0dced1ed09fad0f3e127c2c7c4cebf04a9663202616ed6d21a6bc4e376ab5148ac27ea9f0fe2b9a530d0b8e76914c33359f29619a2b94dd6adc2a500da9d919c3ed8279d959930b3fadbffcb67362d"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x1d, 0x0, @val=@perf_event={0x1}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c", @ANYRES16=r7, @ANYBLOB="200004000000fcdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24084004}, 0x4000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41) r9 = socket(0x28, 0x800, 0x0) write(r9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x20000800) syz_init_net_socket$ax25(0x3, 0x2, 0x1) 3.715278888s ago: executing program 0 (id=1751): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @loopback}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}], 0x3c) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)='2', 0x1}], 0x1}, 0xc001) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (fail_nth: 2) 3.170903323s ago: executing program 1 (id=1752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) acct(0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a80), 0x101000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x2, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) close_range(r5, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000040)={0x4c, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x426}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.168453061s ago: executing program 5 (id=1753): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b0001010000000904000003020600000524060000052400"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080000000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) userfaultfd(0x801) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x5, 0x0, 0x32314247, 0x4, 0x0, [{}, {0x0, 0x1000}, {0x1fa}, {}, {0x0, 0x5b59}, {}, {0x0, 0xfffffffa}, {0x0, 0xfffffffe}], 0xff, 0x0, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002340)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000002240)=@filename='./file0\x00', &(0x7f00000022c0)='./file0\x00', &(0x7f0000002280)='sockfs\x00', 0x3208043, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 2.539258405s ago: executing program 3 (id=1754): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000000}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') getdents64(r2, &(0x7f0000000000)=""/32, 0x20) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x39, "ab1e692784320291aad4988740cf66e781ef46b1c3f0188c6161ca922fc0f3524b46ebed477403f19ee78963d61fc8e76ca340e4a60ef79510"}, &(0x7f0000000280)=0x41) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={r3, 0x8}, &(0x7f0000000400)=0x8) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001009d99b32442739560a0e00010500000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000008800001c0012800900010069706970000000000c00028008000300ac14142c"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r7, &(0x7f0000000440)="9f61fd0ca7e996a47ee1c55062b30d843c8c73db8172e28f028c81315edd7a7f45bed0ca735c1d568901b102d14f36f452d7abeb910cd347a37fe2d000f0ffffff010001dddaef1c5088e21829630ae12efe9d52bcf20f5170eaa2f350882ef77e0b890208a3650481068d8f0e56c4e0b239bb320c169614100663effc6cc5d800000000caaf394e50a0296171c41c96dfb9d93b4f24c4f5e3b1c14d161486dafacb1f3f000007c7cdee6ba369de", 0xfffffffffffffe1e, 0x200400d1, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000100)) getpid() mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 2.428979397s ago: executing program 0 (id=1755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = dup(0xffffffffffffffff) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8034, 0x40, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) ioctl$BLKGETZONESZ(r4, 0x80041284, &(0x7f0000000000)=0x101) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="50010200000000000008000000000000040000000020400000000000000000000900000000000000020000000000000000000000fcffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000004000000000000002000000efc0000000000000", @ANYRES32=0x0, @ANYBLOB="0220000000000000000000000000000000000000080000000000000001000000000000000000000000000000020000000000000003000000000000000200000000000000cd0f00000000000003000000020000000200000000000000090000000000000001000000000000000e0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000008000000000000000400000000000000be00000000000000020000000a0000002c2b000000000000"], 0x0, 0x0, 0x0}) read$FUSE(r4, 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) io_setup(0x56, &(0x7f0000000040)=0x0) io_submit(r8, 0x0, &(0x7f00000004c0)) read$FUSE(r7, &(0x7f0000001b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r7, &(0x7f0000003fc0)={0x90, 0xf5, r9, {0x0, 0x0, 0x57, 0x1, 0x4, 0x8, {0x1, 0xffff, 0x10, 0xfffffffffffff044, 0x7, 0x3, 0x40, 0x8, 0x3, 0x6000, 0xa9, r10, r11, 0x3, 0x3}}}, 0x90) syz_fuse_handle_req(r4, &(0x7f0000000400)="09dd308c8f5a14d6bdffcf9fc4152541b356299ee6bc28b2d923952611afdd25b4622c7aaada0c7353de9c694abdd66053ad1daefa576239d5733ce8f560365ad45ca784a3c92eb0696ccdae6eafd143f7cb89cd8d2cef04244c240a20c0bfc8a6a18b0ebf5c25d7d439a97021bc7e4d7aa61c403364a5784f429132800c65a32498e9aece21f39231e15048a153b5380ef3a7304960a8974ec57036a2ed9f6fe3e4d6371e92f5a22d127ccebc374cc7b07a6d96d9e39492d6c43bf6bd4450355e3b5eb2ec5d7c534149e4b6f45fb5668a42bfbd1e865510a1551ec005d54b55feab8370b5e25985bd197438b2b795c25d0626351dd501d50555968a7be3c3857450063b3869355995b1b59ef3a5b3ce14d90fff556ebc93d80074b5d71c853252a1b24e6ae17a42a891145efb71295ca0c2d0cc12bd899e21390b6a5e170ffa4961b1caf0b229f340c7e26cb576240830c7986f5cc2a20189a694b9ec9031346532ad303ccc327e0f3993bfc46123147ab8bdcb21f37d4312ae8d815f781a05b0fea3100f819807470cfd72dd5ba9ac2fdd1336c287b5c2796e914b0b134df7b00074eeccd817006b32e4962a8ffd71c05b6fd915aca080761ea39fa4c790c10c6a19edf12ee1136fd9c3b943baa538ef2a769242fd7b3282e5a3cdd1e3585167b81a60bd5a32f0101db78fd3e96001652a65e5b4aafbf68e2f0b98f50533991fc69134661587a0499594b9ef8951ac7a8ee0df11e1d81fee17dd503319a0c3c8bda3ef2b5e962d3055585e0fa311235ed303393b545e1fc7940ed76f40bb8bc06ee0fb01b8efec940db6fe6dce0c12d3d962cbf5641077c4e20d5cab39a22de6615427ca70985f01584558cf12d1e58b8fd093ec647e0ca2a560a46fa186d777a63267a52e67d121af18d83e36d86db2ceac9e6871bb6d7a83f5f3d313b57d09d762b7fff1381f2f461cfffbdd5644c33ace021abbdc3c4c903c0457ea57a4134b6a2f363b8375ba208fc45c23140a6728ab4d5297a63156000c44c5a85dcad1d9d945b33590ac14d22d4421861c67440fe864c065f180b580535a7d735843e53c628377a94c28090afdc8cf42cde3148c5c6a18fba75d64848c52fd40bfafe7d841cc3c8d351a68d2cdd1afe9802a06887ac176816e37824e165e335af910cfe143b81b95d91c393bcdc18e05031891e7a3fdd1028ef4422b9732e130538062d9159b352bbea6297a8001015f07b607f560aa9687047060760e1c74544424863ddd3b7566a7269db7035b1698fe2799487345242fcc890b2d1977f04e3022ce64989c509165fc355defab69f71ce645a147bf7aa2f3c2c6c30009902c11bc77706a0acf4d3aeb76df5001667bfed25cd0168b23b37e962347a1ee3c7629c5080b38bbcfea9eed3e5373e99f6f558ca8e5109bcc69f8091aa51d38586e7ecd67b9fdb53dd8665db39a177ee97ae4189e55167830182ac347acaaa28f6003d94e2d7a4e98fa0e1637283ecf0ca378afda5e6a84c9b7c0b7ff0ca09eb5083ae8e221e8381ba8717e553adee947935c5e3a35c6f763168b684c44d3c2c7c29e23de221c0a1358a2d88ad7e487bc33dccd0f42b9267d0d4aacbd06cbb31ba222d073aae58c082db434c6b9d51ec08678a3f78a77188fd4866fbbac8e739cd123be967a4374fe141c6196c12b8745fc6104fc31308d0161082ade42ba9be40b2502479ac9122f1202f51a0b1cd01c62119d4b4804566e4e59dd91d684bfa2ed5276798f37bcba8a84a0463c1fe02515e3dc93b4a9a02d8a571971344646fd55ec5e640a9d108d0489275037a51916aeb3420735bc18701915b2eeef9f6f68411ef76409844cb3b38de4e3d77006c6a46a6b02f97bcce53f2b6517436c04786a6e4989b3a31eb95964d4892c51c125d26f7ff7cb85a99d0d2927ffa9945b5c9fd7419a9cb93ea1af3f95734a0da30594a5b2b03b8d3405bab6075d1629e2c77be3c4a5510ff5b3b327b37f8bd87b9d9bcc2858ee6c5b0d77643683dd170979b99647853b4392ae69f1bfaa886e1d78a0e9b5a6397715778d095e8c2ef40db7987dc3dd11cc65b8bf0732a55f44bbfaecc22df8a7445f993483626b29289025618698da28837abd1675f79494329a57a015ecbeecd55cec861390cd5fb30f2e5637b1402c51fa3192868d7760dfb03e193b32ffacca17b281c64feb51413646286b2bb3713f8b65ab058b923ef005ea67137bc87a94a7ff314ab12b85c5ad7cef6a73773ab54ab6842d6ab88a2d0c73cdf7162e994f7087b2637e7aa765a930a39fd739f580c281036adcc116277ed641b87697b115e957cb7387411dec9d04096ef4e02a8a252f14d1ed2f9ce63686402bbd2210d5d9ad746a27bf1f2a8e83d883af49412688047ff5ba7061c65e9cd518d17d4b33a6a939d13d047e4b35df17c3c8d7c2438a6e1a65933571b5b04093658c0696384a72026cc5397013605d1dbc36d8dd334c8d4d684a1c4048e8169d047e225141134e438530a42307cf6b7b5fab670261d37108e8aa51f8e6f80c8f5a33e270b9525b3abc65d031fcc4bc641c82ccc8befa29b576e15b07215d9857c5b673b7c7aed9bf88976216fd93f33ddd8c0bff374f3284d190ed4b65ebc25fcbfd2720dbe2d50e9e9e9efed12a61602b5b21cba9dd7410d9b4b51fc17c57e4e6a60cf50ef1dc96b659cc618590bff5381c7f1bfdc89de4af565eb224b2416e7470ee5bf770655b79e9319ca05ea0f489b471c62f8f331148f45310e14f60f3577b7bcfeac4952ea6f46305bd22fe7417b36e368ad456e9ce4588112250ca85ca730464f749452421c3aa5f537d2c23580bdd168cebfd9ab6eb5012ebb0fb2a461424443940c3f184eb273349c1a2ade589ba66e4f07d400330b91241806f553006e4de17d8607a6675d846069e9189533845afd57212636d61c414edf7b07e9114291028572ead17e20b839847be1ff0a0dff73284c54fb61c2b94b0553408299b78e05c23d645149ef0a15b9441f9110c29791b0d745c9b15ff7eae0f449c932b08ebe25b5e3b60c506f65507a4c30f99174c81739ce2224897bd666ff7d270009714c3fcf9e795dbdc245fa0a2ace2ecaba3a6adf593c531735ea9142c980ab84dc036b7419690c29cb9b912f3ffca9171fb926cc8000a680b8b839363b6eaae64831fe19fc971106274af2659387aaa9e8f8a265d1712515f9096d9bd58e17a1cb2ef3a5f68c1750b7aa06f887fda8f564bcc3ec0b9acf54ded92e696ba7f62d5ed0c8d2a4f7e07ae04482097331e08c8286985f2c60d9ce68ef74632f6155acf7dfa48757f28a6d2d7744b146db469f25d5db5a597f73422536cafe4c29e13f2210b80c84a7f5b3f33641cd094b3909edab3cd2bbef06697d79967249c2df47de3cc774831c16b47fc426a74601f60f4c6e50c11d41dbbcd2853ee5f697a8350defb5b322579845e955059acd45f7b00ce63f581cb788326411021006ea90a0d86857bbc9331643044890a7558f42c84f69dabc71b4b45e25e3511f6d9a5d7867fed6f037e59d7ca901b43889cd369ca614bbcc54e20cfc28727f095cea8680695fff082d70043eeffef36ce470c52414b42224ca85d1586edc90062e0fb555f4010616c67ae0ffa0a10905bae6ded985fc16276f9940619d15512a661a7236cc072aeaa1489b7fb390b236a8a02f3705c69f7e22b6b78b8bd8770755a82d9ae2c9e21a729821e676c140e5cca4c5879d61189c1cb7b386d81b4d472009a986fb5b314479233c9ac9d762af077d472a45255dfdab593858034f3f3e8057449711c1e14ba29b7283e656f110d4f095a7a8263c0aae942a5190fea8562d670d75b5df2393b966a692482d6511b127ad3832894fad758a931e2df54cda70883fc176752fce727e0513b3865dad50672bd2408f38a5225c6f19430001315f99d6b7d8d5e45a45b2afcf42127ca9d77bb530bad43f483480873a297141bcfd8ff5a13780383b9dc6bf9cf40ffbd002d716d51f2acd86277d0b99a7e9e7447455cd171b840602be709f77bc8f7af4a200c45b2f7e7cfc6bc66e8489113c97c4b051fa65f96c960a4a076f3582c10f04fead8247a6a5eda531ed00cfa53abc9dc2d214585633cd83fd22a3db5a14b07910863c1d93ba5da552f1a57a3e4a82106d2a4ef9e9bca5e035c655df57f07609d6f67a6ced2c3abb15dd97bab1454d4ab63fb7b86032b0b2a4482d97d2cba1a15670eb20f2a1df72bfc0140bee9faee4807f7b74f9fdc2b99c4f02d2449c92dc66877c2fd7464d104e3ad798f26c5434f89c39c1f6326afccaa2586e58aade874749d3ae083df101ddf513e044328384781c8d991290088b5ac39b82ba28973c3058451b123cb9f04224d570552f696a504f8ed3e61af56bc4e9a4ab6c127111baf2733bc7406af4cb7cb7ea2b98c7ef28913dab2e869a6c60054e837c8e110899e466be881e371bdb92764bc598ff0eca5491934dcd7c5896319db1d8aae5937c9c68007e8da356d45ebfb92c748adaeb475233387e6ba630d2a5363c74f3224f9420058967df5c97b1423e466f462e3761d9344f07aed2ed0c54690b9711f2004dcd28d0fc5f68663b2038d519ebbb4aed7c4652372b02bf4a99fb6e8da72c3baab4a0d2e7a91be1e4524201732cfa20fd994e1112e8d882d2113e9a134144da90446ffdf0d10f272c335706bed83584cd0fb2c1abe767a8603d314565e3bb21a05f06d8b005831e68e180df84992f7bf1ceba4ad0bf380565d85bddf27fc09632900e0c8b4d51dade3cb4ac9d720ae862cb491021962da48aceda66c5604394695c11ea66bb1af3aa2ebfc5397ba0fe3b1bf6e6c3abfdcb78867637a59bc6259f63cc50d3e4e9542fe977991d2f4b6093a7ec16814c13e64c0b4f2421269baf4676d0a034ea2204b55bc672c449a38439fa29721f62196406f6d4ff556444cbb9b98fea2cace0cfeddbf9a3c834d4c414a6235cae804c9b0a067a5d95830c3186fb0000bfdc8df454c4d845f0ae04467a94ae6d88d7ded247b3aa32878d03e09b5a867a4bce0ea62a8cc273d75e07849258a4a2beb3854744b40612b8502eb67ffdf264a11ea727cc7c2bc0f45a742aad2548f4ab6991d2113b362d62610fa6e811a60087e0fd62dd0edab82237685cdff48640778807f4334c856f7b14c954cc10d38711236412b86b031cfa59d85012026ea1e2e205ee9f2cd8e85c65ac0943562e3390b3fe1290f8db95911ffc15a47349d7563fb9d2f8db459a1a3eda3dd3cf7f3c81860790ae3636d7fc004f3cece195574aa14a275338c85493ccd387fae88237a92b4dbbda42bc7dee643e996d4cf74d568543125d9fa494996bb1712c2524a0fff5549b5ac332fee8707e4393ca238e6c561d50a99b015d3912eda876802e163ce57f9024760a0988a5c465c9dfa98e192eab1afa93986995c96e4541bb39a0f22719b0777d89200e639b0c22c640298fb3ddf1c1c7eaa96810861eef5df8309dc75b8624634cb95a5c81fd403622c8e95073df741b98ee097701f8a13fe2871176bf24278a433437b0a996547ed27f6e78dbc45fe9b078f0a57b88af18eb1eb766007ec0100c6d717be1add80d90fee2c8b953fafcc6ce0551a63ea5b28fd514a81a880fad87d31c15173d092cef90c2af2a825f789cfc383f94b888fecc0c0265a4e446130df1d044cb1ea3e1cf45e3a6f6b642507a6219a489de0d29adcb323fd9630bd538c1b3d4cc4519183ba5ed13dba0a699e75425742fb4ba646a68689e6ad2ac701dc596eca717929ff23d785649768709655f7ddd717e1f49b9d63b09ee98e6e43750ae6a9d82fb7517d8314eb223b6e1db1eb30aa521f722d700060db822c69a0ddb577c6700b38dbb71187ca99349cea5c4465e4d2d57d6a07e96f7f69e6c468f704c00fba44145e2a13aa6cdf3e83d9d0b945667198456d3839e15a0a8407bbaa4c364d028adf81d8688593821aa063d6ece7122c9cf7e0e28efe02b9652d5b4f9056dbe86232bf2f76d2c9c4dd4951cf2e7d579d34ddca3f0c436c1d2fd62958746109fa6bae7a0befe184434112efb5a678c4e0e64c2155ff9d1c997af1de61b7205ca3e415700f40aec12d24e417f52f08e12a0149844bd2be4a479d6dd71e36464a10ca65fbbb509a2b5be0b74d4a1926a64920024d7ab68b61223b9437753b3ac76eecb1687005b7e2c4c389b88d0bc5fdbc9a8102617cd85ea1ce6f9e0b39f214e38ec2aa13366136e51cdc7f736fe3514dd80d193f856880cce0943d82e7a0ac406fd0154c99d4202f131f4a01549aa564d6f8af6e4c854573571615d9b6f3f6299efd48063376c1762602b2522c55983bf86a638bb4dd3df6c84f6bf87cb407e62ffe246f77963bfafa1fbb3be6007665fb615b3147e1c50c3d827d944b3817bde52205c1269a00b11ccaddb863cc1993ecf96065814fe8714442d8c6cd6592a161c05c10828b335c48475ebfb7d28446fe0c13c25ac2564228fc6248b7807cb1bcd0439176c467703f263d9ba12f92d3a0b725bce1aae970bd11976a4f66d790873df7abb526f7c547433a581084d8a741878e1c94024e12821715d4cb588a4f4d1e3b6133b992680b6de5e0627bee608ad568319d1c0e61ad1db9d8e13955cb77d731f1c5eaffe83d77ea3560beb88e350a6d79fc38bdae9e569555e8fd72d41b2775328238a780e274c800096045169ccb6d48670ef9ede0c7df67c9f2c5a374d42174127e777293b2abaf5e6086dd649a060ddef70021be6316c0fbf6bbbb7a5a8b6edbb3c10390165236d9b2aaaf02525b3ea380a584b9d7752aefb0cfa4736dd1c9ea15d10311a819c4aedf912e9941a2eb0e84449989a396ee1692bae679bd3c89942487348b79cc91c60e1eb18f870f4fd5e2e29646687fb2fcab2afd821ac2149e65ed2b83acc63ee31447bedda993f649d2bf71b726a5f1796c27bcbcb297cfca563072f6990c45ddac828c98d26a0e207d0130d6e28c1b27ad8bb9c58590b9ccc878ef18fa68d2ff888275cdc452e87d260c3b7c74ed2670272da5409e7b7230defc813756e4a01be5b90d551e88f10be0d976f0807f01f31e44d3d946dfa4a99df416c95f3b4e4b1a3f9db18e13a7dc924b5707d035924f0aa1f5ad79e6a0e1fe27134109646a5aa05b91b32ac8d7f320261819a5f00829d0db48ad4a598eb564f7cb866c2aa18088ecc80ed6f886a7280b9a537da19579b5c6c12dbdb11a814a7e3eb845de7def8df8b647d4ee836b5a30c4b6090d17caddcb03d4944836ead594fe612421e37f163f16f6e27f446387d7326d5b7293a375b6a87e39b915827d2e07b915e65cc4fdb226c9cf74f2912198586e59e1c3c65a5e3f5cdb64e1d287ee4157137e2e4bb9802c71eb427163b5393500af65b838d6190ab2c470070e74ec547eb7cdfdab48ce6f2cceba10757ff17f984d2aaff9a535072c917fbbab9e48e4e4d561e27ce27fcea842787cc0b8fea13382381d87a1e5b675e37fd991db7a88cff10695510798d7001af3e3d89fadc56ad65e4d68cd7577b8295c4a0f9ba1098de2a6f9696ee677141b92c09daf51d89365d4f393452b609c304a0a041e9a9e4dfe2cfff6ff922a5c34ca8f12816b3da1cf06da74aa487310d242ca362c5dc1da0840e7ca748ccd562fd3ebb78f594ed6d64f11934fbab284c7ac6a5a358be8da8620217335a450e92125c899c616b8ab4f04fcef7ee42be405590916195524d23aeaa7d1e40bedc66b2b39c3b51e34aad6c67ad975b6034633ffe0d751e1bce1c7ed48cc7f95f7b445bbbadacde6a37b24a9476ad2048a21c49e8467a5f1e818a592085c7b32cdd996a09f39adce1fc770f18990089b455439fb444539a8179c9c5537a60a16b37bc7cbfd009e17f7fdbc1876bc7fadd8757c8c24c2d520e51b4e76793221dbcb95411b672be912918a0ce39a18ad42bfbef3bf3c5e92c51a38cfb41f0ed3e3ddeeb0d7279d5076a16f82917c0a98f53fa443d4ac8e3995ac46063a607bcf3cfc9dd9aa36ea5d457766ca1069b7a5bd3a17afbe8950af5be0ba0078cf998017c9887c4d539265cfde667b1c99d639f6d20d9b3ba6121805cffe8acdf489e8342b00d389c46347dd0b2ee052b4859de8e0820fa2150f58b38058cbb94591188cace5c6786368af834f18545b90be832813306d5b3d3709d59fb961806d441cf9ce5a95b630a6fffe6041fa685862babb8ea93e77732727ee2532459e3c4311340c3096aa5ff97f6ea8c601548e0ec015c978ebcfd972ecf396aecbbac3be8beed9a72f8d01a3b355b93246fe6f1f6729075d14fdc60674cef767ebef607c987ceb01366f80f55c33f99d70ec3bc0f48a58c06e89690218d945937618e384a26ff6599726ad4b3bfeff82a553a22ef046f525f924bad28b66d2590dc47ad89d1dd155aa705b39a187ee458ef40b15c5e1b4fad38752712c041ddc927b129969645306d82a4d287d55a69e0464419fd25b45fe429dc0f1c108b8136ec71c28116a3f0f56fb59a469a68957a8dd4d954cca10749131d298f3985ed53875cec562d312345535f5044dc180efbe5e70ec2848ddd3b39fcc49fb24d19b2ba23a3d6da881fad4783b28455c99fcf9c077b1f9147b40307782b0db3b5070b44a210ea3b7c90f33a5a9a759906eba57122496c3160f9d46b4f4a7959b6d5ec44e5aeb5135029efdb43774d493966758757f6818ddd024fc7ab5b99d73d096f2a79246d7a805208b6c8908190fd602abecd562317be473e6bbe8836b211a4df91f86c40abbdb3641614fa3e51df0de3da7dd281b5ddcc515e7ceedffbcbfbdfaae03dff8a2cf64d1fa24a2e7ce74a06e0f85ab8fa90896db85b987be2a9cadd965e010dbcef81fa979871d36386f8324d87ec2e64c82efcddf4b08ff49618acf7776ceac15538dc2e5c33868d1fed9f2d24c07bc35e1ad70fc480d091dc00bbdb2e758215449b05c780213270652b1eddf27d7254e2a919ce98893dbc5b564b63f51903ea6fa42b993df32342a53a5cb4508a436b7e7366a71dcb37cf949d03bc557418f9270a553765bf4a5f5dc68c61db014a6e0de411570db5f63fac6db0694b8909d250e67cf5c743428453ad2eb80b5525ba120f1f065de76fbb0bea2bc6fab60500b231400e75f9cd82453614c693eeeed1118f0340867c372dc84dccd9e2375a4065e133595dc2b21f85a2faa366ff86951633eed3bfd3d7b2d61eab85193281a8503a0bc88d0f585bdad41017c94d057d0f4f143634c138408927c489eb11ce0b7a22d5f2918ed8fee8ff07fda8c3caf610f26141456f03d86ae9054056bb66c0f3bb9d7bd25c663b0bcc570fe52b9b366538b4d1d69c31cdf1ac0780a083942655d808df68ef13a651c5d4204d49d5a4e1b8c738b2cd2ca92008c1b990b6b7748eb3d6c5f752a75fde8082eabb1808a6c65244420c056187690080b015a1ebc28dab2b9519821bbfcf6bf9c7e46b1a419663ede520d507079b6ef1c0c8e590a24b053969a0c37066a6a16b4e0056f7660a869c9f58ef438468318afa6559024f0af16a56b7c3c560844dc514d073b53742a5b8eea4e799ff28f4dd73d7c47a06f72eeaa7743174d522f0dd78db3c4a3fff8e95ca50c3c16a00ba66087409e8c330735539207313175e7d02325c7cc7abc7db7142e1617aa4fac899e82ba85de7fc5e12139b73ebeb1261ca0d9b0fa5f74a6163e9145e4f0ff5d952a500f2d88ab85fc05d53aa0fc8b623f98f7cdee86c5542b5fd9fe8e3b9befebd5b8d281b3aedbdd7137c495a4c86cf25e68a1c8a059f55c3ab56d7e473508a5ba1504d2d4d31cc29c4734e75d6a277ee733d9806ce7ba779c41e473e67161adffee0e84589e5b1fd2be84417ac41e813424b1c510f15b1bc5734d8830503aa5dc0b219401e705fce024e934e915af493660bbfb700231c58680cbdf361de44a7109dda46061dcfab8031e77bfd9c47ace8d90d7e8c061625389ee3fc70bf4eb7c82ee04d0c714f9d1bb42e461690157109f762eb0a5233c3dbb56790db652b56e479b6bd3d9d0b24cf0593810047e56bf0e7a24d641bdb31d1e77336b209cde6d3302ca806214639f0f86cba19d415e11bf2166fe7c9dc95f51e9bfa88e07abde4a14ada628f2b45478c68e7ccb8b6fc662f481e2c3d4f0f1c727011b5259c1f7ca1e0dd7dc12cd1a607bd12e04fa78a40dcfb739275f6adf060b50c6782ba089ef6c1be5ca67476d2a331fd903cea3b1d38c69d3732acfabff914ed47b503a1b3f90290dfc2fc87b3a9ec286195868508d8bab01670b491ca07b02ab7a1dba4b907e77244bb5eb161ea286dc2ddc81c9b7bb82bec7a0bb4cc5538ff075c8e0865ce69afc9914f7fd60c1f5a93122a9cb81f265647830ddef60af7a2be482b1fd652f9a1e60bbc9a7b9f7ad825292a4027582efe0fe345e9c9a69f92a9f5156933c551b934930682b6036c4869a2d736c21f8a5c9794c7109ab4c9c6bad44a2e6525dae9906b2f15c66831a35905e2bd0a5168e6a23df06e36b9070de28552af181e7d300a8a5f62aa905e6b2416ef99ba7c47e827ef2515e5f446bd08c9925c9b33a5863bf2464401aa607db29b7c49756ddf2e03af5c7206cb96ebac8efa35c83554017af519c066f943516416daea2bd07318203586a7de9b9e6f88ebf137e5560607e1e2aa8915087d86cd2f904ed2411eb5fdfc2512dfb9288f73ddadb6fd73b142119e67379d007cd530ff6fd053722f78b57b4d96b4ae8f246e3d7feb4ed16f34c6a751002d894998fda2eb811b861a09d5025414973992eca679d04ade01ae351bcf8ed61bb1128d2ee1a1fe323143ddbf4ab84f2199ffdd07b86a9f65b25c86ddd721d2c4b8fad066d0454415d800e54bd42efacb2e091d08746cc726c10ea673ad52bf63ca4a1745d7f14386ca5be15be5bc215a1dc70064f20db2c9d7244e197e19261e42ae60912ebabe5ea1a39d4018883b629da4f95e3d4950eac03831ad2ef4a40e7fb35394537b60651053803eb9f43632e70b08770036579c1cadf0d95d073cbf8bae7eaf30764214d0d9988de8909af9ca04e51987382f35a3ff6b5c726307c611a6b8cc6e08caffb400e884ce891720b1edc48a349123c96612ff4bb1f3013090d6e0b9f4b278c4099185a58b391b17dda3f14ac947949903085eb523c3c60ebf9755ca7e866bb6963d8aaf17744b2b44a029d9bcfa17ccabd10d6f0eca8e4b30f482ff224522be8c08a419dbb617edcc6ba92891e02ba71f79f6e0f86eaa9a46063e3632b4842f55bf0e89c9871c65f36ce41c6b312518d873808462786234b66620b33c28dfd25433cbe2d08ea3dad8195934eb4d1fd4299b43f87f3e5ea39440fe0f40ea53a243a6ea7f9d8d2b5d057d95e8e6f2937ee2506e0a9e2caec691423f2f5699e0d3d3f4d5d00e62fd20f638a748318d0175ba57158ac42c92456a37c77085c0ad8d14c2031aa8f479d35cfd5347c6a3d10043b57bdd9e8ef010640351db652ebcf44c7e3324d269c19ccef05fdcbb3c97deca11736840144e2", 0x2000, &(0x7f0000009400)={&(0x7f0000000180)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x1, 0x20840000, 0x7, 0x185, 0x5, 0x1e7, 0x0, 0x0, 0x10, 0xc}}, &(0x7f0000000280)={0x18, 0x0, 0x800, {0x5}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x2}}, &(0x7f0000000340)={0x18, 0x0, 0xc, {0x4}}, &(0x7f0000000380)={0x18, 0x0, 0x9, {0x8}}, &(0x7f0000002400)={0x28, 0x0, 0xffffffff, {{0x4c77, 0x8, 0x2, r0}}}, &(0x7f0000002440)={0x60, 0xfffffffffffffffe, 0x81, {{0x8, 0xf8, 0x9, 0x81, 0xfffffffffffffff5, 0x1, 0xd6f, 0x3}}}, &(0x7f00000024c0)={0x18, 0x0, 0xe5, {0x5}}, &(0x7f00000041c0)=ANY=[@ANYBLOB="051d6c75f54d2e8d13000000000000000600000000000000272900"], &(0x7f0000002540)={0x20, 0x0, 0x5, {0x0, 0x10}}, 0x0, &(0x7f0000002740)={0x90, 0x0, 0x7, {0x2, 0x0, 0xffffffffffffffff, 0xf, 0x1, 0x1, {0x6, 0x10001, 0xb, 0x100, 0x2, 0x8, 0x4, 0x1, 0x8, 0x6000, 0x80000001, 0x0, 0x0, 0x4, 0x1}}}, &(0x7f0000002800)=ANY=[@ANYBLOB="d00000000000000004000001000000000200000000000000000000000000000002000000ff0700005c2e000000000000060000000000000001f8ffffffffffff0d0000007f00000073636865645f7377697463680000000006000000000000007f00000000000000010000001f02000000000000000000000500000000000000040000000000000004000000030000002a5d2e5b000000000200000000000000070000000000000000000000100000000400000000000000040000000000000004000000020000007d5dfedb00"], &(0x7f0000006b80)={0x518, 0x0, 0x4, [{{0x3, 0x3, 0x4887, 0x8, 0xffff, 0xffff, {0x131, 0x0, 0x3, 0x98, 0x0, 0x0, 0x78, 0xd5, 0x9, 0x4000, 0x5, 0x0, 0x0, 0x7, 0x7}}, {0x1, 0x3ff, 0x1, 0x3, '\x00'}}, {{0x2, 0x3, 0xf, 0x200, 0x6, 0x1ff, {0x0, 0x40, 0x5e09, 0xfffffffffffffff7, 0x45, 0xffffffffffffffff, 0x655, 0x4, 0xffffffff, 0x2000, 0x6, 0x0, 0x0, 0x9, 0x4}}, {0x6, 0x5, 0x0, 0x6}}, {{0x6, 0x0, 0x100000001, 0x2, 0x9, 0x79, {0x5, 0xf2b5, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x6, 0x8, 0x0, 0xa000, 0x6, 0x0, 0x0, 0x3ff, 0x3}}, {0x0, 0xfffffffffffffbff, 0xd, 0x5, 'sched_switch\x00'}}, {{0x3, 0x3, 0x7, 0x7ff, 0x5, 0x0, {0x4, 0xc639, 0x81, 0xce1, 0x2, 0x3, 0x3, 0x6, 0x24e, 0x4000, 0xabd, 0x0, 0x0, 0x80, 0x5}}, {0x4, 0xdf95, 0x1, 0x101, '\x00'}}, {{0x5, 0x0, 0x1a, 0x6, 0x1, 0xd, {0x1, 0x0, 0xf, 0x80000000, 0x2, 0x3ff, 0xffffffff, 0xffff, 0x4d7, 0xc000, 0x81, 0x0, 0x0, 0x4, 0x6d8}}, {0x0, 0x0, 0x4, 0x400, 'GPL\x00'}}, {{0x5, 0x2, 0x5, 0x1, 0x4, 0x800, {0x6, 0x519, 0x8, 0x1, 0x5, 0x2, 0xf, 0x60000000, 0x1ff, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x7e}}, {0x0, 0x2a5, 0x4, 0x2, 'GPL\x00'}}, {{0x6, 0x2, 0x1, 0x4, 0x1, 0xeda5, {0x4, 0xaf9, 0x1ff, 0x8, 0x1, 0x40, 0x821, 0x71, 0x9, 0xc000, 0x9, 0x0, 0x0, 0x4, 0x7fffffff}}, {0x4, 0x4e82, 0x4, 0xfffffffd, '.\\*&'}}, {{0x1, 0x0, 0x6, 0x3, 0xc8, 0x6, {0x3, 0x4, 0x8, 0x8a39, 0x3, 0x0, 0x9, 0x6, 0x3ff, 0x0, 0x40e, 0x0, 0x0, 0x8000, 0x7}}, {0x0, 0x4, 0xd, 0x8, 'sched_switch\x00'}}]}, &(0x7f0000007180)={0xa0, 0x0, 0x9, {{0x4, 0x3, 0xffffffff, 0x90000000000000, 0x6, 0x2, {0x3, 0x4, 0x4, 0x7fff, 0x6, 0xfff, 0xc2, 0x8, 0x1, 0x4000, 0x3, 0x0, 0x0, 0x3, 0xf}}, {0x0, 0xd}}}, &(0x7f0000007240)={0x20, 0x0, 0x6, {0x16000000, 0x0, 0x7, 0x8}}, &(0x7f00000092c0)={0x130, 0xfffffffffffffffe, 0x0, {0x5, 0x1000, 0x0, '\x00', {0x100, 0x336, 0x1, 0x6, 0x0, r11, 0x8000, '\x00', 0x56, 0x9, 0xfffffffffffffffb, 0x8, {0x3ff, 0x7}, {0x80000000, 0x4}, {0xd4, 0x8}, {0x8, 0x8}, 0x200, 0x5, 0x401, 0x5}}}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x1}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.536280457s ago: executing program 0 (id=1756): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a", 0x6b}], 0x1}, 0x48002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xc, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x22}, 0x94) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250b00000008000300", @ANYRES32, @ANYBLOB="18005080050002000100000009000100482a9397f1000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r2, &(0x7f000000c400)={0x2020}, 0x2020) 1.455340556s ago: executing program 4 (id=1757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000c00)=""/102384, 0x18ff0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @remote}}}], 0x50}, 0x4008050) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01000000005c000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000000002400078008000500007d"], 0xd0}}, 0x80440d4) 1.430582755s ago: executing program 1 (id=1758): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000e9ffff06010040"]) socket(0xf, 0x4, 0x7ff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) unshare(0x2c020400) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r5, r4}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 1.305244216s ago: executing program 3 (id=1759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpcgss_bad_seqno\x00', r0}, 0x18) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x14, &(0x7f0000000bc0)="0022040000ffffebfffffffeffffff0700000000", 0x14) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x80000) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) socket$nl_route(0x10, 0x3, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x102, 0xa0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)=0x7) sched_setaffinity(r5, 0x8, &(0x7f0000000140)=0xffffffffffffffff) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x5422) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000001180)=0x2000000) 1.131401539s ago: executing program 1 (id=1760): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000500), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) mount(&(0x7f0000000380)=@sg0, &(0x7f00000003c0)='./cgroup/../file0\x00', &(0x7f0000000400)='cifs\x00', 0x5008, &(0x7f00000004c0)='cgroup.threads\x00') write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) 748.185057ms ago: executing program 1 (id=1761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) 721.797504ms ago: executing program 3 (id=1762): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) pipe(&(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) 681.182399ms ago: executing program 1 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={r3, 0xcb8}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c011}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x2, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) migrate_pages(0x0, 0x2, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x3ff) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r11 = accept(r10, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r11, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r11) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x12c, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IE={0x102, 0x2a, [@tim={0x5, 0xf4, {0x2, 0x3b, 0x3, "3745decb1998fbb5ec59183fd93264a4dee69278d7b072bce4e645f724fbdd2729eae77a6e3fd1516d74633ca1bab7699beb37351e673be56927ba8295abaa994b6b05103f9be6a1c2b10f3ec2f40f2e454584a1e9fb7a3333ad793d2ec4110c2340ed6432f4cfb1ed7798e08a24ce62180574eb7e5cc19726e1a75729b90aba0c3e89c3cf2d9def37569b83e3ffa8bc5b884d433f6838ff6682342115058b1b38e29e942e08594355b3c7ec86abf46a48090cd6c5f446d16c923bafdfc2d744773e522cc91345571329af318b95d8e58c17f3040cce81c8c3178e3ed346976f997c7fe73a526bd562494b64401450035c"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x30000}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4044001}, 0x44) 533.355256ms ago: executing program 4 (id=1764): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d10402064d8c57ff202030109021b0001000000000904"], 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000030000000000000000"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000800)) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f00000002c0)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/224, &(0x7f00000006c0)=""/103, &(0x7f0000000480)=""/65}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x100000, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000100003040000000002dcdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005007fce1a1beedaabb88635d2597f136f1da778122c30b5c1e91005d536a7bba4ab438df663c59fe415d922ce93dc2201c2590b0d638b08a7646ecf38027d235284703c9d101195f8b93ff84169c67e7757636f90a89151d23a02961bc055c3647397a52e7f2ca09562f08d3b99fe544964e1486e16b3241e19823bb528e0acbcd9782e1660d3ae286478b6affba8bfe038307c79b24b7daa421b4221c52b5daab3f67d7a881d928687b8be398194b5408cf438ac170091d378fc314c865c84c63e4f29a0e1c6357e8355c2d8dbd1c8f62f6d85128052e1067f00000000"], 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) 462.186009ms ago: executing program 0 (id=1765): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000000040)=[{0x2, 0x2200, 0x1, &(0x7f00000001c0)='W'}], 0x1}) 0s ago: executing program 5 (id=1766): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000008f7f36253a3eaeb9b2841eb4ef365478e9bdda3b8394dd93c28cb978c68e144bd8119b2b73f1525e94f6d524a97664c294e3fab0923e0e757610965399f19a7119c3e05a43a27a9d5462b5336535916c06558b"], 0x20}, 0x1, 0x4801000000000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r3, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000480)=0x7f) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000400)={0xf76, 0x7, 0x8, 0x8000a, 0x11, "d571de9262f6f2757c7f61487c169bb1af8f87"}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x13}}, 0x14) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r7, 0x0, 0x25, 0x2, @val=@kprobe_multi=@syms={0x1, 0x4, &(0x7f0000000700)=[&(0x7f00000005c0)='netdevsim0\x00', &(0x7f0000000600)=')(S\x00', &(0x7f0000000640)='netdevsim0\x00', &(0x7f0000000680)='/]\x00'], 0x0, 0x7}}, 0x30) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r9}, 0x94) kernel console output (not intermixed with test programs): 5900] usb 2-1: can't read configurations, error -22 [ 492.889936][ T5900] usb usb2-port1: unable to enumerate USB device [ 493.117886][T10851] vhci_hcd: connection reset by peer [ 493.130817][ T30] audit: type=1400 audit(1752903672.641:1853): avc: denied { rename } for pid=10890 comm="syz.0.1210" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 493.168080][ T36] vhci_hcd: stop threads [ 493.187742][T10901] x_tables: duplicate underflow at hook 2 [ 493.194260][ T36] vhci_hcd: release socket [ 493.217176][ T36] vhci_hcd: disconnect device [ 493.224768][T10901] fuse: Bad value for 'user_id' [ 493.250009][T10901] fuse: Bad value for 'user_id' [ 493.264741][T10904] (syz.1.1213,10904,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 493.277722][T10904] o2cb: This node has not been configured. [ 493.283701][T10904] o2cb: Cluster check failed. Fix errors before retrying. [ 493.292186][T10904] (syz.1.1213,10904,0):user_dlm_register:674 ERROR: status = -22 [ 493.299977][T10904] (syz.1.1213,10904,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 493.321854][T10904] o2cb: This node has not been configured. [ 493.328517][T10904] o2cb: Cluster check failed. Fix errors before retrying. [ 493.337536][T10904] (syz.1.1213,10904,0):user_dlm_register:674 ERROR: status = -22 [ 493.347235][T10904] (syz.1.1213,10904,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 493.410737][ T5893] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 493.466586][T10904] o2cb: This node has not been configured. [ 493.494404][T10904] o2cb: Cluster check failed. Fix errors before retrying. [ 493.506079][T10904] (syz.1.1213,10904,1):user_dlm_register:674 ERROR: status = -22 [ 493.517768][T10904] (syz.1.1213,10904,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 493.601122][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 493.633078][ T30] audit: type=1400 audit(1752903673.141:1854): avc: denied { read } for pid=10910 comm="syz.4.1214" name="/" dev="configfs" ino=1237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 493.686099][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 493.730587][ T5893] usb 1-1: string descriptor 0 read error: -22 [ 493.754693][ T5893] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 493.765355][ T30] audit: type=1400 audit(1752903673.141:1855): avc: denied { open } for pid=10910 comm="syz.4.1214" path="/262/file0" dev="configfs" ino=1237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 493.788419][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.816403][ T30] audit: type=1400 audit(1752903673.151:1856): avc: denied { read write } for pid=10910 comm="syz.4.1214" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 493.978519][ T30] audit: type=1400 audit(1752903673.151:1857): avc: denied { open } for pid=10910 comm="syz.4.1214" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 494.009570][ T30] audit: type=1400 audit(1752903673.191:1858): avc: denied { map } for pid=10910 comm="syz.4.1214" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 494.225028][T10924] 9pnet_fd: Insufficient options for proto=fd [ 494.236913][T10924] siw: device registration error -23 [ 494.803296][ T5893] asix 1-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 494.835137][ T30] audit: type=1400 audit(1752903673.331:1859): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 494.896335][ T5893] asix 1-1:7.0: probe with driver asix failed with error -71 [ 494.910081][ T5893] usb 1-1: USB disconnect, device number 24 [ 495.644794][T10934] Can't find ip_set type bac [ 496.199224][T10948] bad cache= option: no%e [ 496.199224][T10948] [ 496.206013][T10948] CIFS: VFS: bad cache= option: no%e [ 496.421182][ T916] usb 36-1: device descriptor read/8, error -110 [ 496.694549][ T30] audit: type=1400 audit(1752903675.711:1860): avc: denied { ioctl } for pid=10947 comm="syz.0.1223" path="socket:[37986]" dev="sockfs" ino=37986 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 496.964701][T10957] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 496.971236][T10957] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 497.108115][T10957] vhci_hcd vhci_hcd.0: Device attached [ 497.132784][ T916] usb usb36-port1: attempt power cycle [ 497.215913][T10970] tmpfs: Unknown parameter 'quo' [ 497.234914][T10970] 9pnet_fd: Insufficient options for proto=fd [ 497.246064][T10970] siw: device registration error -23 [ 497.391111][ T43] usb 34-1: SetAddress Request (14) to port 0 [ 497.675106][T10971] loop2: detected capacity change from 0 to 7 [ 497.756707][ T5914] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 497.935128][T10971] Dev loop2: unable to read RDB block 7 [ 497.942411][T10955] overlayfs: failed to resolve './file0': -2 [ 497.957667][T10971] loop2: AHDI p2 p3 [ 497.961701][T10971] loop2: partition table partially beyond EOD, truncated [ 497.968936][T10971] loop2: p3 start 335544320 is beyond EOD, truncated [ 497.984045][ T43] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 498.125169][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 498.213578][ T5914] usb 1-1: no configurations [ 498.218279][ T5914] usb 1-1: can't read configurations, error -22 [ 498.440843][ T5914] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 498.510412][ T916] usb usb36-port1: unable to enumerate USB device [ 498.940895][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 499.480071][ T5914] usb 1-1: no configurations [ 499.486048][ T5914] usb 1-1: can't read configurations, error -22 [ 499.503143][ T5914] usb usb1-port1: attempt power cycle [ 500.086015][T10993] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 500.092546][T10993] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 500.101457][ T5914] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 500.125255][ T5914] usb 1-1: device descriptor read/8, error -71 [ 500.188435][T10993] vhci_hcd vhci_hcd.0: Device attached [ 500.215130][T10998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=10998 comm=syz.4.1237 [ 500.234661][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 500.351574][T10961] vhci_hcd: connection reset by peer [ 500.577195][T10995] vhci_hcd: connection closed [ 500.588117][ T30] audit: type=1400 audit(1752903680.091:1861): avc: denied { ioctl } for pid=10992 comm="syz.1.1239" path="socket:[38192]" dev="sockfs" ino=38192 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 500.620111][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 500.624580][ T1109] vhci_hcd: stop threads [ 500.648301][ T1109] vhci_hcd: release socket [ 500.679757][ T1109] vhci_hcd: disconnect device [ 500.696038][ T1109] vhci_hcd: stop threads [ 500.706923][ T1109] vhci_hcd: release socket [ 500.717145][ T1109] vhci_hcd: disconnect device [ 500.720763][ T916] vhci_hcd: vhci_device speed not set [ 501.013828][T11005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11005 comm=syz.5.1241 [ 501.057652][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.114876][T11009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.264832][T11012] lo speed is unknown, defaulting to 1000 [ 501.299052][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1241'. [ 501.321758][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1241'. [ 501.355717][T11012] dummy0 speed is unknown, defaulting to 1000 [ 501.797503][T11018] tmpfs: Unknown parameter 'quo' [ 501.816889][T11018] 9pnet_fd: Insufficient options for proto=fd [ 501.827229][T11018] siw: device registration error -23 [ 503.120975][ T43] usb 34-1: device descriptor read/8, error -110 [ 503.267135][T11028] loop2: detected capacity change from 0 to 7 [ 503.336292][T11026] netlink: 'syz.1.1247': attribute type 12 has an invalid length. [ 503.358279][T11026] netlink: 'syz.1.1247': attribute type 29 has an invalid length. [ 503.492435][T11026] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1247'. [ 503.492513][T11028] Dev loop2: unable to read RDB block 7 [ 503.520963][T11026] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1247'. [ 503.543062][T11028] loop2: AHDI p2 p3 [ 503.547025][T11028] loop2: partition table partially beyond EOD, truncated [ 503.551389][ T43] usb usb34-port1: attempt power cycle [ 503.586445][T11028] loop2: p3 start 335544320 is beyond EOD, truncated [ 503.794960][T11035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11035 comm=syz.3.1249 [ 504.132811][ T43] usb usb34-port1: unable to enumerate USB device [ 504.146137][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 504.330911][T11041] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.339678][T11041] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.348428][T11041] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.357158][T11041] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.640233][T11050] loop2: detected capacity change from 0 to 7 [ 504.669316][T11050] Dev loop2: unable to read RDB block 7 [ 504.675501][T11050] loop2: AHDI p2 p3 [ 504.681906][T11050] loop2: partition table partially beyond EOD, truncated [ 504.693335][T11050] loop2: p3 start 335544320 is beyond EOD, truncated [ 504.893989][T11052] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1254'. [ 505.846101][T11058] 9pnet_fd: Insufficient options for proto=fd [ 505.953690][T11062] 9pnet_fd: Insufficient options for proto=fd [ 505.970712][T11062] siw: device registration error -23 [ 508.511825][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 508.787775][T11090] input: syz1 as /devices/virtual/input/input8 [ 508.850929][T11091] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1267'. [ 509.311066][ T5900] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 509.618579][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 509.693451][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 85, changing to 10 [ 509.835824][T11100] loop2: detected capacity change from 0 to 7 [ 509.934402][T11100] Dev loop2: unable to read RDB block 7 [ 509.940156][T11100] loop2: AHDI p2 p3 [ 509.944760][T11100] loop2: partition table partially beyond EOD, truncated [ 509.955839][T11100] loop2: p3 start 335544320 is beyond EOD, truncated [ 510.031113][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49664, setting to 1024 [ 510.042397][ T5900] usb 2-1: New USB device found, idVendor=2087, idProduct=0a01, bcdDevice= 0.00 [ 510.060558][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.079438][ T5900] usb 2-1: config 0 descriptor?? [ 510.153146][T11099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.507733][ T5900] hid-generic 0003:2087:0A01.0007: hidraw0: USB HID v0.00 Device [HID 2087:0a01] on usb-dummy_hcd.1-1/input0 [ 510.781983][T11109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1271'. [ 512.333153][T11119] loop2: detected capacity change from 0 to 7 [ 512.343457][T11119] Dev loop2: unable to read RDB block 7 [ 512.349183][T11119] loop2: AHDI p2 p3 [ 512.353286][T11119] loop2: partition table partially beyond EOD, truncated [ 512.364189][T11119] loop2: p3 start 335544320 is beyond EOD, truncated [ 512.635720][ T5900] usb 2-1: USB disconnect, device number 21 [ 512.973658][T11129] loop2: detected capacity change from 0 to 7 [ 513.170843][T11129] Dev loop2: unable to read RDB block 7 [ 513.177334][T11129] loop2: AHDI p2 p3 [ 513.216259][T11129] loop2: partition table partially beyond EOD, truncated [ 513.224417][T11129] loop2: p3 start 335544320 is beyond EOD, truncated [ 513.241229][ T30] audit: type=1326 audit(1752903692.751:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.0.1278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x0 [ 513.402936][T11135] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1279'. [ 514.194110][T11137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.167599][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1283'. [ 515.720744][T11155] tmpfs: Unknown parameter 'quot' [ 515.750413][T11155] 9pnet_fd: Insufficient options for proto=fd [ 515.762431][T11155] siw: device registration error -23 [ 516.437664][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 516.578997][T11160] loop2: detected capacity change from 0 to 7 [ 516.603177][T11160] Dev loop2: unable to read RDB block 7 [ 516.609341][T11160] loop2: AHDI p2 p3 [ 516.613942][T11160] loop2: partition table partially beyond EOD, truncated [ 516.626914][T11160] loop2: p3 start 335544320 is beyond EOD, truncated [ 517.049149][T11165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11165 comm=syz.1.1289 [ 517.099935][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 517.188565][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 517.427969][T11170] overlayfs: failed to resolve './file0': -2 [ 517.680772][T11174] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1292'. [ 518.658574][T11179] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 519.250123][ T30] audit: type=1400 audit(1752903698.751:1863): avc: denied { read } for pid=11175 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 519.732393][T11187] netlink: 'syz.0.1295': attribute type 12 has an invalid length. [ 519.740248][T11187] netlink: 'syz.0.1295': attribute type 29 has an invalid length. [ 519.848170][T11189] ip6t_rpfilter: unknown options [ 519.982103][T11187] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1295'. [ 520.232412][T11187] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1295'. [ 520.396075][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1299'. [ 520.993534][T11210] loop2: detected capacity change from 0 to 7 [ 521.070769][T11210] Dev loop2: unable to read RDB block 7 [ 521.076480][T11210] loop2: AHDI p2 p3 [ 521.080495][T11210] loop2: partition table partially beyond EOD, truncated [ 521.091832][T11210] loop2: p3 start 335544320 is beyond EOD, truncated [ 522.353239][T11226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11226 comm=syz.0.1306 [ 522.486811][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 522.615814][ T30] audit: type=1400 audit(1752903702.091:1864): avc: denied { mount } for pid=11217 comm="syz.0.1306" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 522.691555][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 525.483068][T11255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11255 comm=syz.3.1315 [ 525.497884][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 525.531233][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 525.784558][ T30] audit: type=1326 audit(1752903705.301:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319f8e9a9 code=0x7ffc0000 [ 525.821386][T11271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11271 comm=syz.0.1318 [ 525.847196][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 526.079886][ T30] audit: type=1326 audit(1752903705.311:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff319f8e9a9 code=0x7ffc0000 [ 526.364835][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 527.050563][ T30] audit: type=1326 audit(1752903705.319:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319f8e9a9 code=0x7ffc0000 [ 527.103449][ T30] audit: type=1326 audit(1752903705.319:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff319f8d45f code=0x7ffc0000 [ 527.227706][ T30] audit: type=1326 audit(1752903705.319:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319f8e9a9 code=0x7ffc0000 [ 527.304371][ T30] audit: type=1326 audit(1752903705.319:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff319f8e9a9 code=0x7ffc0000 [ 527.397798][ T30] audit: type=1326 audit(1752903705.319:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319f8e9a9 code=0x7ffc0000 [ 527.423938][ T30] audit: type=1326 audit(1752903705.319:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff319f8e9a9 code=0x7ffc0000 [ 527.898596][ T30] audit: type=1326 audit(1752903705.319:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319f8e9a9 code=0x7ffc0000 [ 527.958800][ T30] audit: type=1326 audit(1752903705.319:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.4.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff319f8e9a9 code=0x7ffc0000 [ 529.296287][T11300] 9pnet_fd: Insufficient options for proto=fd [ 529.317477][T11300] siw: device registration error -23 [ 531.271367][T11318] fuse: Invalid rootmode [ 531.327963][T11318] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 531.336057][T11318] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1332'. [ 531.726618][T11320] loop2: detected capacity change from 0 to 7 [ 531.862943][T11320] Dev loop2: unable to read RDB block 7 [ 531.868632][T11320] loop2: AHDI p2 p3 [ 531.890968][T11320] loop2: partition table partially beyond EOD, truncated [ 532.218302][T11320] loop2: p3 start 335544320 is beyond EOD, truncated [ 533.058121][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 533.058137][ T30] audit: type=1326 audit(1752903712.559:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 533.730441][ T30] audit: type=1326 audit(1752903712.559:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 533.808862][ T30] audit: type=1326 audit(1752903712.559:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 533.962768][ T30] audit: type=1326 audit(1752903712.570:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 534.087100][T11346] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1337'. [ 534.096420][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1337'. [ 534.126508][ T30] audit: type=1326 audit(1752903712.570:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 534.155354][ T30] audit: type=1326 audit(1752903712.570:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e0ef8d45f code=0x7ffc0000 [ 534.190336][ T30] audit: type=1326 audit(1752903712.570:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 534.214671][ T30] audit: type=1326 audit(1752903712.570:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 534.360200][T11351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1342'. [ 534.980709][ T30] audit: type=1326 audit(1752903712.570:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 535.044891][ T30] audit: type=1326 audit(1752903712.570:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 535.117154][T11353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.097395][T11367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11367 comm=syz.0.1345 [ 536.154671][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 536.341526][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 536.773476][T11376] loop2: detected capacity change from 0 to 7 [ 536.789099][T11376] Dev loop2: unable to read RDB block 7 [ 536.794853][T11376] loop2: AHDI p2 p3 [ 536.798903][T11376] loop2: partition table partially beyond EOD, truncated [ 536.807688][T11376] loop2: p3 start 335544320 is beyond EOD, truncated [ 537.156288][T11377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11377 comm=syz.0.1348 [ 537.215762][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 537.255563][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 537.835465][T11387] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1350'. [ 537.853746][T11388] 9pnet_fd: Insufficient options for proto=fd [ 537.877783][T11388] siw: device registration error -23 [ 540.537636][T11394] loop2: detected capacity change from 0 to 7 [ 540.555605][T11394] Dev loop2: unable to read RDB block 7 [ 540.561440][T11394] loop2: AHDI p2 p3 [ 540.580793][T11394] loop2: partition table partially beyond EOD, truncated [ 540.698242][T11394] loop2: p3 start 335544320 is beyond EOD, truncated [ 542.655563][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 542.655580][ T30] audit: type=1326 audit(1752903722.140:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.5.1361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x0 [ 542.765732][T11423] lo speed is unknown, defaulting to 1000 [ 542.805313][T11423] dummy0 speed is unknown, defaulting to 1000 [ 542.978538][T11435] tmpfs: Unknown parameter 'quo' [ 543.012727][T11435] 9pnet_fd: Insufficient options for proto=fd [ 543.030355][T11435] siw: device registration error -23 [ 543.636267][T11441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1366'. [ 544.372956][T11442] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 544.379489][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 544.409856][T11442] vhci_hcd vhci_hcd.0: Device attached [ 544.610692][ T5893] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 544.614293][T11453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11453 comm=syz.1.1368 [ 544.781618][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 544.791998][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 544.820957][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 544.834810][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 544.845499][ T5893] usb 1-1: can't read configurations, error -61 [ 544.882748][ T5900] usb 34-1: SetAddress Request (18) to port 0 [ 544.910750][ T5900] usb 34-1: new SuperSpeed USB device number 18 using vhci_hcd [ 544.915434][T11456] lo speed is unknown, defaulting to 1000 [ 544.980933][ T5893] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 544.985778][T11459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11459 comm=syz.3.1370 [ 545.020111][T11456] dummy0 speed is unknown, defaulting to 1000 [ 545.078155][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 545.268000][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 545.300451][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 545.308777][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 545.321160][ T5893] usb 1-1: can't read configurations, error -61 [ 545.461226][ T5893] usb usb1-port1: attempt power cycle [ 545.572330][T11466] tmpfs: Unknown parameter 'quo' [ 545.605710][T11466] 9pnet_fd: Insufficient options for proto=fd [ 545.622931][T11466] siw: device registration error -23 [ 545.966095][T11467] netlink: 'syz.5.1372': attribute type 2 has an invalid length. [ 546.074978][ T30] audit: type=1326 audit(1752903725.570:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 546.138237][ T30] audit: type=1326 audit(1752903725.570:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 546.272110][ T5893] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 546.325320][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 546.330808][ T30] audit: type=1326 audit(1752903725.580:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 546.357840][T11470] loop2: detected capacity change from 0 to 7 [ 546.840857][ T30] audit: type=1326 audit(1752903725.580:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 546.878234][T11470] Dev loop2: unable to read RDB block 7 [ 546.883875][T11470] loop2: AHDI p2 p3 [ 546.887792][T11470] loop2: partition table partially beyond EOD, truncated [ 546.895021][T11470] loop2: p3 start 335544320 is beyond EOD, truncated [ 546.949198][T11443] vhci_hcd: connection reset by peer [ 546.967111][T11467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 546.977107][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 546.991222][ T5893] usb 1-1: can't read configurations, error -71 [ 546.995415][ T1173] vhci_hcd: stop threads [ 547.000280][ T30] audit: type=1326 audit(1752903725.580:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 547.085612][ T30] audit: type=1326 audit(1752903725.580:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 547.137728][ T1173] vhci_hcd: release socket [ 547.178383][ T1173] vhci_hcd: disconnect device [ 547.315641][T11486] fuse: Invalid rootmode [ 547.348150][ T30] audit: type=1326 audit(1752903725.620:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 547.573868][T11483] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 547.581640][T11483] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1376'. [ 547.719398][T11494] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1378'. [ 547.728985][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1378'. [ 547.882454][T11495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1379'. [ 547.982169][ T30] audit: type=1326 audit(1752903725.620:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 548.433405][ T30] audit: type=1326 audit(1752903725.620:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 548.457164][ T30] audit: type=1326 audit(1752903725.650:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 548.481054][ T30] audit: type=1326 audit(1752903725.650:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 548.506035][ T30] audit: type=1326 audit(1752903725.650:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e5ab code=0x7ffc0000 [ 548.540402][ T30] audit: type=1326 audit(1752903725.650:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e5ab code=0x7ffc0000 [ 548.622535][ T30] audit: type=1326 audit(1752903725.650:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e5ab code=0x7ffc0000 [ 548.706330][ T30] audit: type=1326 audit(1752903725.650:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e5ab code=0x7ffc0000 [ 548.732985][ T30] audit: type=1326 audit(1752903725.810:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e5ab code=0x7ffc0000 [ 548.760913][ T30] audit: type=1326 audit(1752903725.810:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e5ab code=0x7ffc0000 [ 548.932774][T11502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11502 comm=syz.3.1381 [ 549.006621][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 549.155895][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 550.080856][ T5900] usb 34-1: device descriptor read/8, error -110 [ 550.536899][ T5900] usb usb34-port1: attempt power cycle [ 551.403306][T11522] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 551.409845][T11522] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 551.424271][T11522] vhci_hcd vhci_hcd.0: Device attached [ 551.631193][ T5900] usb usb34-port1: unable to enumerate USB device [ 552.400099][T11521] lo speed is unknown, defaulting to 1000 [ 552.411980][T11521] dummy0 speed is unknown, defaulting to 1000 [ 552.553997][T11540] fuse: Invalid rootmode [ 552.583476][T11540] netlink: 'syz.0.1390': attribute type 1 has an invalid length. [ 552.591379][T11540] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1390'. [ 552.807311][T10769] usb 40-1: SetAddress Request (6) to port 0 [ 552.835086][T10769] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 552.850635][ T1209] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 552.888625][T11541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.002739][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 553.016737][ T1209] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 553.025250][ T1209] usb 4-1: can't read configurations, error -61 [ 553.229509][T11547] fuse: Invalid rootmode [ 553.294955][T11546] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 553.302904][T11546] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1391'. [ 553.415115][T11549] netlink: 'syz.0.1392': attribute type 2 has an invalid length. [ 553.440931][ T1209] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 553.645251][T11553] fuse: Invalid rootmode [ 553.712537][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 553.712552][ T30] audit: type=1326 audit(1752903733.230:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 553.747170][T11553] netlink: 'syz.5.1393': attribute type 1 has an invalid length. [ 553.755212][T11553] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1393'. [ 553.926009][ T30] audit: type=1326 audit(1752903733.230:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 553.995661][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 554.020809][T11530] vhci_hcd: connection reset by peer [ 554.041711][ T1209] usb 4-1: device descriptor read/all, error -71 [ 554.055983][ T6683] vhci_hcd: stop threads [ 554.069327][ T6683] vhci_hcd: release socket [ 554.079003][ T1209] usb usb4-port1: attempt power cycle [ 554.099987][ T6683] vhci_hcd: disconnect device [ 554.111787][ T30] audit: type=1326 audit(1752903733.430:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 554.375709][T11560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11560 comm=syz.4.1394 [ 554.419483][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 554.590797][ T30] audit: type=1326 audit(1752903733.430:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 554.632937][ T30] audit: type=1326 audit(1752903733.430:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 554.657794][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 554.724276][ T30] audit: type=1326 audit(1752903733.590:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 554.926902][ T30] audit: type=1326 audit(1752903733.590:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 555.608034][ T30] audit: type=1326 audit(1752903733.590:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a71f8e5ab code=0x7ffc0000 [ 556.059972][ T30] audit: type=1326 audit(1752903733.590:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a71f8e5ab code=0x7ffc0000 [ 556.100688][ T30] audit: type=1326 audit(1752903733.590:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.0.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a71f8e5ab code=0x7ffc0000 [ 556.915562][T11589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11589 comm=syz.1.1402 [ 557.203666][T11594] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1400'. [ 557.224495][T11595] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1400'. [ 557.458621][T11593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.459776][T11591] lo speed is unknown, defaulting to 1000 [ 557.497948][T11591] dummy0 speed is unknown, defaulting to 1000 [ 557.790857][T11600] 9pnet_fd: Insufficient options for proto=fd [ 557.801527][T11600] siw: device registration error -23 [ 558.001124][T10769] usb 40-1: device descriptor read/8, error -110 [ 558.216252][T11602] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 558.222798][T11602] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 558.258859][T11602] vhci_hcd vhci_hcd.0: Device attached [ 558.530724][T11510] usb 36-1: SetAddress Request (14) to port 0 [ 558.536931][T11510] usb 36-1: new SuperSpeed USB device number 14 using vhci_hcd [ 558.779328][T10769] usb usb40-port1: attempt power cycle [ 558.841038][ T5949] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 559.160695][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 559.169993][ T5949] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 559.239635][ T5949] usb 2-1: can't read configurations, error -61 [ 559.544714][T10769] usb usb40-port1: unable to enumerate USB device [ 559.590854][ T5949] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 560.320690][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 561.762826][T11603] vhci_hcd: connection reset by peer [ 561.765922][ T5949] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 561.776195][ T3506] vhci_hcd: stop threads [ 561.780451][ T3506] vhci_hcd: release socket [ 561.941833][ T5949] usb 2-1: can't read configurations, error -71 [ 561.951091][ T3506] vhci_hcd: disconnect device [ 561.959018][ T5949] usb usb2-port1: attempt power cycle [ 562.541816][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.065626][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 563.065643][ T30] audit: type=1326 audit(1752903742.580:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 563.170656][ T30] audit: type=1326 audit(1752903742.580:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 563.248670][ T30] audit: type=1326 audit(1752903742.660:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 563.275637][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.317343][ T30] audit: type=1326 audit(1752903742.665:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 563.368504][ T30] audit: type=1326 audit(1752903742.665:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a71f8d45f code=0x7ffc0000 [ 563.679804][T11657] 9pnet_fd: Insufficient options for proto=fd [ 563.690513][T11657] siw: device registration error -23 [ 564.091199][ T30] audit: type=1326 audit(1752903742.665:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 564.119167][ T30] audit: type=1326 audit(1752903742.665:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 564.148382][ T30] audit: type=1326 audit(1752903742.665:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 564.162683][T11510] usb 36-1: device descriptor read/8, error -110 [ 564.174023][ T30] audit: type=1326 audit(1752903742.665:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 564.204558][ T30] audit: type=1326 audit(1752903742.665:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a71f8e9a9 code=0x7ffc0000 [ 564.637246][T11510] usb usb36-port1: attempt power cycle [ 565.185189][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 565.584116][T11510] usb usb36-port1: unable to enumerate USB device [ 565.895922][T11675] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 565.902473][T11675] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 566.018566][T11681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11681 comm=syz.0.1426 [ 566.297962][T11675] vhci_hcd vhci_hcd.0: Device attached [ 566.580780][ T5949] usb 36-1: SetAddress Request (18) to port 0 [ 566.586956][ T5949] usb 36-1: new SuperSpeed USB device number 18 using vhci_hcd [ 566.610989][T11510] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 566.737356][T11693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11693 comm=syz.5.1430 [ 566.783516][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 566.972634][T11690] overlayfs: failed to resolve './file0': -2 [ 567.001484][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 567.050738][T11510] usb 2-1: Using ep0 maxpacket: 16 [ 567.076535][T11510] usb 2-1: config 0 has no interfaces? [ 567.204037][T11510] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 567.517834][T11510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.527959][T11510] usb 2-1: config 0 descriptor?? [ 568.193213][T11678] vhci_hcd: connection reset by peer [ 568.198764][ T1109] vhci_hcd: stop threads [ 568.199063][T11510] usb 2-1: USB disconnect, device number 25 [ 568.207452][ T1109] vhci_hcd: release socket [ 568.238842][ T1109] vhci_hcd: disconnect device [ 568.369790][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1433'. [ 569.125821][T11707] netlink: 'syz.5.1434': attribute type 10 has an invalid length. [ 569.138114][T11707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.146612][T11707] team0: Port device bond0 added [ 569.309767][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1437'. [ 569.539446][T11723] fuse: Invalid rootmode [ 569.634523][T11723] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 569.642510][T11723] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1438'. [ 570.101508][T11732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1442'. [ 570.697473][T11733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11733 comm=syz.5.1441 [ 570.974081][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 570.974099][ T30] audit: type=1326 audit(1752903750.455:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 571.138432][T11738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11738 comm=syz.4.1443 [ 571.180765][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 571.432863][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 571.480832][ T30] audit: type=1326 audit(1752903750.455:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 571.691362][ T5949] usb 36-1: device descriptor read/8, error -110 [ 571.844548][ T30] audit: type=1326 audit(1752903750.455:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 571.872614][ T30] audit: type=1326 audit(1752903750.471:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 571.901265][ T30] audit: type=1326 audit(1752903750.471:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e0ef8d45f code=0x7ffc0000 [ 571.971472][ T30] audit: type=1326 audit(1752903750.471:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 572.015242][T11746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.096645][ T30] audit: type=1326 audit(1752903750.471:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 572.171541][ T5949] usb usb36-port1: attempt power cycle [ 572.235074][ T30] audit: type=1326 audit(1752903750.471:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 572.272942][T11760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1447'. [ 573.029926][ T30] audit: type=1326 audit(1752903750.481:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 573.208036][ T30] audit: type=1326 audit(1752903750.481:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.1.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 573.321665][T11765] 9pnet_fd: Insufficient options for proto=fd [ 573.332206][T11765] siw: device registration error -23 [ 573.706832][ T5949] usb usb36-port1: unable to enumerate USB device [ 574.478842][T11751] lo speed is unknown, defaulting to 1000 [ 574.573630][T11751] dummy0 speed is unknown, defaulting to 1000 [ 575.320691][T11776] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 575.327228][T11776] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 575.363835][T11776] vhci_hcd vhci_hcd.0: Device attached [ 575.641203][ T5949] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 575.652924][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 575.730631][T11510] usb 42-1: SetAddress Request (14) to port 0 [ 575.763701][T11510] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 575.793481][ T5949] usb 5-1: device descriptor read/64, error -32 [ 576.123292][T11794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1455'. [ 576.859533][T11796] binder: 11790:11796 ioctl c0306201 200000000900 returned -22 [ 576.873768][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 576.873786][ T30] audit: type=1400 audit(1752903756.371:2119): avc: denied { transfer } for pid=11790 comm="syz.1.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 576.912332][ T5949] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 577.131880][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 577.297174][ T5949] usb 5-1: config 0 has no interfaces? [ 577.319411][ T5949] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 577.340883][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.353129][ T5949] usb 5-1: config 0 descriptor?? [ 577.528285][T11806] fuse: Invalid rootmode [ 577.584430][T11806] netlink: 'syz.5.1459': attribute type 1 has an invalid length. [ 577.593060][T11806] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1459'. [ 577.746553][T11779] vhci_hcd: connection reset by peer [ 577.754726][ T5915] usb 5-1: USB disconnect, device number 16 [ 577.765623][ T1173] vhci_hcd: stop threads [ 577.769905][ T1173] vhci_hcd: release socket [ 577.802346][T11807] lo speed is unknown, defaulting to 1000 [ 577.826607][ T1173] vhci_hcd: disconnect device [ 577.872652][T11807] dummy0 speed is unknown, defaulting to 1000 [ 578.125422][T11816] 9pnet_fd: Insufficient options for proto=fd [ 578.865303][ T30] audit: type=1326 audit(1752903758.381:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 578.960678][ T30] audit: type=1326 audit(1752903758.411:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 579.656221][T11833] ALSA: mixer_oss: invalid OSS volume '' [ 579.842837][ T30] audit: type=1326 audit(1752903758.411:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 579.866887][ T30] audit: type=1326 audit(1752903758.415:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 580.085633][ T30] audit: type=1326 audit(1752903758.415:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e0ef8d45f code=0x7ffc0000 [ 580.273799][ T30] audit: type=1326 audit(1752903758.415:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 580.297642][ T30] audit: type=1326 audit(1752903758.415:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 580.417400][ T30] audit: type=1326 audit(1752903758.415:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 580.560882][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1467'. [ 581.000587][T11510] usb 42-1: device descriptor read/8, error -110 [ 581.064273][ T30] audit: type=1326 audit(1752903758.415:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 581.333548][T11850] lo speed is unknown, defaulting to 1000 [ 581.394985][T11850] dummy0 speed is unknown, defaulting to 1000 [ 581.411684][T11510] usb usb42-port1: attempt power cycle [ 581.592299][T11863] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1473'. [ 581.601513][T11863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 582.141399][T11510] usb usb42-port1: unable to enumerate USB device [ 582.827376][T11874] 9pnet_fd: Insufficient options for proto=fd [ 582.838096][T11874] siw: device registration error -23 [ 583.601170][T11862] Bluetooth: hci3: command 0x040f tx timeout [ 584.429553][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 584.429565][ T30] audit: type=1326 audit(1752903763.925:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.3.1477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284c98e9a9 code=0x0 [ 584.667176][T11891] FAULT_INJECTION: forcing a failure. [ 584.667176][T11891] name failslab, interval 1, probability 0, space 0, times 0 [ 584.680106][T11891] CPU: 0 UID: 0 PID: 11891 Comm: syz.0.1482 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 584.680123][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 584.680130][T11891] Call Trace: [ 584.680134][T11891] [ 584.680138][T11891] dump_stack_lvl+0x16c/0x1f0 [ 584.680162][T11891] should_fail_ex+0x512/0x640 [ 584.680180][T11891] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 584.680200][T11891] should_failslab+0xc2/0x120 [ 584.680211][T11891] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 584.680228][T11891] ? __d_alloc+0x31/0xaa0 [ 584.680242][T11891] __d_alloc+0x31/0xaa0 [ 584.680256][T11891] d_alloc+0x4a/0x1e0 [ 584.680268][T11891] d_alloc_parallel+0xe3/0x12e0 [ 584.680283][T11891] ? do_syscall_64+0xcd/0x4c0 [ 584.680299][T11891] ? __pfx_d_alloc_parallel+0x10/0x10 [ 584.680315][T11891] ? lockdep_init_map_type+0x5c/0x280 [ 584.680328][T11891] ? lockdep_init_map_type+0x5c/0x280 [ 584.680341][T11891] __lookup_slow+0x193/0x460 [ 584.680356][T11891] ? __pfx___lookup_slow+0x10/0x10 [ 584.680372][T11891] ? pcpu_balance_workfn+0x680/0xe00 [ 584.680392][T11891] ? pcpu_balance_workfn+0x680/0xe00 [ 584.680408][T11891] ? d_lookup+0xe7/0x190 [ 584.680425][T11891] lookup_noperm+0xe1/0x110 [ 584.680439][T11891] __do_sys_mq_unlink+0x2ac/0x4b0 [ 584.680456][T11891] do_syscall_64+0xcd/0x4c0 [ 584.680467][T11891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.680479][T11891] RIP: 0033:0x7f8a71f8e9a9 [ 584.680488][T11891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.680499][T11891] RSP: 002b:00007f8a72de8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 584.680510][T11891] RAX: ffffffffffffffda RBX: 00007f8a721b5fa0 RCX: 00007f8a71f8e9a9 [ 584.680517][T11891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 584.680523][T11891] RBP: 00007f8a72de8090 R08: 0000000000000000 R09: 0000000000000000 [ 584.680529][T11891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.680544][T11891] R13: 0000000000000000 R14: 00007f8a721b5fa0 R15: 00007ffd5b99f958 [ 584.680566][T11891] [ 585.061071][T11895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11895 comm=syz.5.1481 [ 585.316859][T11894] fuse: Invalid rootmode [ 585.516910][T11903] netlink: 'syz.0.1486': attribute type 12 has an invalid length. [ 585.570713][T11903] netlink: 'syz.0.1486': attribute type 29 has an invalid length. [ 585.647498][T11906] 9pnet_fd: Insufficient options for proto=fd [ 585.664380][T11906] siw: device registration error -23 [ 585.731061][T11903] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1486'. [ 586.116519][T11917] netlink: 'syz.5.1487': attribute type 13 has an invalid length. [ 586.135123][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1487'. [ 586.330668][ T5900] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 586.541309][T11924] siw: device registration error -23 [ 586.920639][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 586.927320][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.938426][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.959981][ T5900] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 586.994389][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.024344][ T5900] usb 2-1: config 0 descriptor?? [ 587.029409][ T30] audit: type=1400 audit(1752903766.535:2149): avc: denied { read } for pid=11925 comm="syz.4.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 587.226120][ T5900] hub 2-1:0.0: USB hub found [ 587.322935][ T30] audit: type=1400 audit(1752903766.555:2150): avc: denied { create } for pid=11925 comm="syz.4.1493" name="#32" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 588.314440][ T5900] hub 2-1:0.0: 1 port detected [ 588.383007][T11933] loop2: detected capacity change from 0 to 7 [ 588.398687][T11933] Dev loop2: unable to read RDB block 7 [ 588.409792][T11933] loop2: AHDI p2 p3 [ 588.421358][T11933] loop2: partition table partially beyond EOD, truncated [ 588.432290][ T30] audit: type=1400 audit(1752903766.555:2151): avc: denied { link } for pid=11925 comm="syz.4.1493" name="#32" dev="tmpfs" ino=1748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 588.459479][T11933] loop2: p3 start 335544320 is beyond EOD, truncated [ 588.516420][ T30] audit: type=1400 audit(1752903766.555:2152): avc: denied { rename } for pid=11925 comm="syz.4.1493" name="#33" dev="tmpfs" ino=1748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 588.940210][ T5900] hub 2-1:0.0: activate --> -90 [ 589.420129][T11941] lo speed is unknown, defaulting to 1000 [ 589.454971][T11941] dummy0 speed is unknown, defaulting to 1000 [ 589.719367][T10769] usb 2-1: USB disconnect, device number 26 [ 589.726683][T11946] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1499'. [ 589.860012][T11948] netlink: 'syz.5.1500': attribute type 12 has an invalid length. [ 589.892482][T11948] netlink: 'syz.5.1500': attribute type 29 has an invalid length. [ 589.909875][T11948] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1500'. [ 589.961550][ T5900] usb 2-1-port1: config error [ 590.234529][T11956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.428364][T11959] fuse: Invalid rootmode [ 590.906882][ T1209] IPVS: starting estimator thread 0... [ 591.011147][T11972] IPVS: using max 42 ests per chain, 100800 per kthread [ 591.036226][T11973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=11973 comm=syz.1.1508 [ 591.445711][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 591.463440][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 591.942282][T11982] lo speed is unknown, defaulting to 1000 [ 591.969352][T11982] dummy0 speed is unknown, defaulting to 1000 [ 592.132988][ T30] audit: type=1400 audit(1752903771.645:2153): avc: denied { ioctl } for pid=11992 comm="syz.1.1514" path="socket:[43109]" dev="sockfs" ino=43109 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 593.042056][ T30] audit: type=1400 audit(1752903772.555:2154): avc: denied { map } for pid=11983 comm="syz.4.1512" path="pipe:[41959]" dev="pipefs" ino=41959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 593.086017][ T30] audit: type=1400 audit(1752903772.555:2155): avc: denied { execute } for pid=11983 comm="syz.4.1512" path="pipe:[41959]" dev="pipefs" ino=41959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 594.383311][T12023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=12023 comm=syz.3.1522 [ 594.423672][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 594.548669][T12019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=12019 comm=syz.5.1521 [ 594.563705][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 594.674068][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1521'. [ 594.794759][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1521'. [ 598.129908][ T30] audit: type=1400 audit(1752903777.625:2156): avc: denied { execute } for pid=12052 comm="syz.0.1529" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 598.430211][T12054] misc userio: The device must be registered before sending interrupts [ 598.810686][T12033] FAULT_INJECTION: forcing a failure. [ 598.810686][T12033] name failslab, interval 1, probability 0, space 0, times 0 [ 598.840138][T12033] CPU: 1 UID: 0 PID: 12033 Comm: syz.3.1525 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 598.840159][T12033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.840166][T12033] Call Trace: [ 598.840171][T12033] [ 598.840175][T12033] dump_stack_lvl+0x16c/0x1f0 [ 598.840204][T12033] should_fail_ex+0x512/0x640 [ 598.840221][T12033] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 598.840239][T12033] should_failslab+0xc2/0x120 [ 598.840250][T12033] __kmalloc_cache_noprof+0x6a/0x3e0 [ 598.840265][T12033] ? nl80211_vendor_cmd_dump+0x39d/0x1670 [ 598.840285][T12033] nl80211_vendor_cmd_dump+0x39d/0x1670 [ 598.840304][T12033] ? __asan_memset+0x23/0x50 [ 598.840320][T12033] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 598.840337][T12033] ? __alloc_skb+0x200/0x380 [ 598.840353][T12033] ? __pfx___alloc_skb+0x10/0x10 [ 598.840373][T12033] genl_dumpit+0x122/0x230 [ 598.840389][T12033] netlink_dump+0x530/0xd00 [ 598.840402][T12033] ? __pfx_netlink_dump+0x10/0x10 [ 598.840418][T12033] ? __asan_memset+0x23/0x50 [ 598.840434][T12033] ? genl_start+0x67f/0x980 [ 598.840450][T12033] __netlink_dump_start+0x6d6/0x990 [ 598.840465][T12033] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 598.840481][T12033] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 598.840500][T12033] ? __pfx_genl_start+0x10/0x10 [ 598.840512][T12033] ? __pfx_genl_dumpit+0x10/0x10 [ 598.840525][T12033] ? __pfx_genl_done+0x10/0x10 [ 598.840547][T12033] ? bpf_lsm_capable+0x9/0x10 [ 598.840567][T12033] ? security_capable+0x7e/0x260 [ 598.840590][T12033] ? ns_capable+0xd7/0x110 [ 598.840612][T12033] genl_rcv_msg+0x46e/0x800 [ 598.840637][T12033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.840658][T12033] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 598.840691][T12033] netlink_rcv_skb+0x158/0x420 [ 598.840711][T12033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.840734][T12033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.840766][T12033] ? netlink_deliver_tap+0x1ae/0xd30 [ 598.840789][T12033] genl_rcv+0x28/0x40 [ 598.840809][T12033] netlink_unicast+0x58a/0x850 [ 598.840833][T12033] ? __pfx_netlink_unicast+0x10/0x10 [ 598.840861][T12033] netlink_sendmsg+0x8d1/0xdd0 [ 598.840884][T12033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.840914][T12033] ____sys_sendmsg+0xa95/0xc70 [ 598.840935][T12033] ? copy_msghdr_from_user+0x10a/0x160 [ 598.840961][T12033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.840995][T12033] ___sys_sendmsg+0x134/0x1d0 [ 598.841024][T12033] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.841049][T12033] ? __lock_acquire+0x622/0x1c90 [ 598.841100][T12033] __sys_sendmsg+0x16d/0x220 [ 598.841127][T12033] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.841173][T12033] do_syscall_64+0xcd/0x4c0 [ 598.841197][T12033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.841215][T12033] RIP: 0033:0x7f284c98e9a9 [ 598.841231][T12033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.841246][T12033] RSP: 002b:00007f284d861038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.841263][T12033] RAX: ffffffffffffffda RBX: 00007f284cbb5fa0 RCX: 00007f284c98e9a9 [ 598.841274][T12033] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000003 [ 598.841284][T12033] RBP: 00007f284d861090 R08: 0000000000000000 R09: 0000000000000000 [ 598.841294][T12033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.841304][T12033] R13: 0000000000000000 R14: 00007f284cbb5fa0 R15: 00007ffde2420388 [ 598.841328][T12033] [ 601.112297][T12085] 9pnet_fd: Insufficient options for proto=fd [ 601.164576][T12085] siw: device registration error -23 [ 601.698257][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1536'. [ 602.807540][T12101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=12101 comm=syz.4.1541 [ 603.642092][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 603.654220][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 603.742970][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 603.755469][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 603.765438][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 603.775584][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 605.378850][T12123] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 605.723884][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1549'. [ 606.269730][ T30] audit: type=1400 audit(1752903785.775:2157): avc: denied { getopt } for pid=12134 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 606.487359][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 606.818826][ T3506] Bluetooth: (null): Too short H5 packet [ 606.940339][ T3506] Bluetooth: (null): Invalid header checksum [ 607.041553][ T5900] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 607.062448][ T3506] Bluetooth: (null): Invalid header checksum [ 607.068587][ T3506] Bluetooth: (null): Invalid header checksum [ 607.148379][ T3506] Bluetooth: (null): Invalid header checksum [ 607.168826][T12158] loop2: detected capacity change from 0 to 7 [ 607.180865][ T3506] Bluetooth: (null): Invalid header checksum [ 607.197120][ T7228] Dev loop2: unable to read RDB block 7 [ 607.209276][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 607.220376][ T7228] loop2: AHDI p2 p3 [ 607.240484][ T5900] usb 1-1: unable to get BOS descriptor or descriptor too short [ 607.255246][ T7228] loop2: partition table partially beyond EOD, truncated [ 607.274013][ T5900] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 607.280768][ T7228] loop2: p3 start 335544320 is beyond EOD, truncated [ 607.356876][ T5900] usb 1-1: can't read configurations, error -71 [ 607.369101][T12158] Dev loop2: unable to read RDB block 7 [ 607.378926][T12158] loop2: AHDI p2 p3 [ 607.386897][T12162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.403270][T12158] loop2: partition table partially beyond EOD, truncated [ 607.423362][T12158] loop2: p3 start 335544320 is beyond EOD, truncated [ 607.648092][T11510] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 607.840794][T11510] usb 6-1: Using ep0 maxpacket: 8 [ 607.869736][T11510] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 608.005537][T11510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.013823][ T30] audit: type=1400 audit(1752903787.495:2158): avc: denied { read } for pid=12169 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 608.045784][T11510] usb 6-1: Product: syz [ 608.054921][T11510] usb 6-1: Manufacturer: syz [ 608.065953][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 608.075390][T11510] usb 6-1: SerialNumber: syz [ 608.098641][T11510] usb 6-1: config 0 descriptor?? [ 608.116555][T11510] gspca_main: se401-2.14.0 probing 047d:5003 [ 608.165989][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 608.546152][T11510] gspca_se401: ExtraFeatures: 188 [ 608.551361][T11510] gspca_se401: Too many frame sizes [ 608.793524][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.803155][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.877599][ T30] audit: type=1400 audit(1752903788.385:2159): avc: denied { ioctl } for pid=12159 comm="" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 608.901349][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.967364][ T30] audit: type=1400 audit(1752903788.435:2160): avc: denied { getopt } for pid=12159 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 608.987031][T11510] usb 6-1: USB disconnect, device number 5 [ 609.801479][ T30] audit: type=1400 audit(1752903788.615:2161): avc: denied { ioctl } for pid=12182 comm="syz.1.1567" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 610.110591][T12197] binder: 12182:12197 ioctl c0306201 2000000003c0 returned -14 [ 610.160765][ T30] audit: type=1400 audit(1752903789.655:2162): avc: denied { audit_read } for pid=12182 comm="syz.1.1567" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 610.181992][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.252756][T12183] overlayfs: failed to resolve './file0/file0': -107 [ 610.484580][T12205] trusted_key: encrypted_key: insufficient parameters specified [ 610.965545][T12210] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1570'. [ 610.976369][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1570'. [ 611.433739][T12208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.049803][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 612.234700][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 612.243757][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'. [ 612.352015][ T30] audit: type=1400 audit(1752903791.575:2163): avc: denied { firmware_load } for pid=12222 comm="syz.3.1577" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 612.659211][T12237] SELinux: Context Ü is not valid (left unmapped). [ 612.764046][ T30] audit: type=1400 audit(1752903792.275:2164): avc: denied { create } for pid=12236 comm="syz.0.1581" name="syz0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=DC [ 612.800286][T12239] loop2: detected capacity change from 0 to 7 [ 612.818550][T12239] Dev loop2: unable to read RDB block 7 [ 612.824563][T12239] loop2: AHDI p2 p3 [ 612.828997][T12239] loop2: partition table partially beyond EOD, truncated [ 612.839666][T12239] loop2: p3 start 335544320 is beyond EOD, truncated [ 613.102056][ T30] audit: type=1400 audit(1752903792.275:2165): avc: denied { associate } for pid=12236 comm="syz.0.1581" name="syz0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon=DC [ 613.141994][ T30] audit: type=1400 audit(1752903792.405:2166): avc: denied { create } for pid=12236 comm="syz.0.1581" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 613.164333][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.370937][ T5915] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 613.681479][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 613.749981][T12248] overlayfs: failed to resolve './file0': -2 [ 613.826770][ T5915] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 614.000972][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 614.029273][ T5915] usb usb2-port1: attempt power cycle [ 614.171827][ T1209] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 614.318559][T12263] lo speed is unknown, defaulting to 1000 [ 614.326186][T12263] dummy0 speed is unknown, defaulting to 1000 [ 614.340811][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 614.371842][ T1209] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 614.383708][ T5915] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 614.397789][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 614.410096][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 614.424012][ T1209] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 614.434488][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 614.443810][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.459959][ T1209] usb 4-1: config 0 descriptor?? [ 614.571036][T12256] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 614.578749][ T5915] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 614.603999][ T1209] hub 4-1:0.0: USB hub found [ 614.630036][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 614.638663][ T5915] usb usb2-port1: unable to enumerate USB device [ 614.812077][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.834701][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.904748][T12256] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 615.059270][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.077112][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.187606][ T1209] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 615.210471][ T1209] usbhid 4-1:0.0: can't add hid device: -71 [ 615.217715][ T1209] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 615.254278][ T1209] usb 4-1: USB disconnect, device number 26 [ 615.645612][T12286] 9pnet_fd: Insufficient options for proto=fd [ 615.663404][T12286] siw: device registration error -23 [ 616.074073][ T5915] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 616.268869][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 616.387765][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.511108][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.539523][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 616.549163][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 616.587122][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 616.652144][ T5915] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 616.697418][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.797343][T12301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1599'. [ 617.093036][ T5915] usb 6-1: config 0 descriptor?? [ 617.552654][T12299] overlayfs: failed to resolve './file0': -2 [ 617.617107][ T30] audit: type=1326 audit(1752903797.105:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.3.1601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284c98e9a9 code=0x0 [ 617.734571][ T5915] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 617.741754][ T5915] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 617.793334][ T5915] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 617.818607][T12313] loop2: detected capacity change from 0 to 7 [ 617.846849][ T5915] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 617.885656][ T5915] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 618.072143][T12281] netlink: 'syz.5.1594': attribute type 2 has an invalid length. [ 618.194603][ T5915] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 618.208063][T12313] Dev loop2: unable to read RDB block 7 [ 618.213915][T12313] loop2: AHDI p2 p3 [ 618.218008][T12313] loop2: partition table partially beyond EOD, truncated [ 618.227155][T12313] loop2: p3 start 335544320 is beyond EOD, truncated [ 618.250348][T12281] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1594'. [ 618.301158][T12318] netlink: 'syz.3.1605': attribute type 1 has an invalid length. [ 618.376544][ T5915] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 618.391922][ T5915] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 618.475466][ T5900] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 618.563014][ T5915] usb 6-1: USB disconnect, device number 6 [ 618.583317][ T5900] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 618.968663][ T5900] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 619.261195][ T5900] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 619.606689][T12329] loop2: detected capacity change from 0 to 7 [ 619.750454][T12327] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 619.799306][T12329] Dev loop2: unable to read RDB block 7 [ 619.805151][T12329] loop2: AHDI p2 p3 [ 619.809097][T12329] loop2: partition table partially beyond EOD, truncated [ 619.886056][ T30] audit: type=1400 audit(1752903799.385:2168): avc: denied { write } for pid=12337 comm="syz.0.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 619.909754][T12329] loop2: p3 start 335544320 is beyond EOD, truncated [ 619.947124][T12327] veth5: entered promiscuous mode [ 620.224875][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1611'. [ 620.450948][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1611'. [ 620.790298][T12354] siw: device registration error -23 [ 621.729279][T12365] netlink: 'syz.5.1620': attribute type 2 has an invalid length. [ 622.005096][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 622.718974][ T30] audit: type=1326 audit(1752903802.225:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 622.770774][ T24] usb 4-1: device descriptor read/64, error -71 [ 622.785560][T12374] 9pnet_fd: Insufficient options for proto=fd [ 622.824206][ T30] audit: type=1326 audit(1752903802.335:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 622.885756][T12371] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.010739][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 623.022434][ T30] audit: type=1326 audit(1752903802.335:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 623.063461][ T30] audit: type=1326 audit(1752903802.405:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 623.090264][T12382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1623'. [ 623.105966][ T30] audit: type=1326 audit(1752903802.405:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 623.159019][ T30] audit: type=1326 audit(1752903802.435:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 623.180689][ T24] usb 4-1: device descriptor read/64, error -71 [ 623.185998][ T30] audit: type=1326 audit(1752903802.435:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a24d8e9a9 code=0x7ffc0000 [ 623.411187][ T24] usb usb4-port1: attempt power cycle [ 623.639631][ T30] audit: type=1326 audit(1752903802.435:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e5ab code=0x7ffc0000 [ 623.708106][ T30] audit: type=1326 audit(1752903802.435:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e5ab code=0x7ffc0000 [ 623.759089][ T30] audit: type=1326 audit(1752903802.435:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a24d8e5ab code=0x7ffc0000 [ 623.936924][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.970673][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 624.005163][ T24] usb 4-1: device descriptor read/8, error -71 [ 624.316935][ T5915] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 624.360618][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 624.401177][ T24] usb 4-1: device descriptor read/8, error -71 [ 624.569502][ T24] usb usb4-port1: unable to enumerate USB device [ 624.602897][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 624.613134][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.623809][ T5915] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.641982][ T5915] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 624.651540][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.659532][ T5915] usb 1-1: Product: syz [ 624.663849][ T5915] usb 1-1: Manufacturer: syz [ 624.668449][ T5915] usb 1-1: SerialNumber: syz [ 624.686445][ T5915] usb 1-1: bad CDC descriptors [ 624.703097][ T5915] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 624.709467][ T5915] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 624.893057][ T5852] Bluetooth: hci3: command 0x040f tx timeout [ 624.979495][T12386] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 625.482331][T12396] FAULT_INJECTION: forcing a failure. [ 625.482331][T12396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.497493][ T24] usb 1-1: USB disconnect, device number 35 [ 625.510703][T12396] CPU: 0 UID: 0 PID: 12396 Comm: syz.3.1628 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 625.510730][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.510741][T12396] Call Trace: [ 625.510747][T12396] [ 625.510754][T12396] dump_stack_lvl+0x16c/0x1f0 [ 625.510787][T12396] should_fail_ex+0x512/0x640 [ 625.510817][T12396] strncpy_from_user+0x3b/0x2e0 [ 625.510845][T12396] __do_sys_request_key+0xa8/0x3d0 [ 625.510868][T12396] ? fput+0x70/0xf0 [ 625.510887][T12396] ? __pfx___do_sys_request_key+0x10/0x10 [ 625.510908][T12396] ? ksys_write+0x1ac/0x250 [ 625.510941][T12396] do_syscall_64+0xcd/0x4c0 [ 625.510960][T12396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.510978][T12396] RIP: 0033:0x7f284c98e9a9 [ 625.510991][T12396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.511007][T12396] RSP: 002b:00007f284d861038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 625.511025][T12396] RAX: ffffffffffffffda RBX: 00007f284cbb5fa0 RCX: 00007f284c98e9a9 [ 625.511036][T12396] RDX: 0000200000000740 RSI: 0000200000000700 RDI: 00002000000006c0 [ 625.511047][T12396] RBP: 00007f284d861090 R08: 0000000000000000 R09: 0000000000000000 [ 625.511057][T12396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.511067][T12396] R13: 0000000000000000 R14: 00007f284cbb5fa0 R15: 00007ffde2420388 [ 625.511097][T12396] [ 625.910592][T12406] FAULT_INJECTION: forcing a failure. [ 625.910592][T12406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.924102][T12406] CPU: 0 UID: 0 PID: 12406 Comm: syz.3.1630 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 625.924127][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.924137][T12406] Call Trace: [ 625.924142][T12406] [ 625.924148][T12406] dump_stack_lvl+0x16c/0x1f0 [ 625.924179][T12406] should_fail_ex+0x512/0x640 [ 625.924208][T12406] _copy_from_user+0x2e/0xd0 [ 625.924225][T12406] copy_msghdr_from_user+0x98/0x160 [ 625.924252][T12406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 625.924281][T12406] ? kfree+0x24f/0x4d0 [ 625.924310][T12406] ___sys_recvmsg+0xdb/0x1a0 [ 625.924335][T12406] ? __pfx____sys_recvmsg+0x10/0x10 [ 625.924376][T12406] ? __pfx___might_resched+0x10/0x10 [ 625.924404][T12406] do_recvmmsg+0x2fe/0x750 [ 625.924434][T12406] ? __pfx_do_recvmmsg+0x10/0x10 [ 625.924463][T12406] ? __pfx___schedule+0x10/0x10 [ 625.924488][T12406] ? lockdep_hardirqs_on+0x7c/0x110 [ 625.924521][T12406] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 625.924544][T12406] ? rcu_is_watching+0x12/0xc0 [ 625.924571][T12406] __x64_sys_recvmmsg+0x22a/0x280 [ 625.924590][T12406] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 625.924609][T12406] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 625.924634][T12406] do_syscall_64+0xcd/0x4c0 [ 625.924652][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.924669][T12406] RIP: 0033:0x7f284c98e9a9 [ 625.924683][T12406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.924700][T12406] RSP: 002b:00007f284d840038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 625.924717][T12406] RAX: ffffffffffffffda RBX: 00007f284cbb6080 RCX: 00007f284c98e9a9 [ 625.924728][T12406] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 625.924738][T12406] RBP: 00007f284d840090 R08: 0000000000000000 R09: 0000000000000000 [ 625.924748][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.924758][T12406] R13: 0000000000000000 R14: 00007f284cbb6080 R15: 00007ffde2420388 [ 625.924781][T12406] [ 626.184047][T12407] fuse: Bad value for 'fd' [ 627.328059][T12422] siw: device registration error -23 [ 628.215040][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 628.339453][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 628.982306][ T5915] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 629.150596][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 629.157877][ T5915] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 629.172844][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.191247][ T5915] usb 4-1: config 0 has no interface number 0 [ 629.218116][ T5915] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.230670][ T5915] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 629.241894][ T5915] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 629.253378][ T5915] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.266632][ T5915] usb 4-1: config 0 interface 52 has no altsetting 0 [ 629.273523][ T5915] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 629.283576][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.302044][ T5915] usb 4-1: config 0 descriptor?? [ 629.523764][ T5915] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input11 [ 629.798409][T12448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.240034][ T5893] usb 4-1: USB disconnect, device number 31 [ 630.301219][T12453] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1642'. [ 630.320490][T12453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1642'. [ 630.701107][T12461] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 631.443071][T12463] netlink: 'syz.0.1647': attribute type 12 has an invalid length. [ 631.455513][T12463] netlink: 'syz.0.1647': attribute type 29 has an invalid length. [ 631.465059][T12463] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1647'. [ 631.760688][T12472] netlink: 'syz.0.1648': attribute type 12 has an invalid length. [ 631.844640][T12472] netlink: 'syz.0.1648': attribute type 29 has an invalid length. [ 631.872424][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 631.872442][ T30] audit: type=1400 audit(1752903811.375:2220): avc: denied { write } for pid=12476 comm="syz.4.1650" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 631.914449][T12477] Bluetooth: MGMT ver 1.23 [ 632.127878][T12481] ALSA: mixer_oss: invalid OSS volume 'LI' [ 632.620175][T12472] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1648'. [ 633.353061][T12500] netlink: 'syz.0.1654': attribute type 10 has an invalid length. [ 633.362755][T12500] bridge0: left allmulticast mode [ 633.369653][T12500] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.376788][T12500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.384186][T12500] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.391299][T12500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.934456][T12516] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 633.950678][T12516] qnx6: wrong signature (magic) in superblock #1. [ 633.957252][T12516] qnx6: unable to read the first superblock [ 634.004187][T12500] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.011494][T12500] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.424649][T12510] lo speed is unknown, defaulting to 1000 [ 634.443016][T12510] dummy0 speed is unknown, defaulting to 1000 [ 634.513714][T12517] lo speed is unknown, defaulting to 1000 [ 634.557329][T12522] netlink: 'syz.0.1658': attribute type 12 has an invalid length. [ 634.573018][T12522] netlink: 'syz.0.1658': attribute type 29 has an invalid length. [ 634.581718][T12522] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1658'. [ 634.616762][T12517] dummy0 speed is unknown, defaulting to 1000 [ 634.891238][T12533] netlink: 'syz.0.1661': attribute type 1 has an invalid length. [ 634.908356][T12533] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1661'. [ 635.227934][T12544] loop2: detected capacity change from 0 to 7 [ 635.298017][T12544] Dev loop2: unable to read RDB block 7 [ 635.304713][T12544] loop2: AHDI p2 p3 [ 635.309557][T12544] loop2: partition table partially beyond EOD, truncated [ 635.320466][T12544] loop2: p3 start 335544320 is beyond EOD, truncated [ 635.580352][ T30] audit: type=1400 audit(1752903815.085:2221): avc: denied { write } for pid=12548 comm="syz.1.1665" name="file0" dev="tmpfs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 635.710674][ T30] audit: type=1400 audit(1752903815.085:2222): avc: denied { open } for pid=12548 comm="syz.1.1665" path="/319/file0" dev="tmpfs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 635.931020][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.970734][ T30] audit: type=1400 audit(1752903815.085:2223): avc: denied { ioctl } for pid=12548 comm="syz.1.1665" path="/319/file0" dev="tmpfs" ino=1774 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 636.889948][T12570] mmap: syz.0.1671 (12570) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 637.363843][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.376539][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.388854][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.402625][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.413717][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.426159][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.437342][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.448655][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.459720][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.470861][T12579] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.602753][ T30] audit: type=1400 audit(1752903816.615:2224): avc: denied { mount } for pid=12573 comm="syz.4.1673" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 638.604153][ T30] audit: type=1400 audit(1752903818.115:2225): avc: denied { write } for pid=12594 comm="syz.3.1680" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 639.826850][ T30] audit: type=1400 audit(1752903819.335:2226): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 639.855607][ T5915] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 639.946311][T12612] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1682'. [ 639.995135][T12613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=12613 comm=syz.5.1684 [ 640.083229][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1684'. [ 640.154308][T12612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1682'. [ 640.192805][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1684'. [ 640.273565][ T5915] usb 1-1: not running at top speed; connect to a high speed hub [ 640.297913][ T5915] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 640.317777][ T5915] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 640.330941][ T5915] usb 1-1: can't read configurations, error -61 [ 640.500894][ T5915] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 640.930259][ T5915] usb 1-1: not running at top speed; connect to a high speed hub [ 640.973145][ T5915] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 641.010755][ T5915] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 641.083691][ T5915] usb 1-1: can't read configurations, error -61 [ 641.090440][ T5915] usb usb1-port1: attempt power cycle [ 641.387390][ T30] audit: type=1400 audit(1752903820.875:2227): avc: denied { ioctl } for pid=12626 comm="syz.4.1690" path="socket:[46433]" dev="sockfs" ino=46433 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 641.453914][ T30] audit: type=1400 audit(1752903820.875:2228): avc: denied { write } for pid=12626 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 641.503695][T12635] netlink: 'syz.1.1691': attribute type 5 has an invalid length. [ 641.555587][ T5915] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 641.568841][T12635] netlink: 'syz.1.1691': attribute type 7 has an invalid length. [ 641.691612][T12635] : entered promiscuous mode [ 641.732018][T11510] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 641.791192][ T5915] usb 1-1: device not accepting address 38, error -71 [ 641.840859][ T5900] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 641.895228][T12643] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1694'. [ 641.918147][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1694'. [ 641.928089][T11510] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 641.938133][T11510] usb 6-1: config 0 has no interface number 0 [ 641.948961][T11510] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 641.958733][T11510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.976372][T11510] usb 6-1: config 0 descriptor?? [ 641.987780][T11510] usb 6-1: selecting invalid altsetting 1 [ 641.999797][T11510] dvb_ttusb_budget: ttusb_init_controller: error [ 642.006625][T11510] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 642.015359][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 642.025414][ T5900] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 642.037125][ T5900] usb 2-1: config 0 has no interface number 0 [ 642.072185][ T5900] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 642.109487][ T5900] usb 2-1: config 0 interface 85 has no altsetting 0 [ 642.138935][ T5900] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 642.150158][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.161320][T11510] DVB: Unable to find symbol cx22700_attach() [ 642.167477][ T5900] usb 2-1: Product: syz [ 642.180668][ T5900] usb 2-1: Manufacturer: syz [ 642.207343][ T5900] usb 2-1: SerialNumber: syz [ 642.329055][ T5900] usb 2-1: config 0 descriptor?? [ 642.362304][T11510] DVB: Unable to find symbol tda10046_attach() [ 642.368719][T11510] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 642.913967][ T5900] appletouch 2-1:0.85: Failed to read mode from device. [ 642.956951][ T5900] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 643.251411][T11510] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 643.414888][T11510] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 643.425537][T11510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.434799][T11510] usb 4-1: Product: syz [ 643.439293][T11510] usb 4-1: Manufacturer: syz [ 643.444287][T11510] usb 4-1: SerialNumber: syz [ 643.459843][T11510] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 643.524214][ T1209] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 643.699431][T12657] 9pnet_fd: Insufficient options for proto=fd [ 643.709616][T12657] siw: device registration error -23 [ 644.124933][T11795] usb 4-1: USB disconnect, device number 32 [ 644.448010][ T5900] usb 2-1: USB disconnect, device number 31 [ 644.564255][ T5893] usb 6-1: USB disconnect, device number 7 [ 644.640854][ T1209] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 644.658770][ T1209] ath9k_htc: Failed to initialize the device [ 644.671426][T12662] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 644.799239][T12661] Process accounting resumed [ 644.830793][T11795] usb 4-1: ath9k_htc: USB layer deinitialized [ 647.751702][T12708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12708 comm=syz.3.1712 [ 647.789670][T12709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1710'. [ 649.323054][T12721] program syz.4.1717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.813219][ T30] audit: type=1400 audit(1752903829.305:2229): avc: denied { name_connect } for pid=12723 comm="syz.1.1716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 650.046245][T12728] program syz.3.1719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 650.701014][T11510] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 651.251022][ T30] audit: type=1400 audit(1752903830.745:2230): avc: denied { getattr } for pid=12729 comm="syz.4.1720" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 651.890921][ T30] audit: type=1400 audit(1752903831.395:2231): avc: denied { write } for pid=12729 comm="syz.4.1720" path="socket:[47280]" dev="sockfs" ino=47280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 651.914221][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.319630][T11510] usb 4-1: unable to get BOS descriptor or descriptor too short [ 652.371871][T11510] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 652.379472][T11510] usb 4-1: can't read configurations, error -71 [ 653.087453][ T5893] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 653.184071][T12749] syz.4.1724 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 653.459332][ T30] audit: type=1400 audit(1752903832.665:2232): avc: denied { execute } for pid=12747 comm="syz.4.1724" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 653.483342][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.611325][ T5893] usb 6-1: config 2 has an invalid descriptor of length 153, skipping remainder of the config [ 653.640981][ T5893] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 653.663600][ T5893] usb 6-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 653.680815][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.706458][ T5893] usb 6-1: Product: syz [ 653.913447][ T5893] usb 6-1: Manufacturer: syz [ 654.138818][ T5893] usb 6-1: SerialNumber: syz [ 654.396398][T12767] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=12767 comm=syz.1.1729 [ 654.713838][ T30] audit: type=1326 audit(1752903834.215:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 654.802424][ T30] audit: type=1326 audit(1752903834.225:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 654.826635][ T30] audit: type=1326 audit(1752903834.225:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 655.030722][ T5893] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 655.041173][ T43] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 655.080776][T12779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.090232][T12779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.098543][ T30] audit: type=1326 audit(1752903834.225:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 655.141002][ T30] audit: type=1326 audit(1752903834.225:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 655.144687][T12779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.165488][ T30] audit: type=1326 audit(1752903834.225:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 655.208910][T12779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.242090][ T43] usb 2-1: Invalid ep0 maxpacket: 32 [ 655.251585][ T5893] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 655.260250][ T5893] usb 5-1: config 8 has no interface number 0 [ 655.267422][ T5893] usb 5-1: config 8 interface 177 has no altsetting 0 [ 655.278708][ T5893] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 655.289214][ T30] audit: type=1326 audit(1752903834.225:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 655.314074][ T30] audit: type=1326 audit(1752903834.225:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 655.343262][ T30] audit: type=1326 audit(1752903834.225:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 655.383361][ T30] audit: type=1326 audit(1752903834.225:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 655.400564][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.410554][ T30] audit: type=1326 audit(1752903834.225:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 655.506957][T12784] FAULT_INJECTION: forcing a failure. [ 655.506957][T12784] name failslab, interval 1, probability 0, space 0, times 0 [ 655.522377][T12784] CPU: 0 UID: 0 PID: 12784 Comm: syz.0.1734 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 655.522401][T12784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.522411][T12784] Call Trace: [ 655.522415][T12784] [ 655.522419][T12784] dump_stack_lvl+0x16c/0x1f0 [ 655.522443][T12784] should_fail_ex+0x512/0x640 [ 655.522463][T12784] should_failslab+0xc2/0x120 [ 655.522475][T12784] __kmalloc_cache_noprof+0x6a/0x3e0 [ 655.522490][T12784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.522503][T12784] ? tipc_udp_enable+0x1a0/0x10d0 [ 655.522523][T12784] tipc_udp_enable+0x1a0/0x10d0 [ 655.522539][T12784] ? kasan_save_stack+0x42/0x60 [ 655.522555][T12784] ? kasan_save_stack+0x33/0x60 [ 655.522572][T12784] ? __pfx_tipc_udp_enable+0x10/0x10 [ 655.522588][T12784] ? genl_family_rcv_msg_doit+0x209/0x2f0 [ 655.522603][T12784] ? genl_rcv_msg+0x55c/0x800 [ 655.522615][T12784] ? netlink_rcv_skb+0x158/0x420 [ 655.522627][T12784] ? genl_rcv+0x28/0x40 [ 655.522638][T12784] ? netlink_unicast+0x58a/0x850 [ 655.522649][T12784] ? netlink_sendmsg+0x8d1/0xdd0 [ 655.522660][T12784] ? ____sys_sendmsg+0xa95/0xc70 [ 655.522694][T12784] tipc_enable_bearer+0x983/0x11e0 [ 655.522714][T12784] ? __pfx_tipc_enable_bearer+0x10/0x10 [ 655.522730][T12784] ? __pfx___nla_validate_parse+0x10/0x10 [ 655.522749][T12784] ? __nla_parse+0x40/0x60 [ 655.522763][T12784] __tipc_nl_bearer_enable+0x332/0x420 [ 655.522781][T12784] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 655.522803][T12784] ? __nla_parse+0x40/0x60 [ 655.522819][T12784] tipc_nl_bearer_enable+0x21/0x40 [ 655.522836][T12784] genl_family_rcv_msg_doit+0x209/0x2f0 [ 655.522851][T12784] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 655.522866][T12784] ? genl_get_cmd+0x194/0x580 [ 655.522898][T12784] ? __radix_tree_lookup+0x21f/0x2c0 [ 655.522917][T12784] genl_rcv_msg+0x55c/0x800 [ 655.522947][T12784] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.522962][T12784] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 655.522984][T12784] netlink_rcv_skb+0x158/0x420 [ 655.522996][T12784] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.523011][T12784] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.523034][T12784] genl_rcv+0x28/0x40 [ 655.523047][T12784] netlink_unicast+0x58a/0x850 [ 655.523061][T12784] ? __pfx_netlink_unicast+0x10/0x10 [ 655.523078][T12784] netlink_sendmsg+0x8d1/0xdd0 [ 655.523093][T12784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.523111][T12784] ____sys_sendmsg+0xa95/0xc70 [ 655.523125][T12784] ? copy_msghdr_from_user+0x10a/0x160 [ 655.523143][T12784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.523163][T12784] ___sys_sendmsg+0x134/0x1d0 [ 655.523182][T12784] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.523198][T12784] ? __lock_acquire+0x622/0x1c90 [ 655.523227][T12784] __sys_sendmsg+0x16d/0x220 [ 655.523245][T12784] ? __pfx___sys_sendmsg+0x10/0x10 [ 655.523272][T12784] do_syscall_64+0xcd/0x4c0 [ 655.523284][T12784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.523295][T12784] RIP: 0033:0x7f8a71f8e9a9 [ 655.523304][T12784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.523315][T12784] RSP: 002b:00007f8a72dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.523326][T12784] RAX: ffffffffffffffda RBX: 00007f8a721b6080 RCX: 00007f8a71f8e9a9 [ 655.523333][T12784] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 655.523340][T12784] RBP: 00007f8a72dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 655.523346][T12784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.523352][T12784] R13: 0000000000000000 R14: 00007f8a721b6080 R15: 00007ffd5b99f958 [ 655.523367][T12784] [ 655.523444][T12784] tipc: Enabling of bearer rejected, failed to enable media [ 656.085041][ T43] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 656.100640][ T30] audit: type=1326 audit(1752903834.225:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e0ef8e9a9 code=0x7ffc0000 [ 656.260898][ T43] usb 2-1: Invalid ep0 maxpacket: 32 [ 656.266685][ T43] usb usb2-port1: attempt power cycle [ 656.461195][T11795] usb 6-1: USB disconnect, device number 8 [ 656.524678][ T5893] usb 5-1: string descriptor 0 read error: -71 [ 656.531407][ T24] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 656.552207][ T5893] ir_toy 5-1:8.177: required endpoints not found [ 656.640690][ T43] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 656.861785][ T43] usb 2-1: Invalid ep0 maxpacket: 32 [ 656.890197][ T5893] usb 5-1: USB disconnect, device number 17 [ 657.010918][ T43] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 657.024852][ T24] usb 1-1: device descriptor read/64, error -71 [ 657.053017][ T43] usb 2-1: Invalid ep0 maxpacket: 32 [ 657.084827][ T43] usb usb2-port1: unable to enumerate USB device [ 657.729847][ T24] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 657.923769][T12806] loop7: detected capacity change from 0 to 16384 [ 659.195803][T12812] SELinux: policydb table sizes (8,3) do not match mine (8,7) [ 659.205392][T12812] SELinux: failed to load policy [ 659.219431][T12815] loop7: detected capacity change from 16384 to 0 [ 659.227560][ C1] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 659.370609][T12826] netlink: 'syz.0.1744': attribute type 1 has an invalid length. [ 659.503849][T12828] FAULT_INJECTION: forcing a failure. [ 659.503849][T12828] name failslab, interval 1, probability 0, space 0, times 0 [ 659.595052][T12828] CPU: 1 UID: 0 PID: 12828 Comm: syz.0.1744 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 659.595082][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 659.595093][T12828] Call Trace: [ 659.595099][T12828] [ 659.595106][T12828] dump_stack_lvl+0x16c/0x1f0 [ 659.595138][T12828] should_fail_ex+0x512/0x640 [ 659.595169][T12828] should_failslab+0xc2/0x120 [ 659.595187][T12828] __kmalloc_cache_noprof+0x6a/0x3e0 [ 659.595212][T12828] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 659.595237][T12828] __hw_addr_add_ex+0x3c9/0x7c0 [ 659.595262][T12828] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 659.595283][T12828] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 659.595306][T12828] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 659.595325][T12828] dev_addr_init+0x161/0x250 [ 659.595348][T12828] ? __pfx_dev_addr_init+0x10/0x10 [ 659.595379][T12828] alloc_netdev_mqs+0x3d2/0x1570 [ 659.595404][T12828] rtnl_create_link+0xc08/0xf90 [ 659.595426][T12828] rtnl_newlink+0xb69/0x2000 [ 659.595452][T12828] ? __pfx_rtnl_newlink+0x10/0x10 [ 659.595467][T12828] ? find_held_lock+0x2b/0x80 [ 659.595491][T12828] ? avc_has_perm_noaudit+0x117/0x3b0 [ 659.595516][T12828] ? avc_has_perm_noaudit+0x149/0x3b0 [ 659.595560][T12828] ? find_held_lock+0x2b/0x80 [ 659.595580][T12828] ? __pfx_rtnl_newlink+0x10/0x10 [ 659.595595][T12828] ? __pfx_rtnl_newlink+0x10/0x10 [ 659.595609][T12828] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 659.595627][T12828] ? __pfx_rtnl_newlink+0x10/0x10 [ 659.595645][T12828] rtnetlink_rcv_msg+0x95e/0xe90 [ 659.595664][T12828] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 659.595686][T12828] ? ref_tracker_free+0x37c/0x830 [ 659.595716][T12828] netlink_rcv_skb+0x158/0x420 [ 659.595736][T12828] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 659.595755][T12828] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 659.595784][T12828] ? netlink_deliver_tap+0x1ae/0xd30 [ 659.595806][T12828] netlink_unicast+0x58a/0x850 [ 659.595828][T12828] ? __pfx_netlink_unicast+0x10/0x10 [ 659.595854][T12828] netlink_sendmsg+0x8d1/0xdd0 [ 659.595878][T12828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.595915][T12828] ____sys_sendmsg+0xa95/0xc70 [ 659.595938][T12828] ? copy_msghdr_from_user+0x10a/0x160 [ 659.595964][T12828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.595999][T12828] ___sys_sendmsg+0x134/0x1d0 [ 659.596028][T12828] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.596051][T12828] ? __lock_acquire+0x622/0x1c90 [ 659.596105][T12828] __sys_sendmsg+0x16d/0x220 [ 659.596133][T12828] ? __pfx___sys_sendmsg+0x10/0x10 [ 659.596177][T12828] do_syscall_64+0xcd/0x4c0 [ 659.596196][T12828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.596214][T12828] RIP: 0033:0x7f8a71f8e9a9 [ 659.596228][T12828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.596245][T12828] RSP: 002b:00007f8a72dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.596263][T12828] RAX: ffffffffffffffda RBX: 00007f8a721b6080 RCX: 00007f8a71f8e9a9 [ 659.596273][T12828] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 659.596283][T12828] RBP: 00007f8a72dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 659.596294][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.596303][T12828] R13: 0000000000000000 R14: 00007f8a721b6080 R15: 00007ffd5b99f958 [ 659.596327][T12828] [ 660.134212][T12834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=12834 comm=syz.0.1746 [ 660.149716][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 660.317609][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 661.222737][T12840] loop2: detected capacity change from 0 to 7 [ 661.526836][T12840] Dev loop2: unable to read RDB block 7 [ 661.540738][T12840] loop2: AHDI p2 p3 [ 661.544973][T12840] loop2: partition table partially beyond EOD, truncated [ 661.599899][T12840] loop2: p3 start 335544320 is beyond EOD, truncated [ 663.458919][T12855] FAULT_INJECTION: forcing a failure. [ 663.458919][T12855] name failslab, interval 1, probability 0, space 0, times 0 [ 663.488393][T12855] CPU: 1 UID: 0 PID: 12855 Comm: syz.0.1751 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 663.488419][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.488429][T12855] Call Trace: [ 663.488435][T12855] [ 663.488442][T12855] dump_stack_lvl+0x16c/0x1f0 [ 663.488473][T12855] should_fail_ex+0x512/0x640 [ 663.488499][T12855] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 663.488524][T12855] should_failslab+0xc2/0x120 [ 663.488539][T12855] __kmalloc_cache_noprof+0x6a/0x3e0 [ 663.488562][T12855] ? sctp_has_association+0xdd/0x270 [ 663.488587][T12855] ? sctp_association_new+0xbb/0x2a00 [ 663.488612][T12855] sctp_association_new+0xbb/0x2a00 [ 663.488640][T12855] sctp_connect_new_asoc+0x1b6/0x790 [ 663.488666][T12855] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 663.488689][T12855] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 663.488718][T12855] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 663.488741][T12855] sctp_sendmsg+0x15f9/0x1ee0 [ 663.488762][T12855] ? avc_has_perm+0x11a/0x1c0 [ 663.488790][T12855] ? __pfx_sctp_sendmsg+0x10/0x10 [ 663.488817][T12855] ? __pfx_sock_has_perm+0x10/0x10 [ 663.488843][T12855] ? __might_fault+0xe3/0x190 [ 663.488878][T12855] ? __pfx_sctp_sendmsg+0x10/0x10 [ 663.488901][T12855] inet_sendmsg+0x119/0x140 [ 663.488926][T12855] __sys_sendto+0x43c/0x520 [ 663.488952][T12855] ? __pfx___sys_sendto+0x10/0x10 [ 663.488996][T12855] ? ksys_write+0x1ac/0x250 [ 663.489021][T12855] ? __pfx_ksys_write+0x10/0x10 [ 663.489048][T12855] __x64_sys_sendto+0xe0/0x1c0 [ 663.489069][T12855] ? do_syscall_64+0x91/0x4c0 [ 663.489085][T12855] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.489116][T12855] do_syscall_64+0xcd/0x4c0 [ 663.489134][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.489151][T12855] RIP: 0033:0x7f8a71f8e9a9 [ 663.489166][T12855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.489182][T12855] RSP: 002b:00007f8a72de8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 663.489201][T12855] RAX: ffffffffffffffda RBX: 00007f8a721b5fa0 RCX: 00007f8a71f8e9a9 [ 663.489212][T12855] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 663.489221][T12855] RBP: 00007f8a72de8090 R08: 0000200000000100 R09: 000000000000001c [ 663.489232][T12855] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 663.489242][T12855] R13: 0000000000000000 R14: 00007f8a721b5fa0 R15: 00007ffd5b99f958 [ 663.489263][T12855] [ 663.920429][T12864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=12864 comm=syz.3.1754 [ 664.509009][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 664.557226][T11510] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 664.634253][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 664.720939][T11510] usb 6-1: Using ep0 maxpacket: 8 [ 664.744984][T11510] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.762984][T11510] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.812325][T11510] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 664.829073][T11510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.853469][T11510] usb 6-1: Product: syz [ 664.859511][T11510] usb 6-1: Manufacturer: syz [ 664.864343][T11510] usb 6-1: SerialNumber: syz [ 664.876439][T11510] usb 6-1: bad CDC descriptors [ 664.882444][T11510] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 664.894117][T11510] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 664.996590][T12877] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1757'. [ 665.007912][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1757'. [ 665.099093][T12858] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 665.683728][ T43] usb 6-1: USB disconnect, device number 9 [ 665.829924][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1763'. [ 666.010928][ T5900] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 666.090637][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 666.180685][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 666.196067][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.241349][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 666.249096][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 666.265215][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 666.284078][ T5900] usb 5-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 666.292814][ T5900] usb 5-1: Product: syz [ 666.297011][ T5900] usb 5-1: Manufacturer: syz [ 666.304909][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.305940][ T5900] usb 5-1: SerialNumber: syz [ 666.328240][ T5900] usb 5-1: config 0 descriptor?? [ 666.343719][ T5900] usb 5-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 666.417650][ T5900] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 666.418365][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 666.438126][ T24] pvrusb2: ********** [ 666.448129][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 666.512162][ T5900] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 666.665160][ T24] pvrusb2: Important functionality might not be entirely working. [ 666.671424][ T5900] usb 5-1: media controller created [ 667.313412][T12907] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 667.328863][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 667.328885][ T24] pvrusb2: ********** [ 667.342256][T12908] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN NOPTI [ 667.349175][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 667.356642][T12908] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 667.356665][T12908] CPU: 1 UID: 0 PID: 12908 Comm: syz.0.1765 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 667.356688][T12908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 667.356699][T12908] RIP: 0010:__mutex_lock+0x14f/0xb90 [ 667.400757][T12908] Code: d0 7c 08 84 d2 0f 85 ab 07 00 00 8b 35 0a 89 57 0f 85 f6 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 07 00 00 48 3b 5b 60 0f 85 e0 01 00 00 bf 01 [ 667.420359][T12908] RSP: 0018:ffffc9000454f800 EFLAGS: 00010202 [ 667.426413][T12908] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 1ffffffff35bea00 [ 667.434367][T12908] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 00000000000000c8 [ 667.442319][T12908] RBP: ffffc9000454f940 R08: ffffffff87ef84f5 R09: 0000000000000000 [ 667.450273][T12908] R10: ffffc9000454f958 R11: 0000000000000001 R12: dffffc0000000000 [ 667.458224][T12908] R13: ffffc9000454f880 R14: 0000000000000000 R15: 1ffff920008a9f0a [ 667.466180][T12908] FS: 00007f8a72da66c0(0000) GS:ffff888124822000(0000) knlGS:0000000000000000 [ 667.475096][T12908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.481681][T12908] CR2: 000000110c37f09d CR3: 00000000545e2000 CR4: 00000000003526f0 [ 667.489637][T12908] Call Trace: [ 667.492898][T12908] [ 667.495813][T12908] ? __mutex_lock+0x1ca/0xb90 [ 667.500474][T12908] ? dvb_usbv2_generic_write+0x25/0x50 [ 667.505923][T12908] ? __pfx___mutex_lock+0x10/0x10 [ 667.510932][T12908] ? rcu_is_watching+0x12/0xc0 [ 667.515685][T12908] ? dvb_usbv2_generic_write+0x25/0x50 [ 667.521129][T12908] dvb_usbv2_generic_write+0x25/0x50 [ 667.526398][T12908] mxl111sf_ctrl_msg+0x215/0x300 [ 667.531329][T12908] mxl111sf_write_reg+0x95/0x170 [ 667.536254][T12908] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 667.541790][T12908] ? rcu_is_watching+0x12/0xc0 [ 667.546540][T12908] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 667.552337][T12908] mxl111sf_i2c_start+0x6e/0x280 [ 667.557282][T12908] mxl111sf_i2c_xfer+0x1e9d/0x3be0 [ 667.562396][T12908] ? kasan_save_stack+0x42/0x60 [ 667.567257][T12908] ? kasan_save_stack+0x33/0x60 [ 667.572103][T12908] ? __kasan_kmalloc+0xaa/0xb0 [ 667.576864][T12908] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 667.583466][T12908] ? memdup_user+0x2a/0xe0 [ 667.587889][T12908] ? i2cdev_ioctl_rdwr+0x2de/0x710 [ 667.592988][T12908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.599067][T12908] ? look_up_lock_class+0x59/0x150 [ 667.604175][T12908] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 667.609618][T12908] ? look_up_lock_class+0x6b/0x150 [ 667.614735][T12908] ? __lock_acquire+0xb8a/0x1c90 [ 667.619658][T12908] ? __lock_acquire+0xb8a/0x1c90 [ 667.624584][T12908] __i2c_transfer+0x6b6/0x2190 [ 667.629333][T12908] ? lockdep_hardirqs_on+0x7c/0x110 [ 667.634536][T12908] ? __pfx___i2c_transfer+0x10/0x10 [ 667.639728][T12908] ? rt_mutex_slowtrylock+0xc9/0x100 [ 667.645006][T12908] i2c_transfer+0x1da/0x380 [ 667.649506][T12908] i2cdev_ioctl_rdwr+0x373/0x710 [ 667.654429][T12908] i2cdev_ioctl+0x5ff/0x820 [ 667.658914][T12908] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 667.663923][T12908] ? selinux_file_ioctl+0x180/0x270 [ 667.669120][T12908] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 667.674130][T12908] __x64_sys_ioctl+0x18e/0x210 [ 667.678891][T12908] do_syscall_64+0xcd/0x4c0 [ 667.683378][T12908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.689255][T12908] RIP: 0033:0x7f8a71f8e9a9 [ 667.693656][T12908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.713256][T12908] RSP: 002b:00007f8a72da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.721653][T12908] RAX: ffffffffffffffda RBX: 00007f8a721b6160 RCX: 00007f8a71f8e9a9 [ 667.729607][T12908] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000005 [ 667.737560][T12908] RBP: 00007f8a72010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 667.745515][T12908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.753469][T12908] R13: 0000000000000000 R14: 00007f8a721b6160 R15: 00007ffd5b99f958 [ 667.761442][T12908] [ 667.764446][T12908] Modules linked in: [ 667.769327][T12908] ---[ end trace 0000000000000000 ]--- [ 667.783209][ T2338] pvrusb2: Invalid write control endpoint [ 667.789114][ T5900] usb 5-1: selecting invalid altsetting 2 [ 667.803838][ T5900] set interface failed [ 667.830399][T12908] RIP: 0010:__mutex_lock+0x14f/0xb90 [ 667.846103][T12908] Code: d0 7c 08 84 d2 0f 85 ab 07 00 00 8b 35 0a 89 57 0f 85 f6 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 07 00 00 48 3b 5b 60 0f 85 e0 01 00 00 bf 01 [ 667.868449][T12908] RSP: 0018:ffffc9000454f800 EFLAGS: 00010202 [ 667.875950][T12908] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 1ffffffff35bea00 [ 667.876402][ T2338] pvrusb2: Invalid write control endpoint [ 667.892040][T12908] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 00000000000000c8 [ 667.900323][T12908] RBP: ffffc9000454f940 R08: ffffffff87ef84f5 R09: 0000000000000000 [ 667.903343][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 667.909099][T12908] R10: ffffc9000454f958 R11: 0000000000000001 R12: dffffc0000000000 [ 667.926210][T12908] R13: ffffc9000454f880 R14: 0000000000000000 R15: 1ffff920008a9f0a [ 667.932798][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 667.934211][T12908] FS: 00007f8a72da66c0(0000) GS:ffff888124822000(0000) knlGS:0000000000000000 [ 667.949953][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 667.950822][T12908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.967423][T12908] CR2: 00007fb90b52b6b0 CR3: 00000000545e2000 CR4: 00000000003526f0 [ 667.970392][ T2338] pvrusb2: Device being rendered inoperable [ 667.975435][T12908] Kernel panic - not syncing: Fatal exception [ 667.975633][T12908] Kernel Offset: disabled