last executing test programs: 3m55.867629396s ago: executing program 2 (id=194): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x84080, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m54.990789592s ago: executing program 2 (id=198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000540)='ext4_error\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x7ec064f98d52dfb1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x40) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r0], 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) 3m53.806687155s ago: executing program 2 (id=202): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0xfffffffffffffffe) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000680)=0x41) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) 3m51.55490937s ago: executing program 2 (id=217): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) 3m50.59982314s ago: executing program 2 (id=221): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000001d0000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffffff], 0x0, 0x0, {0x800}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) mkdir(0x0, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f0000000000)=0x7c3) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 3m49.631300903s ago: executing program 2 (id=223): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$kcm(0x10, 0x2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000400)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 3m34.02859248s ago: executing program 32 (id=223): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r0 = socket$kcm(0x10, 0x2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000400)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 2m45.279039443s ago: executing program 5 (id=425): ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'cpuacct'}]}, 0x9) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x0, 0x2a8, 0x1b8, 0xe0, 0x2a8, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, &(0x7f0000000280), {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x100fffe00, 'veth0_macvtap\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x1d, 0x0, 0x68}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x402}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa3e9, 0x563, 0x9, 0x6, 0x4, 0x8, 0x9, 0x80000001]}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x5, 0x6, 0x0, 0x1, 0x1], 0x1}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x35}, @remote, 0xffffff00, 0xffffff00, 'veth1_to_bond\x00', 'wg1\x00', {}, {0xff}, 0x67, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@ah={{0x30}, {[0x40, 0xd1e], 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@ip={@empty, @multicast2, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x16, 0x1, 0x2c}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xb}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6e, 0x9, @ipv4=@local, 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, 0xffffffffffffffff, 0x8f5, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda06020000b966471af7061baae00000e80001dd0000040d000600ea111f040005000000", 0x32}], 0x1) 2m41.504742088s ago: executing program 5 (id=433): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300}) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040c41090ea000000000001090224000100000000090400000103000000092100000001220700000000000000000000de52e880c3a342d27eb51b2d000acb076bbf517a098010d6c58a1b6ee0128cfc013699c578933299dbc6cbc99fc81333a6f8d3a157a7a286bae075899714a8fabdda98702a34c751a8a3c8abc0cfc6c0d31b9b21faae2a8165602bfa417f00d4a67e6cf20b03d9bde08ef3c7210000000000000005658779f8592362ad0e85504c0f740cd90c4d82886ef9702a8ccd673f29dfb47bff87a67fb4fbabc34f2e250452842b27ed44db7d4ae85aefdd6d2bc1fc76000000"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000000800f1a2bb57a508"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="0a000200010078", 0x7) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="20010300000000004d9fca110ae39e7627df84ace0151c4bba168000000030c5565f997f40465faeea6c7e88df5595899c6044b6b094f01f6ec025ac7900baf8d477a3e7a007c8c09c599d7719f143061231357e11663ede70b0d84ea66163db84026bd61db2f70e89f804e0071f7ac805006ce68ef7ccbfe663ad72e17c8e3b338e0fa0c94adb9cab271b950e4caa1900000000"], 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r7, 0x0, 0x0) 2m37.594936377s ago: executing program 5 (id=441): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) unshare(0x2a020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "b8259e7ae4aa88e9cf54fa3de1b56cbe9d871563b9972a4deeb632aef97e12f0b0b481b13643f17e347aaaa3bf97cc9b34bdf8cec7e1ee8448ca840efd16a296396f3c15c505f2a2f3a187dadc444189f95c"}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '\x0e\x00\x01\x00\x00\x00\x02\x00\x00\x00P\xfdl\x1e\xb5\xc7\x1f\x9a\xb4\x8d\xd4B\f\xde\xb5;\xc6\x91\x9fF\xa2g\xf1!\x8d\xffk\x9c|\xa0[\xa6\x8e<\xe68\x90=,\x9e\x8a\xfa\xe9\x03\x9e\xbe\xa4\x154\x81\xb8\x9cN\x1a\xee\xc4\xbe\xff^B\xbb=\'\xc8#\t\x00\xa3\xd8^\x95\xd1\xa8\xd2\xa7~\x1f\xcd\x15\xcc$\x13K\xe13\xe6\xea\xdd\x86C)\x04\xfc-8TFz\xa2\x84\xd8\xcc\xae\xd3\x1e\xfd\xff\x02\xc9\x89ze=\xaee\xa9\x14\xc3-\xb7n\xba\x1b\x80hJ\xca\x88\x13\xe2\xdc\xc7\x14\xba\xda\xffT:\xf4\x90l\x04[\xb15\xa4\f)\xbd.\xa2\x19\x13\x0f'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '^:)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0xffff0001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x3}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '[\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '[\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, ']!!\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x8001}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x24}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) unshare(0x2000400) close(r4) io_uring_enter(r4, 0x692, 0x80ae, 0x1c, &(0x7f0000000000)={[0xc9db]}, 0x8) 2m37.426873043s ago: executing program 5 (id=442): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0xfffffffffffffca4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) bind$phonet(r0, &(0x7f0000000680)={0x23, 0x1, 0x5, 0x7}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x8, 0x3, 0x8, 0x2, 0x56f, 0xa, 0x3}, 0x0, &(0x7f0000000280)={0x75, 0xffffffff, 0x77e7, 0x400d, 0x4, 0x1, 0x1}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000122620c068f357dff92f9aa75895829bd7000ff4f078e690534685f84613cf43cda983b6609c4a0433e5c2cf8ed71d12ecab6b82e8c3b71c640d24162b987e1c6574c38118dd06a6f32687d70", @ANYRES32=r7, @ANYBLOB="100804005000000024001280110001006272696467655f736c617665000000000c00058005001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000491}, 0x40040d4) 2m35.530991601s ago: executing program 5 (id=448): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x1ff, 0x5, 0x7, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x0, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000000)={0x4}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @empty}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) ppoll(&(0x7f00000002c0)=[{r5, 0x30}, {r1, 0x4114}, {r5, 0x184}, {r5, 0x4550}, {0xffffffffffffffff, 0xe1e6}, {r3, 0x411}, {r3, 0x2}], 0x7, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000480), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r7, 0x80045010, &(0x7f0000000040)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/30, 0x1e) 2m34.574788937s ago: executing program 5 (id=454): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x6181, 0xc0}, [@IFLA_TXQLEN={0x8, 0xd, 0x8008}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004044) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sync() r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, 0x0, 0x0) symlinkat(0x0, r9, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 2m19.414799553s ago: executing program 33 (id=454): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x6181, 0xc0}, [@IFLA_TXQLEN={0x8, 0xd, 0x8008}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004044) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sync() r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, 0x0, 0x0) symlinkat(0x0, r9, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1m42.150412955s ago: executing program 6 (id=621): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300}) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040c41090ea000000000001090224000100000000090400000103000000092100000001220700000000000000000000de52e880c3a342d27eb51b2d000acb076bbf517a098010d6c58a1b6ee0128cfc013699c578933299dbc6cbc99fc81333a6f8d3a157a7a286bae075899714a8fabdda98702a34c751a8a3c8abc0cfc6c0d31b9b21faae2a8165602bfa417f00d4a67e6cf20b03d9bde08ef3c7210000000000000005658779f8592362ad0e85504c0f740cd90c4d82886ef9702a8ccd673f29dfb47bff87a67fb4fbabc34f2e250452842b27ed44db7d4ae85aefdd6d2bc1fc76000000"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000000800f1a2bb57a508"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="0a000200010078", 0x7) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="20010300000000004d9fca110ae39e7627df84ace0151c4bba168000000030c5565f997f40465faeea6c7e88df5595899c6044b6b094f01f6ec025ac7900baf8d477a3e7a007c8c09c599d7719f143061231357e11663ede70b0d84ea66163db84026bd61db2f70e89f804e0071f7ac805006ce68ef7ccbfe663ad72e17c8e3b338e0fa0c94adb9cab271b950e4caa1900000000"], 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r7, 0x0, 0x0) 1m38.63427592s ago: executing program 6 (id=628): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f, 0x20, 0x4, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x49) pipe2(0x0, 0x0) close(0xffffffffffffffff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0xc000, 0x4) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r6, &(0x7f0000000240)="8c4006d11f535d51", 0x8) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r6, r6, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 1m36.360848458s ago: executing program 6 (id=633): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c01356b07514f49874a939b12f142515d98d9042582ae70f644e672f0bb901ded8f1107b81749aef9f400000004adb4442ba213172900a44def86ee61f3a40bca2da4ed0d6d9d54d3fdcf670f5b70d1a79091d0aa7c412f598d0ce2ea8c068cd8ebb804213849acff66f3682a1192c8d688971f456c3e800653cad20200884fa3bae3b21053"]) inotify_init1(0x800) r2 = socket(0x1, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) getgroups(0x4, &(0x7f0000000b40)=[0xee01, 0x0, 0xee01, 0xffffffffffffffff]) r6 = getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0, 0x0}, &(0x7f0000000d80)=0xc) statx(r0, &(0x7f0000000dc0)='./file0\x00', 0x800, 0x2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000f00)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000001000)=0xe8) r11 = getegid() fstat(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r14, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r14, &(0x7f0000004200)={0x50, 0x0, r15, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r14, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r14, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x2, {0x1, 0x4, 0x4, 0x9, 0xa, 0x14d5, {0x4, 0x1, 0x800a, 0x2, 0xfffffffffffffffe, 0x6, 0xd89, 0x4, 0x353, 0x8000, 0xfffff000, r16, r17, 0x9b7cb67, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001800)={&(0x7f0000000280)={0x50, 0x0, 0x153, {0x7, 0x2b, 0x646, 0x4003000, 0x6, 0x79, 0x0, 0x539a, 0x0, 0x0, 0x100, 0xffffffff}}, &(0x7f0000000200)={0x18, 0x0, 0x2, {0x7}}, &(0x7f0000000300)={0x18, 0x0, 0x3, {0x5}}, &(0x7f0000000340)={0x18, 0xffffffffffffffda, 0xfffffffffffffff8, {0x4}}, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0x1, {0x40000010}}, &(0x7f0000000740)={0x28, 0x0, 0x5, {{0x9, 0x7, 0x2}}}, &(0x7f0000000780)={0x60, 0x0, 0x101, {{0x8000000000000001, 0x27, 0x1, 0x9, 0x7c9, 0xffffff52, 0x8001, 0xa5}}}, &(0x7f0000000800)={0x18, 0xfffffffffffffffe, 0x1, {0x1}}, &(0x7f0000000840)={0x19, 0xffffffffffffffda, 0xff, {'[.\x17\'$-@C\x00'}}, &(0x7f0000000880)={0x20, 0x0, 0x8}, &(0x7f0000000980)={0x78, 0x0, 0x8000, {0x7, 0x4, 0x0, {0x2, 0x4, 0x2, 0x18, 0x5, 0xfffffffffffffffe, 0x7fffffff, 0x380000, 0x6e6, 0x8000, 0xbb, r16, r3, 0x3, 0x8ed}}}, &(0x7f0000000b80)={0x90, 0x0, 0x2, {0x4, 0x3, 0x7db, 0x9, 0xacf, 0x101, {0x3, 0x1, 0x1, 0xffffffffffffff62, 0x7, 0x0, 0xc, 0x4c40, 0x5, 0xa000, 0x1, r4, r5, 0x6, 0x2}}}, &(0x7f0000000c40)=ANY=[@ANYBLOB="f0000000000000005c110000000000000300000000000000af00000000000000010000000500000026000000000000000000000000000000d84d0000000000000000000001040000050000000000000001800000000000000e000000020000002d2e5b3a25b27c2e5c7d5d030000000000000000000000000101000000000000020000000080000066640000000000000100000000000000f8ffffffffffffff0100000000000000af000000000000000400000000000000010000000000000003000000ffff00005b7d2100000000000300000000000000260e00000000000002000000000000106664000000000000"], &(0x7f0000001180)={0x288, 0x0, 0x401, [{{0x5, 0x1, 0x7, 0xaa, 0xff, 0x5, {0x5, 0x6, 0x4, 0x1, 0x0, 0x7, 0x40, 0x9, 0x0, 0x4000, 0x29d3, r6, r7, 0x800, 0x3}}, {0x1, 0x5, 0x1, 0x2, '-'}}, {{0x0, 0x3, 0x67b8, 0x5, 0x825, 0x3, {0x3, 0x8000, 0x7, 0x1192, 0x33, 0x7, 0xe19, 0x1000, 0x3ff, 0x4000, 0xa1, r8, r9, 0x0, 0x3}}, {0x5, 0x7, 0x2, 0x7ff, '*{'}}, {{0x1, 0x1, 0x1, 0x3, 0xfaac, 0x3, {0x4, 0x100000001, 0x996, 0xfffffffffffffff8, 0x0, 0x6dc, 0x0, 0x8001, 0x4, 0xa000, 0x9, r10, r11, 0xbba4, 0x9}}, {0x6, 0x8, 0x0, 0x4}}, {{0x3, 0x1, 0x8, 0x6, 0x8, 0xfffffffd, {0x3, 0x4, 0xffff, 0x5, 0x5, 0x0, 0x6, 0xfffffff9, 0x0, 0xc000, 0x0, r12, r13, 0x8, 0x5}}, {0x1, 0x7, 0x2, 0x2, 'fd'}}]}, &(0x7f0000001500)={0xa0, 0x0, 0xf4a, {{0x0, 0x3, 0x38000000000, 0x5, 0x1, 0x6, {0x3, 0x9, 0x60bd, 0x4, 0x493, 0x1, 0x7, 0x6, 0xffffffff, 0x0, 0x3, r16, r18, 0x4, 0x6}}, {0x0, 0x1}}}, &(0x7f00000015c0)={0x20, 0xfffffffffffffffe, 0xfffffffffffffcc6, {0xc54, 0x4, 0xd1, 0x6}}, &(0x7f00000016c0)={0x130, 0x0, 0x2, {0x9, 0x1, 0x0, '\x00', {0x10, 0xcd66, 0xe, 0x3, 0x0, r19, 0x4000, '\x00', 0x40000000000cb, 0x8, 0x80000001, 0xb9, {0x5, 0xe1}, {0x5, 0x5}, {0xb6f, 0x4}, {0x7, 0x8}, 0x2, 0x9, 0xe, 0xfc}}}}) bind$unix(r2, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x51800002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m35.942400181s ago: executing program 6 (id=637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x4b6, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000780), 0x2, r1}, 0x38) 1m34.587749001s ago: executing program 6 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1220, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1030, 0xfb, 0x0, 0x1, [@nested={0x101d, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028a", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0xdd, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @generic="48f2adbc26fa866f55146583e697a3ae3793fe641fbf2f7456a75f", @nested={0x4, 0x4f}, @generic="f01254c8a325874b7a364f60eb18eb3e374838d32bfdcf", @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a69c1833c16240c76f64ea112de3c45021c621d034910e1db3fca008b95a45107899e470807feef1304cd8f30cff59aecaa6c50194c6b72963a9b8aeb003858a6c716898b4474bb940d9b2b8accb6683360dd814cd20a0"]}]}, 0x1220}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000140009060000c26c79c7950000ffdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf0, 0x35, 0x200, 0x70bd2b, 0x25dfdbff, {0xd}, [@generic="5c527752dee81a8871070e54d65aa058f60571f7da38fed7f28492d2ce993fb6ac83e92248b46ac2abcb48e6e54a788de909b5b06730a7da12ccc069f0bfed42ed69b7ecec49963dcc54823ccdd7bc806a8b561c830d3885f1d58991d2eb9a11f31d02808da4a4f01df31f9aa18f664011d28ca72e593848a93a2123e035681c2c6ca45cd1757b7a13697f2498c8a4e89b06ab37c1ee5e366cc15e26cd70fa3ac79c853d4065d3eb9b12dcdc9efda8607ae395d73dededde262f15fb1cbab955517b80b522d4770cc9ffba7a1d50be4f6274fdfd0d6f43e608a509"]}, 0xf0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c8f0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0501ca807000fcdbdf258700000008000300", @ANYRES32=r7, @ANYBLOB="0c002380"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x7, &(0x7f0000000100)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x1, 0x4, 0xb, 0x1, 0x30, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xeb, &(0x7f0000000200)=""/235, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xc, 0xfffff281, 0x18}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x5, 0x2, 0x7, 0xc}, {0x0, 0x5, 0x1, 0x1}], 0x10, 0x9}, 0x94) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x4) r9 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r9, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m28.838475386s ago: executing program 6 (id=649): openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0xc80c0, 0x130, 0xc}, 0x18) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x23b) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 1m13.693954525s ago: executing program 34 (id=649): openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0xc80c0, 0x130, 0xc}, 0x18) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x23b) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 20.663804318s ago: executing program 1 (id=859): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000340)={0x0, 0xf, 0x2, "3ad5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xf, 0x4}]}) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 15.135135705s ago: executing program 1 (id=876): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18070000000001"], &(0x7f0000000040)='GPL\x00', 0x9, 0x92, &(0x7f0000000240)=""/146, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="846507c54b5a427e1e68638789ebdbdb03b2fcdc179078d7cffe40438242e32253e5f7a77e488ed9016a3ea25f871b480c1a55ddaae59eac86f5ff9ca117ff8c270bb56533456fa45f9cdfbd001f5429bfcba2a1b614b150fc0adf30c753e2f226fee8933f29eb4fddde3aee95c6c2509999259444cab059c659b22ef0dff58e8d3793230ef5baf21ab0ebf2aca65031f8afb175d184a57581e3b93b0349e761df6a7443de48cb14604b37ea136ec7afc0fc6e3fa4e691df5ffbba57be0d125fcda74c003adfb70b7e84ef14b852af31aa17d92b091011e3f8de9c1c634d42ac62bc725c7f7d5a413820e3aacbde2467de", 0xf1, 0x800, &(0x7f0000000100)={0xa, 0x9, 0x2fc, @empty, 0x837}, 0x1c) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x304, 0x0, 0x8, 0x300}}) 13.906995664s ago: executing program 0 (id=880): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18070000000001"], &(0x7f0000000040)='GPL\x00', 0x9, 0x92, &(0x7f0000000240)=""/146, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="846507c54b5a427e1e68638789ebdbdb03b2fcdc179078d7cffe40438242e32253e5f7a77e488ed9016a3ea25f871b480c1a55ddaae59eac86f5ff9ca117ff8c270bb56533456fa45f9cdfbd001f5429bfcba2a1b614b150fc0adf30c753e2f226fee8933f29eb4fddde3aee95c6c2509999259444cab059c659b22ef0dff58e8d3793230ef5baf21ab0ebf2aca65031f8afb175d184a57581e3b93b0349e761df6a7443de48cb14604b37ea136ec7afc0fc6e3fa4e691df5ffbba57be0d125fcda74c003adfb70b7e84ef14b852af31aa17d92b091011e3f8de9c1c634d42ac62bc725c7f7d5a413820e3aacbde2467de", 0xf1, 0x800, &(0x7f0000000100)={0xa, 0x9, 0x2fc, @empty, 0x837}, 0x1c) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x304, 0x0, 0x8, 0x300}}) 13.769375873s ago: executing program 1 (id=881): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r5]) 13.455196208s ago: executing program 0 (id=883): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2000, 0x6d, 0x55cb, 0xa, 0x48c, 0x4000000004, 0xd, 0x6465, 0x2, 0x1c5, 0xd0d, 0xfffffffffffffff7, 0x7, 0x2, 0x7d, 0x5, 0x0, 0x5, 0x2, 0x8b7, 0x3, 0x6, 0xffffffffffffff7a, 0x2, 0x5, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="b9000000915537462cddd252adb1702c28b8480000"], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf9}, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x84, 0x1, "e8"}, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 9.667289441s ago: executing program 0 (id=891): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18070000000001"], &(0x7f0000000040)='GPL\x00', 0x9, 0x92, &(0x7f0000000240)=""/146, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="846507c54b5a427e1e68638789ebdbdb03b2fcdc179078d7cffe40438242e32253e5f7a77e488ed9016a3ea25f871b480c1a55ddaae59eac86f5ff9ca117ff8c270bb56533456fa45f9cdfbd001f5429bfcba2a1b614b150fc0adf30c753e2f226fee8933f29eb4fddde3aee95c6c2509999259444cab059c659b22ef0dff58e8d3793230ef5baf21ab0ebf2aca65031f8afb175d184a57581e3b93b0349e761df6a7443de48cb14604b37ea136ec7afc0fc6e3fa4e691df5ffbba57be0d125fcda74c003adfb70b7e84ef14b852af31aa17d92b091011e3f8de9c1c634d42ac62bc725c7f7d5a413820e3aacbde2467de", 0xf1, 0x800, &(0x7f0000000100)={0xa, 0x9, 0x2fc, @empty, 0x837}, 0x1c) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x304, 0x0, 0x8, 0x300}}) 9.462455833s ago: executing program 7 (id=893): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001900190028bd7000fbdbdf251d010200150002000100004008010000f225bbf39931782e0c000000150003000000002aff0306005a42ead3bc8f3d6f0500000015000100040000600003000d0cbc3d447b8ce73ccc751d003a9f858f0097b4f502000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000010a000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326625000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000500)={{r1}, 0x0, 0x2, @unused=[0x0, 0x2, 0x7af, 0x5], @subvolid}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.533112334s ago: executing program 4 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x32, &(0x7f0000000080)={@random="e973abc7ac22", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x1, 0x0, 0x2, 0x1, 0x0, @void}, "dcc6d6a6"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x6, 0x100}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80045430, 0xfffffffffffffffd) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8008, &(0x7f0000000180)={[{@stats}]}) 8.470942579s ago: executing program 3 (id=896): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0xfffffffffffffca4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) bind$phonet(r0, &(0x7f0000000680)={0x23, 0x1, 0x5, 0x7}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x8, 0x3, 0x8, 0x2, 0x56f, 0xa, 0x3}, 0x0, &(0x7f0000000280)={0x75, 0xffffffff, 0x77e7, 0x400d, 0x4, 0x1, 0x1}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000122620c068f357dff92f9aa75895829bd7000ff4f078e690534685f84613cf43cda983b6609c4a0433e5c2cf8ed71d12ecab6b82e8c3b71c640d24162b987e1c6574c38118dd06a6f32687d70", @ANYRES32=r7, @ANYBLOB="100804005000000024001280110001006272696467655f736c617665000000000c00058005001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000491}, 0x40040d4) 8.26738987s ago: executing program 0 (id=897): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r6]) 8.215441012s ago: executing program 1 (id=898): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0xad5, 0x64b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f00002af000/0x2000)=nil, 0x2000, 0x15) r4 = dup(r2) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_io_uring_setup(0xbea, 0x0, 0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000480)={0x0, 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x66a3, 0x0, &(0x7f0000000180), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$inet(0x2, 0x2, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 7.50169629s ago: executing program 4 (id=899): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 6.95871775s ago: executing program 4 (id=900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='\x94ockfs\x00', 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000780)='\xb9T\xb9\xf5\x9d\xee/\xc9\xa8\xaa\xe6\xad\xb4s\x002tT5j<\xd4\xfc\x03\x12~\x8d\xf7\xe0\xfc\x96M\x82\xf3\xf5I\xbc*[\x1eX1\xb6\x15\x1a/\x83\x99\x88\xe9\x00\xf3\xefO2\xac\xfe\n\xf4\xed>M\x84D\xf9O!Ywe\x7f\x8b\xd1C\xf3\x7fr\xe8\x1cy\xb4\x00BO\r\x86f^U\xae\x9d\x9e\x15\xa9Oon\xbf\x88vv\xea\xd9\xb6\x11F\xdfq\xa2\x9a\xa0\xfb\xadBT\xf5Q\xd2\xd4\xb7\xa3\xe7\xea\xb1\xc2\xcd\xb4\xe4\x8e\xdc.!Z\x9b\xf3\x92_\xf9$\xba\t\xc3\x8a\x1bO\r\xdeo\xd54\x83\xe2?-\xa4-\xa2\x19\x14\x80[\xa5\x94\xcd\x85\x83\xf6_C\xfe\x89\x88\t\xf2\xa6\xdb\xc1q\xce\x123Y\xdb)\xdc\xd8\x19\x87\x84P\xd9', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {0x3}, {0xf4ef, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 6.957342951s ago: executing program 7 (id=901): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2000, 0x6d, 0x55cb, 0xa, 0x48c, 0x4000000004, 0xd, 0x6465, 0x2, 0x1c5, 0xd0d, 0xfffffffffffffff7, 0x7, 0x2, 0x7d, 0x5, 0x0, 0x5, 0x2, 0x8b7, 0x3, 0x6, 0xffffffffffffff7a, 0x2, 0x5, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="b9000000915537462cddd252adb1702c28b8480000"], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf9}, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x84, 0x1, "e8"}, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 6.334330975s ago: executing program 3 (id=902): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x7c3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 5.717833982s ago: executing program 4 (id=903): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x8000000000000001, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r5, 0x8925, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x3, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x1, 0xa, 0x4, 0x10, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, "8000"}, 0x0, 0x2, {}, 0x207ff}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, 0x0, &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') 5.279881124s ago: executing program 3 (id=904): socket$kcm(0x29, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) select(0x28, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@overlay={0x101, 0xb, 0x4, 0x8, 0xffffff73, {}, {0x2, 0x4, 0x0, 0x4, 0xca, 0x0, "8f2eb06e"}, 0x1000, 0x3, {}, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000f40)=ANY=[@ANYBLOB="dc030000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf258300000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x3dc}, 0x1, 0x0, 0x0, 0x4000}, 0x4885) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.521337507s ago: executing program 3 (id=905): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x5}) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000950000000000000024e60d9835af87e73dbf08159e96cdeffc40bbe0244cbe2ab746f6a01f9f4560a10e68c39b092b84924764a38f0530de8eac76cf8f7e8c77a8980828bcce6758d49b6f043a5a9ca127a23148f4fbb318cb5869d4463734119bc9cfd6dd254b097adda268b80000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.257230718s ago: executing program 3 (id=906): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000001, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) 3.06203723s ago: executing program 0 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x32, &(0x7f0000000080)={@random="e973abc7ac22", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x1, 0x0, 0x2, 0x1, 0x0, @void}, "dcc6d6a6"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x6, 0x100}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8008, &(0x7f0000000180)={[{@stats}]}) 2.008737099s ago: executing program 0 (id=908): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x113280, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0xadc4ce71bc19a402, 0x10, 0xb, 0x4aa, {{0xe, 0x4, 0x1, 0x36, 0x38, 0x65, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@rr={0x7, 0x23, 0xa4, [@loopback, @remote, @empty, @rand_addr=0x64010102, @multicast2, @empty, @loopback, @empty]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x6, 0x4e21, 0x5, 0xa, 0x30, 0x80, 0x3a, r2, 0xee00}, {0x6, 0x3, 0x6, 0xffffffffffffff00, 0x9, 0x8, 0x0, 0x7ff}, {0x3, 0x2, 0x3ff, 0x7}, 0x1, 0x6e6bb2, 0x2, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d3, 0xff}, 0x2, @in6=@loopback, 0x3500, 0x3, 0x1, 0x5, 0xc838, 0x8000, 0xffffffbe}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000c060101000000000000000005000000050001"], 0x28}}, 0x20000000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r0, 0x0) dup3(r4, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r5 = syz_io_uring_setup(0xcd0, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x152}, &(0x7f0000000240)=0x0, &(0x7f0000000e40)=0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000180)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r9 = io_uring_setup(0x669, &(0x7f00000002c0)={0x0, 0xfffffffc}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x22, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) 1.821307592s ago: executing program 7 (id=909): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) writev(r0, &(0x7f0000000100), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5319, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2400c729, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) 1.4596793s ago: executing program 1 (id=910): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) lseek(r1, 0x9, 0x2000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x50}}, 0x20000804) 687.110623ms ago: executing program 7 (id=911): syz_emit_ethernet(0x30, &(0x7f0000000080)={@random="e973abc7ac22", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xe, 0x0, @gue={{0x1, 0x0, 0x2, 0x1, 0x0, @void}, "dcc6"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x6, 0x100}}}}}}}, 0x0) 595.650694ms ago: executing program 4 (id=912): r0 = socket(0x2a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x2) finit_module(r1, 0x0, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000005c0)={'veth0_to_team\x00', 0x10}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1bb25059e55ae3f014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fe25e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc000000000000", 0xd8}], 0x1}, 0x44850) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="154000001500000826bd7000ffdbdf2503000000dec0ae6a9d1503c46331cfaa57a6bc8840f17c6f5e39693f498a24f13a621fe10afe57b9906eb4a46622eed353b65961cb", @ANYRES32=r2, @ANYBLOB="1400060009000000b20000000100000010000000"], 0x2c}, 0x1, 0x0, 0x0, 0x440000a0}, 0x4004004) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x20, 0x32, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) sendmmsg(r6, &(0x7f00000002c0), 0x0, 0x2404c890) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) 249.886568ms ago: executing program 7 (id=913): setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getpid() getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xdc, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffff9}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0xfb}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_hsr\x00'}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_VF_PORTS={0x68, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "2ada9da87c5d678903086c08fd12c999"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1a3986fce4699fedd1b019f6d8269dd9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3ba6324faa03c6a87bc10cf8673d9938"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "11a6910a0f3e4b5959f4f2e00716140c"}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0xdc}}, 0x4000010) 155.093981ms ago: executing program 1 (id=914): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0xfffffffffffffca4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) bind$phonet(r0, &(0x7f0000000680)={0x23, 0x1, 0x5, 0x7}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x8, 0x3, 0x8, 0x2, 0x56f, 0xa, 0x3}, 0x0, &(0x7f0000000280)={0x75, 0xffffffff, 0x77e7, 0x400d, 0x4, 0x1, 0x1}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000122620c068f357dff92f9aa75895829bd7000ff4f078e690534685f84613cf43cda983b6609c4a0433e5c2cf8ed71d12ecab6b82e8c3b71c640d24162b987e1c6574c38118dd06a6f32687d70", @ANYRES32=r8, @ANYBLOB="100804005000000024001280110001006272696467655f736c617665000000000c00058005001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000491}, 0x40040d4) 30.609769ms ago: executing program 4 (id=915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000900007b8af80007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='mmc_request_done\x00', r2, 0x0, 0x4}, 0x3e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) getcwd(&(0x7f0000000580)=""/171, 0xab) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x550c, 0x0) sync_file_range(r1, 0x2, 0x8, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xf5ff, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) 29.754603ms ago: executing program 3 (id=916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffe, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)="9a", 0x1, 0x24000045, &(0x7f0000000080)={0xa, 0x2, 0x9, @loopback, 0xe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f000000cf40)='htcp\x00', 0x5) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_usb_disconnect(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x40000000007, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x4) r3 = getpid() syz_open_dev$MSR(&(0x7f0000000100), 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000ac0)={0x2, 'bond_slave_1\x00', 0x1}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000000), 0x1, 0x0, 0x0, 0x20044884}, 0x400c0) move_pages(r3, 0x5, &(0x7f0000001440)=[&(0x7f0000608000/0x3000)=nil, &(0x7f0000aea000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000098f000/0x4000)=nil, &(0x7f00006ce000/0x2000)=nil], &(0x7f00000013c0)=[0x97e6], &(0x7f0000001400)=[0x0], 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xf}}, 0x20) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d"], 0x0) 0s ago: executing program 7 (id=917): read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x3ff, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): e found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 218.640416][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.672444][ T5884] usb 2-1: config 0 descriptor?? [ 219.090233][ T5884] pwc: Creative Labs Webcam 5 detected. [ 219.132358][ T5946] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 219.184090][ T7747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.198939][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.236264][ T5946] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.259575][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 219.280475][ T5946] usb 5-1: Product: syz [ 219.305470][ T5946] usb 5-1: Manufacturer: syz [ 219.315668][ T5946] usb 5-1: SerialNumber: syz [ 219.325734][ T5946] usb 5-1: config 0 descriptor?? [ 219.445581][ T5946] usb 5-1: selecting invalid altsetting 0 [ 219.822204][ T5946] usb 5-1: USB disconnect, device number 16 [ 220.359083][ T30] audit: type=1400 audit(1753597907.533:754): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 220.562701][ T7775] befs: (nbd3): No write support. Marking filesystem read-only [ 220.570813][ T7775] syz.3.476: attempt to access beyond end of device [ 220.570813][ T7775] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 220.584448][ T7775] befs: (nbd3): unable to read superblock [ 220.640388][ T5946] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 221.408767][ T5884] pwc: Failed to set LED on/off time (-71) [ 221.420445][ T5884] pwc: send_video_command error -71 [ 221.431146][ T5884] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 221.452613][ T5884] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 221.472073][ T5884] usb 2-1: USB disconnect, device number 23 [ 221.481959][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 221.514658][ T7780] fuse: Bad value for 'fd' [ 221.531497][ T5946] usb 5-1: device descriptor read/all, error -71 [ 221.810463][ T7790] __vm_enough_memory: pid: 7790, comm: syz.1.480, bytes: 21200591507456 not enough memory for the allocation [ 221.952220][ T30] audit: type=1400 audit(1753597909.073:755): avc: denied { setopt } for pid=7787 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 223.029869][ T30] audit: type=1400 audit(1753597910.203:756): avc: denied { getopt } for pid=7796 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.581402][ T5884] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 223.868386][ T7810] ip6t_srh: unknown srh match flags B153 [ 224.130515][ T5884] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 224.165216][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.206437][ T5884] usb 2-1: Product: syz [ 224.231007][ T5884] usb 2-1: Manufacturer: syz [ 224.231153][ T5884] usb 2-1: SerialNumber: syz [ 224.233117][ T7815] ip6t_srh: unknown srh match flags B153 [ 224.248299][ T5884] usb 2-1: config 0 descriptor?? [ 224.642627][ T7818] FAULT_INJECTION: forcing a failure. [ 224.642627][ T7818] name failslab, interval 1, probability 0, space 0, times 0 [ 224.655259][ T7818] CPU: 0 UID: 0 PID: 7818 Comm: syz.0.486 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 224.655274][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.655279][ T7818] Call Trace: [ 224.655283][ T7818] [ 224.655287][ T7818] dump_stack_lvl+0x16c/0x1f0 [ 224.655307][ T7818] should_fail_ex+0x512/0x640 [ 224.655324][ T7818] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 224.655340][ T7818] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 224.655354][ T7818] should_failslab+0xc2/0x120 [ 224.655364][ T7818] __kmalloc_cache_noprof+0x6a/0x3e0 [ 224.655378][ T7818] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 224.655393][ T7818] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 224.655408][ T7818] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 224.655423][ T7818] hugetlb_vm_op_open+0x26c/0x5b0 [ 224.655439][ T7818] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 224.655453][ T7818] __split_vma+0x745/0x1070 [ 224.655470][ T7818] ? __pfx___split_vma+0x10/0x10 [ 224.655487][ T7818] ? mas_find+0x2f6/0x530 [ 224.655498][ T7818] ? validate_mm+0x40a/0x570 [ 224.655513][ T7818] vms_gather_munmap_vmas+0x1c2/0x1310 [ 224.655527][ T7818] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.655545][ T7818] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 224.655560][ T7818] ? kmem_cache_free+0x16d/0x4d0 [ 224.655574][ T7818] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.655586][ T7818] ? percpu_counter_add_batch+0xb8/0x1f0 [ 224.655600][ T7818] ? __mt_destroy+0xa8/0x3e0 [ 224.655616][ T7818] ? vms_complete_munmap_vmas+0x667/0x970 [ 224.655633][ T7818] do_vmi_align_munmap+0x27c/0x7d0 [ 224.655651][ T7818] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 224.655685][ T7818] do_vmi_munmap+0x204/0x3e0 [ 224.655702][ T7818] shrink_vma+0x1cc/0x380 [ 224.655717][ T7818] ? __pfx_shrink_vma+0x10/0x10 [ 224.655730][ T7818] ? __pfx_do_munmap+0x10/0x10 [ 224.655745][ T7818] ? __pfx_down_write_killable+0x10/0x10 [ 224.655761][ T7818] __do_sys_mremap+0x1036/0x1590 [ 224.655778][ T7818] ? __pfx___do_sys_mremap+0x10/0x10 [ 224.655793][ T7818] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 224.655806][ T7818] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.655817][ T7818] ? __fget_files+0x20e/0x3c0 [ 224.655837][ T7818] do_syscall_64+0xcd/0x4c0 [ 224.655848][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.655858][ T7818] RIP: 0033:0x7f16fa18e9a9 [ 224.655867][ T7818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.655877][ T7818] RSP: 002b:00007f16fafe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 224.655887][ T7818] RAX: ffffffffffffffda RBX: 00007f16fa3b5fa0 RCX: 00007f16fa18e9a9 [ 224.655894][ T7818] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 224.655900][ T7818] RBP: 00007f16fafe9090 R08: 0000200000a00000 R09: 0000000000000000 [ 224.655906][ T7818] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 224.655916][ T7818] R13: 0000000000000000 R14: 00007f16fa3b5fa0 R15: 00007ffecba27b08 [ 224.655929][ T7818] [ 224.655933][ T7818] HugeTLB: unable to allocate vma specific lock [ 224.983993][ T5884] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 225.030459][ T5884] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 225.080459][ T5884] f81604 2-1:0.0: probe with driver f81604 failed with error -32 [ 225.280985][ T30] audit: type=1400 audit(1753597912.413:757): avc: denied { getopt } for pid=7825 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.761296][ T7829] netlink: 156 bytes leftover after parsing attributes in process `syz.3.487'. [ 225.772556][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 225.817665][ T7841] fuse: Unknown parameter 'grou00000000000000000000' [ 225.831945][ T30] audit: type=1400 audit(1753597913.013:758): avc: denied { write } for pid=7840 comm="syz.4.490" path="socket:[15056]" dev="sockfs" ino=15056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 226.008752][ T9] usb 2-1: USB disconnect, device number 24 [ 226.168587][ T7852] fuse: Bad value for 'fd' [ 228.085440][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.498'. [ 228.206896][ T30] audit: type=1400 audit(2000000000.910:759): avc: denied { name_bind } for pid=7876 comm="syz.1.499" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 228.249452][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 228.290813][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.298874][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.315376][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.324566][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.332243][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.578867][ T30] audit: type=1326 audit(2000000001.290:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fa18e9a9 code=0x7ffc0000 [ 228.651515][ T30] audit: type=1326 audit(2000000001.290:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fa18e9a9 code=0x7ffc0000 [ 228.676372][ T30] audit: type=1326 audit(2000000001.290:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f16fa18e9a9 code=0x7ffc0000 [ 228.798765][ T30] audit: type=1326 audit(2000000001.300:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fa18e9a9 code=0x7ffc0000 [ 228.827594][ T7885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.500'. [ 228.836818][ T30] audit: type=1326 audit(2000000001.350:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f16fa18e9a9 code=0x7ffc0000 [ 228.867041][ T30] audit: type=1326 audit(2000000001.360:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fa18e9a9 code=0x7ffc0000 [ 228.924298][ T30] audit: type=1326 audit(2000000001.360:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fa18e9a9 code=0x7ffc0000 [ 228.958813][ T7882] lo speed is unknown, defaulting to 1000 [ 228.998633][ T30] audit: type=1326 audit(2000000001.360:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f16fa18e9a9 code=0x7ffc0000 [ 229.750613][ T7906] fuse: Bad value for 'fd' [ 229.921000][ T7911] fuse: Unknown parameter 'grou00000000000000000000' [ 229.984810][ T7882] chnl_net:caif_netlink_parms(): no params data found [ 230.102046][ T7919] xt_cgroup: xt_cgroup: no path or classid specified [ 230.362035][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.369287][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.376543][ T5836] Bluetooth: hci5: command tx timeout [ 230.385228][ T7882] bridge_slave_0: entered allmulticast mode [ 230.396009][ T7882] bridge_slave_0: entered promiscuous mode [ 230.403990][ T7882] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.412667][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.419880][ T7882] bridge_slave_1: entered allmulticast mode [ 230.427410][ T7882] bridge_slave_1: entered promiscuous mode [ 230.519351][ T7882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.556655][ T7882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.674222][ T7882] team0: Port device team_slave_0 added [ 230.698466][ T7882] team0: Port device team_slave_1 added [ 230.830022][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.853904][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.879845][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.065242][ T7882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.122312][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.140462][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.166333][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.176462][ T7941] befs: (nbd3): No write support. Marking filesystem read-only [ 231.176552][ T7941] syz.3.509: attempt to access beyond end of device [ 231.176552][ T7941] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 231.176584][ T7941] befs: (nbd3): unable to read superblock [ 231.269289][ T7882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.557809][ T7882] hsr_slave_0: entered promiscuous mode [ 231.590307][ T7882] hsr_slave_1: entered promiscuous mode [ 231.617036][ T7882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.652620][ T7882] Cannot create hsr debugfs directory [ 232.440497][ T5836] Bluetooth: hci5: command tx timeout [ 232.651790][ T7882] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 232.705153][ T7882] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 232.724955][ T7882] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 232.743198][ T7882] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 233.106001][ T7882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.145940][ T7974] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 233.156838][ T7974] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 233.216184][ T7882] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.254388][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.261507][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.346989][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.354138][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.383761][ T7979] fuse: Unknown parameter '0x0000000000000003' [ 234.112344][ T7882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.520763][ T5836] Bluetooth: hci5: command tx timeout [ 234.998279][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 234.998307][ T30] audit: type=1326 audit(2000000007.710:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8003 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fa18e9a9 code=0x7fc00000 [ 235.467357][ T7882] veth0_vlan: entered promiscuous mode [ 235.498469][ T7882] veth1_vlan: entered promiscuous mode [ 236.388708][ T5884] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 236.561757][ T7882] veth0_macvtap: entered promiscuous mode [ 236.575061][ T7882] veth1_macvtap: entered promiscuous mode [ 236.604363][ T5836] Bluetooth: hci5: command tx timeout [ 236.613172][ T8032] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 236.623605][ T8032] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 236.639353][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.699466][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.717267][ T5884] usb 4-1: device descriptor read/64, error -71 [ 236.739417][ T7882] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.782792][ T7882] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.860680][ T30] audit: type=1400 audit(2000000009.570:776): avc: denied { write } for pid=8045 comm="syz.1.529" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 237.001851][ T5884] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 237.752339][ T8051] binder: 8049:8051 unknown command 0 [ 237.762999][ T7882] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.763024][ T8051] binder: 8049:8051 ioctl c0306201 200000000080 returned -22 [ 237.786644][ T8051] binder: 8049:8051 unknown command 1078485781 [ 237.796983][ T30] audit: type=1400 audit(2000000010.500:777): avc: denied { map } for pid=8049 comm="syz.4.528" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.810432][ T8051] binder: 8049:8051 ioctl c0306201 200000000180 returned -22 [ 237.820779][ T7882] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.860408][ T5884] usb 4-1: device descriptor read/64, error -71 [ 237.999054][ T5884] usb usb4-port1: attempt power cycle [ 238.315071][ T8067] capability: warning: `syz.0.530' uses 32-bit capabilities (legacy support in use) [ 238.651501][ T5884] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 238.837298][ T5884] usb 4-1: device descriptor read/8, error -71 [ 239.086055][ T7856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.114149][ T7856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.202926][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.262605][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.439244][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 240.471692][ T8095] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 240.482232][ T8095] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 240.683406][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 240.690259][ T5833] usb 7-1: config 0 has an invalid interface number: 203 but max is 0 [ 240.704841][ T5833] usb 7-1: config 0 has no interface number 0 [ 240.727110][ T5833] usb 7-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 240.768315][ T8103] 9pnet_fd: Insufficient options for proto=fd [ 240.800025][ T5833] usb 7-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 240.825300][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.847200][ T5833] usb 7-1: Product: syz [ 240.870984][ T5833] usb 7-1: Manufacturer: syz [ 240.875680][ T5833] usb 7-1: SerialNumber: syz [ 240.928721][ T5833] usb 7-1: config 0 descriptor?? [ 240.951005][ T8091] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 240.963131][ T5833] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.058230][ T8108] fuse: Bad value for 'fd' [ 241.180554][ T5939] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 241.335158][ T8116] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 241.343770][ T30] audit: type=1400 audit(2000000014.050:778): avc: denied { write } for pid=8111 comm="syz.3.544" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.440484][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'. [ 241.462867][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 241.506198][ T30] audit: type=1400 audit(2000000014.050:779): avc: denied { ioctl } for pid=8111 comm="syz.3.544" path="/dev/sg0" dev="devtmpfs" ino=750 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.542888][ T5833] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 241.584592][ T8114] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 241.638514][ T8117] netlink: 'syz.1.545': attribute type 7 has an invalid length. [ 241.702412][ T8117] netlink: 'syz.1.545': attribute type 8 has an invalid length. [ 241.755013][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 241.770454][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.859339][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.996398][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.135484][ T5939] usb 5-1: config 4 has an invalid interface number: 8 but max is 0 [ 242.143629][ T5939] usb 5-1: config 4 has no interface number 0 [ 242.149726][ T5939] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 242.163019][ T5833] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.175171][ T5939] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 242.184939][ T5939] usb 5-1: config 4 interface 8 has no altsetting 0 [ 242.194772][ T5939] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 242.203957][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.211964][ T5939] usb 5-1: Product: syz [ 242.214366][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.216104][ T5939] usb 5-1: Manufacturer: syz [ 242.216120][ T5939] usb 5-1: SerialNumber: syz [ 242.266434][ T5833] usb 1-1: config 0 descriptor?? [ 242.478004][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.504726][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.531792][ T5912] usb 7-1: USB disconnect, device number 2 [ 242.584481][ T5939] opticon 5-1:4.8: opticon converter detected [ 242.636664][ T5939] usb 5-1: opticon converter now attached to ttyUSB0 [ 242.689814][ T30] audit: type=1400 audit(2000000015.390:780): avc: denied { read } for pid=8118 comm="syz.1.546" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.736193][ T5939] usb 5-1: USB disconnect, device number 19 [ 242.739964][ T5833] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 242.791665][ T5939] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 242.795680][ T5833] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 242.819148][ T5939] opticon 5-1:4.8: device disconnected [ 243.278301][ T8133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.402278][ T8135] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 243.412729][ T8135] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 244.281834][ T5912] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 245.767121][ T8163] ip6t_srh: unknown srh match flags B153 [ 245.874577][ T5884] usb 1-1: USB disconnect, device number 22 [ 247.662718][ T5939] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 247.674914][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 247.778322][ T8168] lo speed is unknown, defaulting to 1000 [ 248.000381][ T5939] usb 4-1: device descriptor read/64, error -32 [ 248.790715][ T5939] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 248.960465][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 249.120429][ T5939] usb 4-1: device descriptor read/all, error -71 [ 249.130629][ T5939] usb usb4-port1: attempt power cycle [ 249.646507][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 249.700577][ T30] audit: type=1400 audit(2000000022.350:781): avc: denied { bind } for pid=8196 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.195568][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 250.224385][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 250.352395][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.363855][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.373532][ T9] usb 2-1: Product: syz [ 250.378039][ T9] usb 2-1: Manufacturer: syz [ 250.393660][ T9] usb 2-1: SerialNumber: syz [ 250.414192][ T9] usb 2-1: config 0 descriptor?? [ 250.472948][ T9] usb 2-1: selecting invalid altsetting 0 [ 250.685190][ T9] usb 2-1: USB disconnect, device number 25 [ 250.729108][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.448442][ T8220] process 'syz.0.574' launched './file0' with NULL argv: empty string added [ 251.460437][ T5939] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 251.476560][ T30] audit: type=1400 audit(2000000024.180:782): avc: denied { execute_no_trans } for pid=8213 comm="syz.0.574" path="/127/file0" dev="tmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 251.642941][ T5946] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 251.685143][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.716326][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.830499][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 252.021706][ T5946] usb 2-1: config index 0 descriptor too short (expected 8237, got 45) [ 252.034508][ T5939] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 252.060613][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.060673][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.105623][ T5939] usb 5-1: config 0 descriptor?? [ 252.143345][ T5939] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 252.150725][ T5946] usb 2-1: config 0 has no interfaces? [ 252.156431][ T5946] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.197124][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.227751][ T5946] usb 2-1: config 0 descriptor?? [ 252.442873][ T5939] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 252.456001][ T5946] usb 2-1: string descriptor 0 read error: -71 [ 252.492404][ T5946] usb 2-1: USB disconnect, device number 26 [ 252.571885][ T8235] gfs2: gfs2 mount does not exist [ 252.601046][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 252.616537][ T8236] befs: (nbd1): No write support. Marking filesystem read-only [ 252.624255][ T8236] syz.1.580: attempt to access beyond end of device [ 252.624255][ T8236] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 252.637256][ T8236] befs: (nbd1): unable to read superblock [ 252.656076][ T5939] usb 1-1: config 0 has an invalid interface number: 203 but max is 0 [ 252.680512][ T5939] usb 1-1: config 0 has no interface number 0 [ 252.701408][ T5939] usb 1-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 252.718395][ T8238] block device autoloading is deprecated and will be removed. [ 252.744641][ T8237] openvswitch: netlink: Geneve opt len 91 is not a multiple of 4. [ 252.768745][ T5939] usb 1-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 252.788393][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.813625][ T5939] usb 1-1: Product: syz [ 252.829168][ T5939] usb 1-1: Manufacturer: syz [ 252.833991][ T5939] usb 1-1: SerialNumber: syz [ 252.857117][ T5939] usb 1-1: config 0 descriptor?? [ 252.900840][ T8229] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 252.909917][ T5939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.066423][ T30] audit: type=1400 audit(2000000025.780:783): avc: denied { read } for pid=8247 comm="syz.3.584" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 253.121203][ T30] audit: type=1400 audit(2000000025.800:784): avc: denied { open } for pid=8247 comm="syz.3.584" path="/132/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 253.299219][ T30] audit: type=1400 audit(2000000026.010:785): avc: denied { ioctl } for pid=8250 comm="syz.1.585" path="socket:[17505]" dev="sockfs" ino=17505 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 253.360585][ T5884] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 253.542201][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 253.576259][ T5884] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 253.591936][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.692930][ T5884] usb 4-1: Product: syz [ 253.702499][ T5884] usb 4-1: Manufacturer: syz [ 253.709456][ T5884] usb 4-1: SerialNumber: syz [ 253.725074][ T5884] usb 4-1: config 0 descriptor?? [ 253.758664][ T5884] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 253.939549][ T5884] usb 1-1: USB disconnect, device number 23 [ 253.974519][ T5912] usb 4-1: USB disconnect, device number 20 [ 253.995955][ T5912] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 254.112059][ T10] usb 5-1: USB disconnect, device number 20 [ 255.264421][ T8274] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 255.274987][ T8274] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 255.325204][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.935742][ T30] audit: type=1326 audit(2000000028.650:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 255.958962][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.967145][ T8295] gfs2: gfs2 mount does not exist [ 256.052256][ T8298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.597'. [ 256.277088][ T30] audit: type=1326 audit(2000000028.650:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 256.709940][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 256.737841][ T30] audit: type=1326 audit(2000000028.650:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 256.765476][ T30] audit: type=1326 audit(2000000028.710:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 256.788617][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.795004][ T30] audit: type=1326 audit(2000000028.710:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 256.827493][ T8295] openvswitch: netlink: Geneve opt len 91 is not a multiple of 4. [ 256.913442][ T30] audit: type=1326 audit(2000000028.710:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 256.936560][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.971869][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.026463][ T30] audit: type=1326 audit(2000000028.710:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 257.028686][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.067324][ T30] audit: type=1326 audit(2000000028.710:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 257.091697][ T30] audit: type=1326 audit(2000000028.710:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 257.115357][ T30] audit: type=1326 audit(2000000028.710:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f462158d310 code=0x7ffc0000 [ 257.224714][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.235761][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.838690][ T8309] input: syz1 as /devices/virtual/input/input15 [ 258.098844][ T10] usb 1-1: usb_control_msg returned -32 [ 258.114032][ T10] usbtmc 1-1:16.0: can't read capabilities [ 258.360475][ T5939] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 259.181551][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 259.222924][ T5939] usb 2-1: config 0 has an invalid interface number: 203 but max is 0 [ 259.501387][ T5939] usb 2-1: config 0 has no interface number 0 [ 259.508043][ T5939] usb 2-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 259.920113][ T5939] usb 2-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 259.935867][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.949904][ T5939] usb 2-1: Product: syz [ 259.976172][ T5939] usb 2-1: Manufacturer: syz [ 259.997818][ T8327] lo speed is unknown, defaulting to 1000 [ 260.111173][ T5939] usb 2-1: SerialNumber: syz [ 260.129126][ T5939] usb 2-1: config 0 descriptor?? [ 260.145737][ T8312] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 260.157849][ T5939] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.202892][ T8327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.244909][ T5946] usb 1-1: USB disconnect, device number 24 [ 261.726138][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 261.726157][ T30] audit: type=1400 audit(2000000034.080:805): avc: denied { connect } for pid=8339 comm="syz.6.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.838417][ T9] usb 2-1: USB disconnect, device number 27 [ 261.845122][ T8343] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 261.960438][ T30] audit: type=1400 audit(2000000034.660:806): avc: denied { create } for pid=8346 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.075222][ T30] audit: type=1400 audit(2000000034.660:807): avc: denied { setopt } for pid=8346 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.099476][ T8350] netlink: 732 bytes leftover after parsing attributes in process `syz.6.615'. [ 262.198564][ T30] audit: type=1400 audit(2000000034.730:808): avc: denied { bind } for pid=8326 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 262.688716][ T8356] gfs2: gfs2 mount does not exist [ 262.859088][ T30] audit: type=1401 audit(2000000035.560:809): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 262.989428][ T8356] openvswitch: netlink: Geneve opt len 91 is not a multiple of 4. [ 263.027873][ T5833] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 263.208690][ T5833] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.224001][ T5833] usb 2-1: config 0 has no interface number 0 [ 263.310751][ T5833] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 263.371677][ T5833] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 263.410189][ T5833] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.440301][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.061250][ T5833] usb 2-1: config 0 descriptor?? [ 264.067638][ T8358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 264.090413][ T5884] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 264.134002][ T5833] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 264.175851][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 264.261880][ T5884] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.274502][ T5884] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.302263][ T5884] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.330992][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.377513][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.397313][ T5955] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 264.415510][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.416933][ T30] audit: type=1400 audit(2000000037.130:810): avc: denied { write } for pid=8355 comm="syz.1.617" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 264.449009][ T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 264.574194][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.582781][ T9] usb 7-1: config 0 descriptor?? [ 264.695213][ T5884] usb 4-1: usb_control_msg returned -32 [ 264.700619][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 264.737610][ T5884] usbtmc 4-1:16.0: can't read capabilities [ 264.751118][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 264.825552][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 264.945108][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.973225][ T5955] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.036670][ T5884] usb 2-1: USB disconnect, device number 28 [ 265.040458][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 265.080353][ T5955] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 265.089607][ T8379] syz.4.624: attempt to access beyond end of device [ 265.089607][ T8379] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 265.100365][ T5955] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 265.127774][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.180063][ T8379] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:194x2160 (0x33424752, 6, 0, 0, 0) [ 265.217105][ T5955] usb 1-1: config 0 descriptor?? [ 265.236203][ T8374] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 265.550667][ T8383] Bluetooth: MGMT ver 1.23 [ 266.610219][ T5955] usb 7-1: USB disconnect, device number 3 [ 267.067981][ T9] usb 4-1: USB disconnect, device number 21 [ 267.410950][ T5836] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 268.056388][ T30] audit: type=1400 audit(2000000040.770:811): avc: denied { create } for pid=8397 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 268.262433][ T30] audit: type=1400 audit(2000000040.980:812): avc: denied { connect } for pid=8397 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.394813][ T30] audit: type=1400 audit(2000000041.000:813): avc: denied { write } for pid=8397 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.059187][ T9] usb 1-1: USB disconnect, device number 25 [ 269.081904][ T8413] delete_channel: no stack [ 269.251500][ T8422] fuse: Unknown parameter '5kQOI‡J“›ñBQ]˜Ù%‚®pöDærð»í¸I®ùô' [ 269.409903][ T30] audit: type=1400 audit(2000000042.090:814): avc: denied { ioctl } for pid=8423 comm="syz.1.634" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 270.001016][ T30] audit: type=1400 audit(2000000042.290:815): avc: denied { connect } for pid=8425 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.020521][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.300249][ T8452] netlink: 76 bytes leftover after parsing attributes in process `syz.1.642'. [ 272.028874][ T8455] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53 sclass=netlink_tcpdiag_socket pid=8455 comm=syz.6.640 [ 272.591930][ T8458] program syz.3.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.145706][ T8473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.648'. [ 275.439656][ T30] audit: type=1326 audit(2000000047.740:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 276.443416][ T30] audit: type=1326 audit(2000000047.740:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 276.467175][ T30] audit: type=1326 audit(2000000047.750:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 276.491361][ T30] audit: type=1326 audit(2000000047.780:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 276.514848][ T30] audit: type=1326 audit(2000000047.790:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 276.538659][ T30] audit: type=1326 audit(2000000047.790:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 276.580400][ T30] audit: type=1326 audit(2000000047.790:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 276.686739][ T30] audit: type=1326 audit(2000000047.790:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 276.975995][ T30] audit: type=1326 audit(2000000047.790:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 276.999598][ T30] audit: type=1326 audit(2000000047.790:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 277.183717][ T8491] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 277.197708][ T8491] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 277.471470][ T8483] loop2: detected capacity change from 0 to 7 [ 277.472863][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 277.517627][ T8483] Dev loop2: unable to read RDB block 7 [ 277.527255][ T8483] loop2: AHDI p1 p2 p3 [ 277.560897][ T8483] loop2: partition table partially beyond EOD, truncated [ 277.605136][ T8483] loop2: p1 start 1601398130 is beyond EOD, truncated [ 277.614223][ T8483] loop2: p2 start 1702059890 is beyond EOD, truncated [ 277.800561][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 277.960480][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 277.979587][ T10] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 278.000938][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.009002][ T10] usb 4-1: Product: syz [ 278.054273][ T10] usb 4-1: Manufacturer: syz [ 278.119296][ T10] usb 4-1: SerialNumber: syz [ 278.163875][ T10] usb 4-1: config 0 descriptor?? [ 278.615924][ T10] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 278.660013][ T10] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 278.698071][ T10] usb 4-1: USB disconnect, device number 22 [ 279.823215][ T5884] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 280.131875][ T5884] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 280.243922][ T5884] usb 5-1: config 0 has no interface number 0 [ 280.288330][ T5884] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 280.510394][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.518428][ T5884] usb 5-1: Product: syz [ 280.600390][ T5884] usb 5-1: Manufacturer: syz [ 280.605026][ T5884] usb 5-1: SerialNumber: syz [ 280.645766][ T5884] usb 5-1: config 0 descriptor?? [ 281.728042][ T8544] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 282.176763][ T5884] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 282.231279][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 282.231297][ T30] audit: type=1400 audit(2000000054.950:857): avc: denied { override_creds } for pid=8550 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 283.055736][ T5884] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 283.063752][ T5884] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 283.071569][ T5884] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 283.149041][ T5884] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 283.202091][ T5884] usb 5-1: USB disconnect, device number 21 [ 283.230111][ T5884] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 283.298176][ T5884] keyspan 5-1:0.133: device disconnected [ 283.330633][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 283.422285][ T8573] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 283.428843][ T8573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 283.454767][ T8573] vhci_hcd vhci_hcd.0: Device attached [ 283.790468][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 284.120652][ T5946] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 284.230909][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 284.362797][ T9] usb 1-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 284.374613][ T8583] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 284.385837][ T8583] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 284.396908][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 284.414112][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.449903][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.474192][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.499100][ T9] usb 1-1: Product: syz [ 284.510564][ T9] usb 1-1: Manufacturer: syz [ 284.530581][ T9] usb 1-1: SerialNumber: syz [ 284.555498][ T9] usb 1-1: config 0 descriptor?? [ 284.582793][ T9] cdc_ncm 1-1:0.0: CDC Union missing and no IAD found [ 284.589627][ T9] cdc_ncm 1-1:0.0: bind() failure [ 285.257606][ T8573] netlink: 'syz.0.678': attribute type 1 has an invalid length. [ 285.292266][ T8573] netlink: 172 bytes leftover after parsing attributes in process `syz.0.678'. [ 285.353528][ T5912] usb 1-1: USB disconnect, device number 26 [ 285.363416][ T8574] vhci_hcd: connection reset by peer [ 285.370170][ T3591] vhci_hcd: stop threads [ 285.374573][ T5833] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 285.384787][ T3591] vhci_hcd: release socket [ 285.394794][ T3591] vhci_hcd: disconnect device [ 285.554012][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.574816][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.604889][ T5833] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 285.620881][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.636168][ T5833] usb 4-1: config 0 descriptor?? [ 285.659513][ T5833] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 287.146998][ T8611] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 287.399681][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 287.953582][ T8611] orangefs_mount: mount request failed with -4 [ 287.997478][ T5912] usb 4-1: USB disconnect, device number 23 [ 288.930445][ T8633] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 288.941094][ T8633] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 289.310727][ T5946] vhci_hcd: vhci_device speed not set [ 289.407160][ T8639] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 289.413728][ T8639] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 289.469491][ T8639] vhci_hcd vhci_hcd.0: Device attached [ 289.483516][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.699'. [ 289.834709][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.699'. [ 289.844475][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.699'. [ 289.961138][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 289.980483][ T5946] usb 33-1: device descriptor read/64, error -110 [ 289.987020][ T5912] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 290.090360][ T5939] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 290.120598][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 290.133652][ T10] usb 1-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 290.152611][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 290.171268][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.220974][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.225827][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.233630][ T5912] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.250025][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.258902][ T5946] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 290.270814][ T5912] usb 4-1: config 0 descriptor?? [ 290.276608][ T5939] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 290.288450][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 290.293458][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.302980][ T5939] usb 5-1: config 0 has no interface number 0 [ 290.309077][ T5939] usb 5-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 290.332134][ T10] usb 1-1: Product: syz [ 290.336444][ T10] usb 1-1: Manufacturer: syz [ 290.346081][ T10] usb 1-1: SerialNumber: syz [ 290.352189][ T5939] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 290.482260][ T10] usb 1-1: config 0 descriptor?? [ 290.531823][ T5939] usb 5-1: config 0 interface 156 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 290.616827][ T10] cdc_ncm 1-1:0.0: CDC Union missing and no IAD found [ 290.643049][ T5939] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 290.680771][ T10] cdc_ncm 1-1:0.0: bind() failure [ 290.707279][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.834288][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 290.867653][ T5939] usb 5-1: config 0 descriptor?? [ 290.971629][ T8639] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 290.994718][ T5939] gspca_main: spca561-2.14.0 probing abcd:cdee [ 291.068385][ T8639] netlink: 172 bytes leftover after parsing attributes in process `syz.0.697'. [ 291.162614][ T5939] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 291.185979][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 291.215919][ T9] usb 1-1: USB disconnect, device number 27 [ 291.232326][ T8642] vhci_hcd: connection reset by peer [ 291.235325][ T5939] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.259139][ T3591] vhci_hcd: stop threads [ 291.285563][ T3591] vhci_hcd: release socket [ 291.303537][ T3591] vhci_hcd: disconnect device [ 291.308325][ T5939] usb 5-1: MIDIStreaming interface descriptor not found [ 291.400501][ T5912] pwc: recv_control_msg error -71 req 04 val 1000 [ 291.421337][ T5912] pwc: recv_control_msg error -71 req 04 val 1300 [ 291.443198][ T5912] pwc: recv_control_msg error -71 req 04 val 1400 [ 291.454442][ T5939] usb 5-1: USB disconnect, device number 22 [ 291.471349][ T5912] pwc: recv_control_msg error -71 req 02 val 2000 [ 291.492985][ T5912] pwc: recv_control_msg error -71 req 02 val 2100 [ 291.510009][ T5912] pwc: recv_control_msg error -71 req 04 val 1500 [ 291.541915][ T5912] pwc: recv_control_msg error -71 req 02 val 2500 [ 291.559945][ T5912] pwc: recv_control_msg error -71 req 02 val 2400 [ 291.578483][ T5912] pwc: recv_control_msg error -71 req 02 val 2600 [ 291.590681][ T5912] pwc: recv_control_msg error -71 req 02 val 2900 [ 291.607742][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 291.624106][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 291.641017][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.660065][ T5912] pwc: Registered as video103. [ 291.670850][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 291.718757][ T5912] usb 4-1: USB disconnect, device number 24 [ 292.607099][ T8674] 9pnet_fd: Insufficient options for proto=fd [ 292.773619][ T8680] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 292.784088][ T8680] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 293.004976][ T8688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=8688 comm=syz.1.711 [ 293.102269][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 293.551926][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.560945][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.569519][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.620853][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.631700][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.679280][ T8695] lo speed is unknown, defaulting to 1000 [ 295.390451][ T5946] vhci_hcd: vhci_device speed not set [ 295.462240][ T8708] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 295.468792][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 295.532696][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 295.700501][ T30] audit: type=1400 audit(2000000068.420:858): avc: denied { connect } for pid=8715 comm="syz.4.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 295.725425][ T5836] Bluetooth: hci6: command tx timeout [ 295.780466][ T5884] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 295.780474][ T5939] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 295.940532][ T1220] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 296.073888][ T8695] chnl_net:caif_netlink_parms(): no params data found [ 296.190354][ T1220] usb 4-1: Using ep0 maxpacket: 8 [ 296.202614][ T5939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.224471][ T1220] usb 4-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 296.297676][ T5939] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 296.310337][ T1220] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 296.319316][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.360671][ T5939] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.369748][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.385903][ T1220] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.395905][ T5939] usb 1-1: Product: syz [ 296.400090][ T5939] usb 1-1: Manufacturer: syz [ 296.404780][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.462216][ T5939] usb 1-1: SerialNumber: syz [ 296.469848][ T8724] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 296.480278][ T8724] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 296.510434][ T5946] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 296.511063][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.526786][ T1220] usb 4-1: Product: syz [ 296.533346][ T1220] usb 4-1: Manufacturer: syz [ 296.538073][ T1220] usb 4-1: SerialNumber: syz [ 296.551937][ T5939] cdc_mbim 1-1:1.0: skipping garbage [ 296.568615][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.576085][ T1220] usb 4-1: config 0 descriptor?? [ 296.587385][ T1220] cdc_ncm 4-1:0.0: CDC Union missing and no IAD found [ 296.594734][ T1220] cdc_ncm 4-1:0.0: bind() failure [ 296.600727][ T8695] bridge_slave_0: entered allmulticast mode [ 296.719124][ T5946] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 296.734895][ T8695] bridge_slave_0: entered promiscuous mode [ 296.746321][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.756524][ T8704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 296.814744][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.840635][ T8706] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 296.845243][ T5946] usb 5-1: config 0 descriptor?? [ 296.851732][ T8706] netlink: 172 bytes leftover after parsing attributes in process `syz.3.716'. [ 296.858622][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.872428][ T5946] cp210x 5-1:0.0: cp210x converter detected [ 296.878908][ T8695] bridge_slave_1: entered allmulticast mode [ 296.892108][ T8695] bridge_slave_1: entered promiscuous mode [ 297.000123][ T8706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.716'. [ 297.127099][ T8695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.166404][ T8695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.195334][ T43] usb 4-1: USB disconnect, device number 25 [ 297.207744][ T8709] vhci_hcd: connection reset by peer [ 297.277097][ T54] vhci_hcd: stop threads [ 297.278217][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.290245][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.312270][ T54] vhci_hcd: release socket [ 297.314199][ T5946] usb 5-1: cp210x converter now attached to ttyUSB0 [ 297.357756][ T54] vhci_hcd: disconnect device [ 297.361384][ T5946] usb 5-1: USB disconnect, device number 23 [ 297.407689][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 297.419233][ T8695] team0: Port device team_slave_0 added [ 297.436439][ T8695] team0: Port device team_slave_1 added [ 297.444809][ T5946] cp210x 5-1:0.0: device disconnected [ 297.554056][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.562398][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.591622][ T8704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.606754][ T5939] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 297.613880][ T8695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.629921][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.638170][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.640497][ T5939] wwan wwan0: port wwan0mbim0 attached [ 297.686877][ T8695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.745538][ T5939] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 4e:83:cf:68:f4:3d [ 297.801508][ T5836] Bluetooth: hci6: command tx timeout [ 298.660699][ T43] usb 1-1: USB disconnect, device number 28 [ 298.945105][ T43] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 298.962414][ T8695] hsr_slave_0: entered promiscuous mode [ 298.968726][ T8695] hsr_slave_1: entered promiscuous mode [ 299.036087][ T8695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.043895][ T8695] Cannot create hsr debugfs directory [ 299.313031][ T43] wwan wwan0: port wwan0mbim0 disconnected [ 299.696446][ T30] audit: type=1400 audit(2000000072.410:859): avc: denied { map } for pid=8759 comm="syz.3.727" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.758056][ T30] audit: type=1400 audit(2000000072.420:860): avc: denied { execute } for pid=8759 comm="syz.3.727" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.881644][ T5836] Bluetooth: hci6: command tx timeout [ 300.162175][ T5939] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 300.395055][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 300.618989][ T5939] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 300.640769][ T8760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.727'. [ 300.704214][ T5939] usb 2-1: config 0 has no interface number 0 [ 300.730380][ T5939] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.781294][ T5939] usb 2-1: config 0 interface 85 has no altsetting 0 [ 300.820636][ T5939] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 300.829706][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.879166][ T5939] usb 2-1: Product: syz [ 300.895015][ T5939] usb 2-1: Manufacturer: syz [ 300.899891][ T5939] usb 2-1: SerialNumber: syz [ 300.910520][ T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 300.918928][ T5939] usb 2-1: config 0 descriptor?? [ 301.000482][ T5884] vhci_hcd: vhci_device speed not set [ 301.032815][ T8695] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 301.110537][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 301.124597][ T8695] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 301.136632][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 301.175999][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.180407][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.186837][ T8695] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 301.199074][ T8787] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 301.205587][ T8787] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 301.239355][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.255310][ T43] pvrusb2: Hardware description: Terratec Grabster AV400 [ 301.273553][ T43] pvrusb2: ********** [ 301.277573][ T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 301.320557][ T8787] vhci_hcd vhci_hcd.0: Device attached [ 301.320816][ T8695] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 301.328453][ T43] pvrusb2: Important functionality might not be entirely working. [ 301.395009][ T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 301.444835][ T43] pvrusb2: ********** [ 301.560839][ T5833] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 301.610753][ T5912] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 301.655663][ T2335] pvrusb2: Invalid write control endpoint [ 301.693513][ T43] usb 4-1: USB disconnect, device number 26 [ 301.712591][ T5939] appletouch 2-1:0.85: Geyser mode initialized. [ 301.776145][ T5939] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input17 [ 301.800068][ T8695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.837929][ T2335] pvrusb2: Invalid write control endpoint [ 301.844913][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 301.867600][ T8695] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.875681][ T5912] usb 5-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 301.907332][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 301.921488][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.928650][ T7476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.931050][ T5912] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 301.965276][ T5836] Bluetooth: hci6: command tx timeout [ 301.981567][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.009480][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.010148][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 302.018880][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.018905][ T5912] usb 5-1: Product: syz [ 302.018919][ T5912] usb 5-1: Manufacturer: syz [ 302.018934][ T5912] usb 5-1: SerialNumber: syz [ 302.020958][ T5912] usb 5-1: config 0 descriptor?? [ 302.075617][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.081300][ T8769] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 302.119146][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.126314][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.140480][ T5980] IPVS: starting estimator thread 0... [ 302.160430][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.189071][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 302.197903][ T5912] cdc_ncm 5-1:0.0: CDC Union missing and no IAD found [ 302.241203][ T8807] IPVS: using max 44 ests per chain, 105600 per kthread [ 302.303572][ T8811] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 302.399052][ T8787] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 302.928414][ T2335] pvrusb2: Device being rendered inoperable [ 303.076226][ T8787] netlink: 172 bytes leftover after parsing attributes in process `syz.4.734'. [ 303.093356][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 303.206531][ T5912] cdc_ncm 5-1:0.0: bind() failure [ 303.225920][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 303.250347][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.734'. [ 303.284089][ T2335] pvrusb2: Attached sub-driver cx25840 [ 303.311265][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 303.333159][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 303.357201][ T5955] usb 5-1: USB disconnect, device number 24 [ 303.392599][ T8788] vhci_hcd: connection reset by peer [ 303.402453][ T1009] vhci_hcd: stop threads [ 303.406861][ T1009] vhci_hcd: release socket [ 303.411840][ T1009] vhci_hcd: disconnect device [ 303.421019][ T10] usb 2-1: USB disconnect, device number 29 [ 303.623367][ T10] appletouch 2-1:0.85: input: appletouch disconnected [ 304.624860][ T8695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.935233][ T30] audit: type=1400 audit(2000000078.630:861): avc: denied { mount } for pid=8862 comm="syz.3.742" name="/" dev="autofs" ino=20169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 307.140408][ T5833] vhci_hcd: vhci_device speed not set [ 307.905084][ T5836] Bluetooth: hci6: command tx timeout [ 308.157303][ T8695] veth0_vlan: entered promiscuous mode [ 308.179107][ T30] audit: type=1400 audit(2000000080.890:862): avc: denied { read } for pid=8884 comm="syz.1.747" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 308.202669][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.403346][ T8695] veth1_vlan: entered promiscuous mode [ 308.404124][ T8890] FAULT_INJECTION: forcing a failure. [ 308.404124][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 308.444983][ T30] audit: type=1400 audit(2000000080.930:863): avc: denied { open } for pid=8884 comm="syz.1.747" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 308.468995][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.501945][ T30] audit: type=1400 audit(2000000081.060:864): avc: denied { append } for pid=8884 comm="syz.1.747" name="nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 308.526819][ T30] audit: type=1400 audit(2000000081.060:865): avc: denied { ioctl } for pid=8884 comm="syz.1.747" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 308.552311][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.576511][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.3.748 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 308.576536][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.576546][ T8890] Call Trace: [ 308.576551][ T8890] [ 308.576557][ T8890] dump_stack_lvl+0x16c/0x1f0 [ 308.576590][ T8890] should_fail_ex+0x512/0x640 [ 308.576613][ T8890] ? fs_reclaim_acquire+0xae/0x150 [ 308.576634][ T8890] ? tomoyo_encode2+0x100/0x3e0 [ 308.576654][ T8890] should_failslab+0xc2/0x120 [ 308.576670][ T8890] __kmalloc_noprof+0xd2/0x510 [ 308.576695][ T8890] ? d_absolute_path+0x136/0x1a0 [ 308.576719][ T8890] tomoyo_encode2+0x100/0x3e0 [ 308.576735][ T8890] tomoyo_encode+0x29/0x50 [ 308.576749][ T8890] tomoyo_realpath_from_path+0x18f/0x6e0 [ 308.576771][ T8890] tomoyo_path_number_perm+0x245/0x580 [ 308.576791][ T8890] ? tomoyo_path_number_perm+0x237/0x580 [ 308.576811][ T8890] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.576830][ T8890] ? find_held_lock+0x2b/0x80 [ 308.576866][ T8890] ? find_held_lock+0x2b/0x80 [ 308.576881][ T8890] ? hook_file_ioctl_common+0x145/0x410 [ 308.576901][ T8890] ? __fget_files+0x20e/0x3c0 [ 308.576916][ T8890] security_file_ioctl+0x9b/0x240 [ 308.576930][ T8890] __x64_sys_ioctl+0xb7/0x210 [ 308.576950][ T8890] do_syscall_64+0xcd/0x4c0 [ 308.576964][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.576981][ T8890] RIP: 0033:0x7efe9018e9a9 [ 308.576994][ T8890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.577009][ T8890] RSP: 002b:00007efe90f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.577025][ T8890] RAX: ffffffffffffffda RBX: 00007efe903b5fa0 RCX: 00007efe9018e9a9 [ 308.577035][ T8890] RDX: 00002000000003c0 RSI: 00000000000007b1 RDI: 0000000000000003 [ 308.577043][ T8890] RBP: 00007efe90f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 308.577052][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.577062][ T8890] R13: 0000000000000000 R14: 00007efe903b5fa0 R15: 00007ffe60b2a408 [ 308.577084][ T8890] [ 308.577304][ T8890] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.798140][ T8695] veth0_macvtap: entered promiscuous mode [ 308.806392][ T8695] veth1_macvtap: entered promiscuous mode [ 308.861091][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.877624][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.894285][ T8695] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.907405][ T8695] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.934630][ T8695] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.970506][ T8695] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.878494][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.896963][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.971212][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.012894][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.912884][ T8929] fuse: Unknown parameter 'grou00000000000000000000' [ 312.137248][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 312.261069][ T8930] overlayfs: failed to resolve './file0': -2 [ 312.282114][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.282158][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.282193][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 312.282214][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.302312][ T10] usb 4-1: config 0 descriptor?? [ 312.314365][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 314.463636][ T8960] netlink: 'syz.4.764': attribute type 3 has an invalid length. [ 314.568332][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 314.900338][ T30] audit: type=1400 audit(2000000087.600:866): avc: denied { load_policy } for pid=8966 comm="syz.0.768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 314.975421][ T8972] FAULT_INJECTION: forcing a failure. [ 314.975421][ T8972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.009726][ T8967] SELinux: failed to load policy [ 315.041248][ T1220] usb 4-1: USB disconnect, device number 27 [ 315.080563][ T8972] CPU: 0 UID: 0 PID: 8972 Comm: syz.4.770 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 315.080588][ T8972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.080597][ T8972] Call Trace: [ 315.080602][ T8972] [ 315.080608][ T8972] dump_stack_lvl+0x16c/0x1f0 [ 315.080638][ T8972] should_fail_ex+0x512/0x640 [ 315.080668][ T8972] _copy_from_iter+0x29f/0x16f0 [ 315.080687][ T8972] ? __alloc_skb+0x200/0x380 [ 315.080713][ T8972] ? __pfx__copy_from_iter+0x10/0x10 [ 315.080731][ T8972] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 315.080755][ T8972] netlink_sendmsg+0x829/0xdd0 [ 315.080778][ T8972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.080806][ T8972] ____sys_sendmsg+0xa98/0xc70 [ 315.080827][ T8972] ? copy_msghdr_from_user+0x10a/0x160 [ 315.080843][ T8972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.080874][ T8972] ___sys_sendmsg+0x134/0x1d0 [ 315.080891][ T8972] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.080904][ T8972] ? __lock_acquire+0x622/0x1c90 [ 315.080946][ T8972] __sys_sendmsg+0x16d/0x220 [ 315.080963][ T8972] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.080991][ T8972] do_syscall_64+0xcd/0x4c0 [ 315.081008][ T8972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.081025][ T8972] RIP: 0033:0x7fe85278e9a9 [ 315.081038][ T8972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.081053][ T8972] RSP: 002b:00007fe853519038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.081069][ T8972] RAX: ffffffffffffffda RBX: 00007fe8529b5fa0 RCX: 00007fe85278e9a9 [ 315.081078][ T8972] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 315.081086][ T8972] RBP: 00007fe853519090 R08: 0000000000000000 R09: 0000000000000000 [ 315.081093][ T8972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.081101][ T8972] R13: 0000000000000000 R14: 00007fe8529b5fa0 R15: 00007fff4eeb8558 [ 315.081119][ T8972] [ 315.283586][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.360423][ T5912] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 315.510727][ T30] audit: type=1400 audit(2000000088.220:867): avc: denied { create } for pid=8973 comm="syz.4.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 315.560450][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.591512][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 315.647670][ T5912] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 315.664647][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.678557][ T5912] usb 1-1: config 0 descriptor?? [ 316.480438][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 316.488089][ T1220] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 316.494639][ T5912] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 316.670502][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 316.677653][ T1220] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.774308][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.979901][ T8967] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 317.148850][ T1220] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 317.158217][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.167017][ T10] usb 8-1: config 0 has an invalid interface number: 203 but max is 0 [ 317.175372][ T10] usb 8-1: config 0 has no interface number 0 [ 317.183287][ T10] usb 8-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 317.194083][ T1220] usb 4-1: config 0 descriptor?? [ 317.205826][ T10] usb 8-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 317.220908][ T1220] pwc: Askey VC010 type 2 USB webcam detected. [ 317.227287][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.270075][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 317.290364][ T10] usb 8-1: Product: syz [ 317.294617][ T10] usb 8-1: Manufacturer: syz [ 317.299244][ T10] usb 8-1: SerialNumber: syz [ 317.322327][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.768'. [ 317.333288][ T10] usb 8-1: config 0 descriptor?? [ 317.340663][ T8991] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 317.367405][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.577032][ T8967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.609902][ T1220] pwc: recv_control_msg error -32 req 02 val 2b00 [ 317.639286][ T1220] pwc: recv_control_msg error -32 req 02 val 2700 [ 317.898204][ T1220] pwc: recv_control_msg error -71 req 04 val 1000 [ 317.917806][ T1220] pwc: recv_control_msg error -71 req 04 val 1300 [ 317.957409][ T1220] pwc: recv_control_msg error -71 req 04 val 1400 [ 317.989318][ T1220] pwc: recv_control_msg error -71 req 02 val 2000 [ 318.009083][ T1220] pwc: recv_control_msg error -71 req 02 val 2100 [ 318.039684][ T1220] pwc: recv_control_msg error -71 req 04 val 1500 [ 318.049777][ T1220] pwc: recv_control_msg error -71 req 02 val 2500 [ 318.080435][ T1220] pwc: recv_control_msg error -71 req 02 val 2400 [ 318.100156][ T1220] pwc: recv_control_msg error -71 req 02 val 2600 [ 318.126657][ T1220] pwc: recv_control_msg error -71 req 02 val 2900 [ 318.154775][ T1220] pwc: recv_control_msg error -71 req 02 val 2800 [ 318.175377][ T1220] pwc: recv_control_msg error -71 req 04 val 1100 [ 318.203960][ T1220] pwc: recv_control_msg error -71 req 04 val 1200 [ 318.338141][ T1220] pwc: Registered as video103. [ 318.350601][ T1220] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 318.365943][ T1220] usb 4-1: USB disconnect, device number 28 [ 318.954567][ T30] audit: type=1400 audit(2000000091.670:868): avc: denied { connect } for pid=9021 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 319.010850][ T5912] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 319.019000][ T5912] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 319.050681][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 319.068710][ T43] usb 8-1: USB disconnect, device number 2 [ 319.099379][ T5912] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71 [ 319.154858][ T5912] usb 1-1: USB disconnect, device number 29 [ 319.331907][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.571808][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.663218][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 319.745894][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.846891][ T10] usb 2-1: config 0 descriptor?? [ 319.893421][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 320.140589][ T43] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 320.511429][ T43] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 320.541066][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 320.549909][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 320.559798][ T43] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 320.573231][ T43] usb 1-1: Product: syz [ 320.577400][ T43] usb 1-1: Manufacturer: syz [ 320.589810][ T43] usb 1-1: SerialNumber: syz [ 320.603281][ T43] usb 1-1: config 0 descriptor?? [ 320.628656][ T9041] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 320.689293][ T9041] netlink: 16 bytes leftover after parsing attributes in process `syz.7.789'. [ 320.805624][ T43] usb 1-1: selecting invalid altsetting 0 [ 320.917353][ T43] usb 1-1: USB disconnect, device number 30 [ 321.002175][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.028792][ T9047] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 1, id = 0 [ 321.580397][ T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 321.645534][ T9056] netlink: 'syz.3.793': attribute type 2 has an invalid length. [ 321.666409][ T9056] netlink: 'syz.3.793': attribute type 11 has an invalid length. [ 321.686574][ T9056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.793'. [ 321.770544][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 321.778182][ T30] audit: type=1400 audit(2000000094.490:869): avc: denied { read write } for pid=9054 comm="syz.3.793" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 321.801212][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.816500][ T43] usb 1-1: config index 0 descriptor too short (expected 8237, got 45) [ 321.896490][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.907478][ T5833] usb 2-1: USB disconnect, device number 30 [ 321.913812][ T43] usb 1-1: config 0 has no interfaces? [ 321.919351][ T30] audit: type=1400 audit(2000000094.490:870): avc: denied { open } for pid=9054 comm="syz.3.793" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 321.959123][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.988461][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.019013][ T43] usb 1-1: config 0 descriptor?? [ 322.286623][ T43] usb 1-1: string descriptor 0 read error: -71 [ 322.302120][ T43] usb 1-1: USB disconnect, device number 31 [ 323.205102][ T9082] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 323.211670][ T9082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 323.235152][ T9082] vhci_hcd vhci_hcd.0: Device attached [ 323.490556][ T5955] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 323.520503][ T5939] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 323.683007][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 323.724344][ T5939] usb 5-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 323.746078][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 323.754480][ T9101] netlink: 'syz.7.802': attribute type 11 has an invalid length. [ 323.764696][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.795430][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.798791][ T30] audit: type=1400 audit(2000000096.510:871): avc: denied { mount } for pid=9099 comm="syz.7.802" name="/" dev="hugetlbfs" ino=22559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 323.807867][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.862110][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.802'. [ 323.866810][ T5939] usb 5-1: Product: syz [ 323.879956][ T5939] usb 5-1: Manufacturer: syz [ 323.892497][ T5939] usb 5-1: SerialNumber: syz [ 323.907799][ T5939] usb 5-1: config 0 descriptor?? [ 323.921565][ T5939] cdc_ncm 5-1:0.0: CDC Union missing and no IAD found [ 323.959737][ T5939] cdc_ncm 5-1:0.0: bind() failure [ 324.165611][ T9082] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 324.197310][ T9082] netlink: 172 bytes leftover after parsing attributes in process `syz.4.798'. [ 324.265707][ T9082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'. [ 324.337652][ T9083] vhci_hcd: connection reset by peer [ 324.344869][ T5939] usb 5-1: USB disconnect, device number 25 [ 324.653758][ T3540] vhci_hcd: stop threads [ 324.672828][ T9119] befs: (nbd1): No write support. Marking filesystem read-only [ 324.681111][ T9119] syz.1.807: attempt to access beyond end of device [ 324.681111][ T9119] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 324.694012][ T9119] befs: (nbd1): unable to read superblock [ 324.749874][ T3540] vhci_hcd: release socket [ 325.320428][ T3540] vhci_hcd: disconnect device [ 325.680764][ T1220] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 325.853128][ T1220] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.936208][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.992988][ T30] audit: type=1400 audit(2000000098.710:872): avc: denied { read } for pid=9130 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.012259][ T1220] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 326.012289][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.031311][ T1220] usb 4-1: config 0 descriptor?? [ 326.076266][ T1220] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 326.158253][ T9132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.804'. [ 326.213010][ T30] audit: type=1400 audit(2000000098.870:873): avc: denied { setopt } for pid=9108 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 326.285366][ T30] audit: type=1400 audit(2000000098.950:874): avc: denied { write } for pid=9130 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.400497][ T1220] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 326.658269][ T1220] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 326.755107][ T1220] usb 8-1: config 0 interface 0 has no altsetting 0 [ 326.788329][ T1220] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 326.815992][ T1220] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 326.828700][ T1220] usb 8-1: Product: syz [ 326.836967][ T1220] usb 8-1: Manufacturer: syz [ 326.845587][ T1220] usb 8-1: SerialNumber: syz [ 326.856026][ T1220] usb 8-1: config 0 descriptor?? [ 326.913070][ T1220] usb 8-1: selecting invalid altsetting 0 [ 327.158045][ T9148] befs: (nbd0): No write support. Marking filesystem read-only [ 327.167698][ T9148] syz.0.813: attempt to access beyond end of device [ 327.167698][ T9148] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 327.181596][ T9148] befs: (nbd0): unable to read superblock [ 327.187382][ T1220] usb 8-1: USB disconnect, device number 3 [ 327.280486][ T5912] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 327.958306][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.047816][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.105812][ T5980] usb 4-1: USB disconnect, device number 29 [ 328.116350][ T5912] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.282083][ T30] audit: type=1400 audit(2000000100.960:875): avc: denied { map } for pid=9151 comm="syz.4.814" path="/proc/569/task/570/attr/fscreate" dev="proc" ino=21869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 328.305830][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.320841][ T5912] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 328.361447][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.363684][ T9157] fuse: Unknown parameter 'group_i00000000000000000000' [ 328.384891][ T5912] usb 2-1: config 0 descriptor?? [ 328.447956][ T30] audit: type=1400 audit(2000000100.960:876): avc: denied { execute } for pid=9151 comm="syz.4.814" path="/proc/569/task/570/attr/fscreate" dev="proc" ino=21869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 328.472041][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.670368][ T5955] vhci_hcd: vhci_device speed not set [ 328.734337][ T1220] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 328.933461][ T1220] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 329.019318][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.088679][ T1220] usb 1-1: Product: syz [ 329.093983][ T1220] usb 1-1: Manufacturer: syz [ 329.108402][ T1220] usb 1-1: SerialNumber: syz [ 329.370225][ T5939] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 329.391036][ T1220] usb 1-1: config 0 descriptor?? [ 329.445018][ T9172] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 329.451585][ T9172] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 329.469771][ T9172] vhci_hcd vhci_hcd.0: Device attached [ 329.542537][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.562898][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 329.606954][ T5939] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 329.625207][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.036386][ T1220] usb 1-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 330.052931][ T1220] f81604 1-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 330.063838][ T1220] f81604 1-1:0.0: probe with driver f81604 failed with error -121 [ 330.079866][ T5939] usb 4-1: config 0 descriptor?? [ 330.090370][ T5912] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 330.098628][ T5980] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 330.246512][ T9181] ip6t_srh: unknown srh match flags B153 [ 330.259044][ T5939] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 330.293478][ T5980] usb 8-1: Using ep0 maxpacket: 8 [ 330.346506][ T5980] usb 8-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 330.457697][ T5980] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 330.472482][ T5980] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.488268][ T5980] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.497979][ T5980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.506428][ T5980] usb 8-1: Product: syz [ 330.523307][ T5980] usb 8-1: Manufacturer: syz [ 330.538840][ T5980] usb 8-1: SerialNumber: syz [ 330.564294][ T5980] usb 8-1: config 0 descriptor?? [ 330.583615][ T5980] cdc_ncm 8-1:0.0: CDC Union missing and no IAD found [ 330.611049][ T5980] cdc_ncm 8-1:0.0: bind() failure [ 330.736860][ T5980] usb 4-1: USB disconnect, device number 30 [ 330.807659][ T9172] netlink: 'syz.7.820': attribute type 1 has an invalid length. [ 330.846824][ T9172] netlink: 172 bytes leftover after parsing attributes in process `syz.7.820'. [ 330.887436][ T9172] netlink: 16 bytes leftover after parsing attributes in process `syz.7.820'. [ 331.001951][ T1220] usb 8-1: USB disconnect, device number 4 [ 331.018626][ T9173] vhci_hcd: connection reset by peer [ 331.029698][ T3591] vhci_hcd: stop threads [ 332.024468][ T3591] vhci_hcd: release socket [ 332.142459][ T43] usb 2-1: USB disconnect, device number 31 [ 332.201458][ T5980] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 332.636416][ T3591] vhci_hcd: disconnect device [ 332.670962][ T5833] usb 1-1: USB disconnect, device number 32 [ 332.803431][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.825819][ T9203] netlink: 'syz.3.829': attribute type 1 has an invalid length. [ 332.840142][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.858846][ T9204] fuse: Unknown parameter 'group_i00000000000000000000' [ 332.872084][ T9205] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 332.886827][ T5980] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 332.910996][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.923004][ T9203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.931749][ T5980] usb 5-1: config 0 descriptor?? [ 332.938648][ T5980] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 333.032784][ T9207] bond1: (slave veth3): Enslaving as an active interface with a down link [ 333.071647][ T9213] fuse: Unknown parameter 'grou00000000000000000000' [ 333.190890][ T9203] FAULT_INJECTION: forcing a failure. [ 333.190890][ T9203] name failslab, interval 1, probability 0, space 0, times 0 [ 333.857989][ T9203] CPU: 1 UID: 0 PID: 9203 Comm: syz.3.829 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 333.858015][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.858024][ T9203] Call Trace: [ 333.858030][ T9203] [ 333.858037][ T9203] dump_stack_lvl+0x16c/0x1f0 [ 333.858068][ T9203] should_fail_ex+0x512/0x640 [ 333.858093][ T9203] ? __kvmalloc_node_noprof+0x124/0x620 [ 333.858119][ T9203] should_failslab+0xc2/0x120 [ 333.858137][ T9203] __kvmalloc_node_noprof+0x137/0x620 [ 333.858160][ T9203] ? lockdep_init_map_type+0x5c/0x280 [ 333.858178][ T9203] ? alloc_netdev_mqs+0xcf8/0x1570 [ 333.858201][ T9203] ? alloc_netdev_mqs+0xcf8/0x1570 [ 333.858216][ T9203] alloc_netdev_mqs+0xcf8/0x1570 [ 333.858240][ T9203] rtnl_create_link+0xc08/0xf90 [ 333.858261][ T9203] rtnl_newlink+0xb69/0x2000 [ 333.858287][ T9203] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.858301][ T9203] ? find_held_lock+0x2b/0x80 [ 333.858323][ T9203] ? avc_has_perm_noaudit+0x117/0x3b0 [ 333.858347][ T9203] ? avc_has_perm_noaudit+0x149/0x3b0 [ 333.858392][ T9203] ? find_held_lock+0x2b/0x80 [ 333.858411][ T9203] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.858426][ T9203] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.858441][ T9203] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 333.858459][ T9203] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.858477][ T9203] rtnetlink_rcv_msg+0x95b/0xe90 [ 333.858497][ T9203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.858522][ T9203] ? ref_tracker_free+0x37c/0x830 [ 333.858542][ T9203] netlink_rcv_skb+0x158/0x420 [ 333.858562][ T9203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.858581][ T9203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.858617][ T9203] ? netlink_deliver_tap+0x1ae/0xd30 [ 333.858641][ T9203] netlink_unicast+0x58a/0x850 [ 333.858660][ T9203] ? __pfx_netlink_unicast+0x10/0x10 [ 333.858680][ T9203] netlink_sendmsg+0x8d1/0xdd0 [ 333.858698][ T9203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.858725][ T9203] ____sys_sendmsg+0xa98/0xc70 [ 333.858746][ T9203] ? copy_msghdr_from_user+0x10a/0x160 [ 333.858763][ T9203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.858794][ T9203] ___sys_sendmsg+0x134/0x1d0 [ 333.858812][ T9203] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.858826][ T9203] ? __lock_acquire+0x622/0x1c90 [ 333.858873][ T9203] __sys_sendmsg+0x16d/0x220 [ 333.858889][ T9203] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.858923][ T9203] do_syscall_64+0xcd/0x4c0 [ 333.858942][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.858963][ T9203] RIP: 0033:0x7efe9018e9a9 [ 333.858977][ T9203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.858992][ T9203] RSP: 002b:00007efe90f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.859008][ T9203] RAX: ffffffffffffffda RBX: 00007efe903b5fa0 RCX: 00007efe9018e9a9 [ 333.859019][ T9203] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 333.859029][ T9203] RBP: 00007efe90f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 333.859039][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.859048][ T9203] R13: 0000000000000000 R14: 00007efe903b5fa0 R15: 00007ffe60b2a408 [ 333.859070][ T9203] [ 334.349374][ T30] audit: type=1400 audit(2000000107.060:877): avc: denied { connect } for pid=9225 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.230402][ T5912] vhci_hcd: vhci_device speed not set [ 335.299223][ T1220] usb 5-1: USB disconnect, device number 26 [ 336.051890][ T9240] netlink: 76 bytes leftover after parsing attributes in process `syz.3.836'. [ 336.381367][ T5836] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 336.764104][ T9249] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 336.770670][ T9249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 337.206856][ T9249] vhci_hcd vhci_hcd.0: Device attached [ 337.260352][ T5833] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 337.269975][ T9255] befs: (nbd0): No write support. Marking filesystem read-only [ 337.278474][ T9255] syz.0.841: attempt to access beyond end of device [ 337.278474][ T9255] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 337.291815][ T9255] befs: (nbd0): unable to read superblock [ 337.656344][ T1220] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 337.742630][ T9259] befs: (nbd7): No write support. Marking filesystem read-only [ 337.753259][ T9259] syz.7.843: attempt to access beyond end of device [ 337.753259][ T9259] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 337.768064][ T9259] befs: (nbd7): unable to read superblock [ 337.780402][ T5946] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 337.807343][ T5833] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 337.807372][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.807392][ T5833] usb 5-1: Product: syz [ 337.807406][ T5833] usb 5-1: Manufacturer: syz [ 337.807421][ T5833] usb 5-1: SerialNumber: syz [ 337.841301][ T30] audit: type=1400 audit(2000000110.460:878): avc: denied { mounton } for pid=9257 comm="syz.7.843" path="/syzcgroup/unified/syz7" dev="hugetlbfs" ino=22559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 337.881132][ T1220] usb 4-1: Using ep0 maxpacket: 8 [ 337.895923][ T1220] usb 4-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 337.895996][ T1220] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 337.896141][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.956567][ T1220] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.956649][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.956713][ T1220] usb 4-1: Product: syz [ 337.956746][ T1220] usb 4-1: Manufacturer: syz [ 337.956805][ T1220] usb 4-1: SerialNumber: syz [ 338.062649][ T1220] usb 4-1: config 0 descriptor?? [ 338.144225][ T1220] cdc_ncm 4-1:0.0: CDC Union missing and no IAD found [ 338.144281][ T1220] cdc_ncm 4-1:0.0: bind() failure [ 338.144335][ T5833] usb 5-1: config 0 descriptor?? [ 338.261550][ T9264] fuse: Unknown parameter 'grou00000000000000000000' [ 338.390765][ T9249] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 338.390819][ T9249] netlink: 172 bytes leftover after parsing attributes in process `syz.3.842'. [ 338.550689][ T5955] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 338.610359][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.842'. [ 338.661310][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.699738][ T10] usb 4-1: USB disconnect, device number 31 [ 338.740620][ T9251] vhci_hcd: connection reset by peer [ 338.750858][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 338.755941][ T5955] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 338.755996][ T5955] usb 1-1: config 0 has no interface number 0 [ 338.756185][ T5955] usb 1-1: config 0 interface 13 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 338.756214][ T5955] usb 1-1: config 0 interface 13 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 338.756241][ T5955] usb 1-1: config 0 interface 13 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 338.756270][ T5955] usb 1-1: config 0 interface 13 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 338.756321][ T5955] usb 1-1: config 0 interface 13 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 338.756348][ T5955] usb 1-1: config 0 interface 13 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 338.756375][ T5955] usb 1-1: config 0 interface 13 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 338.756402][ T5955] usb 1-1: config 0 interface 13 altsetting 7 bulk endpoint 0x5 has invalid maxpacket 64 [ 338.756433][ T5955] usb 1-1: config 0 interface 13 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 338.756479][ T5955] usb 1-1: config 0 interface 13 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 338.756508][ T5955] usb 1-1: config 0 interface 13 has no altsetting 0 [ 338.783854][ T5955] usb 1-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=51.0c [ 338.783888][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.783913][ T5955] usb 1-1: Product: syz [ 338.783989][ T5955] usb 1-1: Manufacturer: syz [ 338.784050][ T5955] usb 1-1: SerialNumber: syz [ 338.822922][ T3540] vhci_hcd: stop threads [ 338.822965][ T3540] vhci_hcd: release socket [ 338.823057][ T3540] vhci_hcd: disconnect device [ 339.002996][ T5955] usb 1-1: config 0 descriptor?? [ 339.006020][ T9261] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 339.021135][ T9261] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 339.023227][ T9261] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 339.032306][ T5833] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 339.032332][ T5833] f81604 5-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 339.032357][ T5833] f81604 5-1:0.0: probe with driver f81604 failed with error -121 [ 339.350730][ T5955] ftdi_sio 1-1:0.13: FTDI USB Serial Device converter detected [ 339.450014][ T5955] ftdi_sio ttyUSB0: unknown device type: 0x510c [ 340.254215][ T5980] usb 5-1: USB disconnect, device number 27 [ 340.325096][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 341.758613][ T10] usb 1-1: USB disconnect, device number 33 [ 341.827096][ T10] ftdi_sio 1-1:0.13: device disconnected [ 343.158506][ T9270] tty tty1: ldisc open failed (-12), clearing slot 0 [ 343.161273][ T5946] vhci_hcd: vhci_device speed not set [ 343.718159][ T9309] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 343.724694][ T9309] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.843696][ T9313] befs: (nbd7): No write support. Marking filesystem read-only [ 343.852462][ T9313] syz.7.855: attempt to access beyond end of device [ 343.852462][ T9313] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 343.865750][ T9313] befs: (nbd7): unable to read superblock [ 344.030316][ T9309] vhci_hcd vhci_hcd.0: Device attached [ 344.446993][ T9315] fuse: Unknown parameter 'grou00000000000000000000' [ 344.530484][ T5939] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 345.270416][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 345.450559][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 345.467511][ T10] usb 1-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 345.535011][ T5833] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 345.555612][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 345.567563][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.597890][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.607494][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.610915][ T5980] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 345.633229][ T10] usb 1-1: Product: syz [ 345.637419][ T10] usb 1-1: Manufacturer: syz [ 345.654596][ T10] usb 1-1: SerialNumber: syz [ 345.674024][ T10] usb 1-1: config 0 descriptor?? [ 345.687067][ T10] cdc_ncm 1-1:0.0: CDC Union missing and no IAD found [ 346.717357][ T10] cdc_ncm 1-1:0.0: bind() failure [ 346.732717][ T5980] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 346.745239][ T5833] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 346.758975][ T5980] usb 8-1: config 0 interface 0 has no altsetting 0 [ 346.769063][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.777623][ T5833] usb 2-1: Product: syz [ 346.782225][ T5833] usb 2-1: Manufacturer: syz [ 346.786886][ T5833] usb 2-1: SerialNumber: syz [ 346.799082][ T5980] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 346.810685][ T9] usb 1-1: USB disconnect, device number 34 [ 346.811211][ T5980] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 346.820647][ T9310] vhci_hcd: connection reset by peer [ 346.827182][ T5980] usb 8-1: Product: syz [ 346.835393][ T5833] usb 2-1: config 0 descriptor?? [ 346.992374][ T30] audit: type=1400 audit(2000000119.640:879): avc: denied { write } for pid=9339 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 347.004432][ T5980] usb 8-1: Manufacturer: syz [ 347.174673][ T5833] ch341 2-1:0.0: ch341-uart converter detected [ 347.191084][ T1009] vhci_hcd: stop threads [ 347.198117][ T5980] usb 8-1: SerialNumber: syz [ 347.200295][ T1009] vhci_hcd: release socket [ 347.219316][ T5980] usb 8-1: config 0 descriptor?? [ 347.225071][ T1009] vhci_hcd: disconnect device [ 347.234949][ T5980] usb 8-1: selecting invalid altsetting 0 [ 347.251283][ T1220] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 347.422844][ T1220] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.466767][ T1220] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 347.473641][ T5980] usb 8-1: USB disconnect, device number 5 [ 347.497487][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.660928][ T1220] usb 5-1: config 0 descriptor?? [ 347.667221][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 347.670386][ T1220] pwc: Askey VC010 type 2 USB webcam detected. [ 347.682970][ T30] audit: type=1326 audit(2000000120.380:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.1.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x0 [ 348.080743][ T1220] pwc: recv_control_msg error -32 req 02 val 2b00 [ 348.133896][ T1220] pwc: recv_control_msg error -32 req 02 val 2700 [ 348.369009][ T1220] pwc: recv_control_msg error -71 req 04 val 1000 [ 349.142123][ T1220] pwc: recv_control_msg error -71 req 04 val 1300 [ 349.150779][ T1220] pwc: recv_control_msg error -71 req 04 val 1400 [ 349.157619][ T1220] pwc: recv_control_msg error -71 req 02 val 2000 [ 349.165922][ T1220] pwc: recv_control_msg error -71 req 02 val 2100 [ 349.175227][ T1220] pwc: recv_control_msg error -71 req 04 val 1500 [ 349.220745][ T1220] pwc: recv_control_msg error -71 req 02 val 2500 [ 349.232809][ T1220] pwc: recv_control_msg error -71 req 02 val 2400 [ 349.236327][ T5833] usb 2-1: failed to send control message: -110 [ 349.239939][ T1220] pwc: recv_control_msg error -71 req 02 val 2600 [ 349.258654][ T1220] pwc: recv_control_msg error -71 req 02 val 2900 [ 349.322401][ T9364] befs: (nbd7): No write support. Marking filesystem read-only [ 349.332866][ T9364] syz.7.871: attempt to access beyond end of device [ 349.332866][ T9364] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 349.345769][ T9364] befs: (nbd7): unable to read superblock [ 349.356279][ T1220] pwc: recv_control_msg error -71 req 02 val 2800 [ 349.485423][ T1220] pwc: recv_control_msg error -71 req 04 val 1100 [ 349.594957][ T5833] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 349.611053][ T1220] pwc: recv_control_msg error -71 req 04 val 1200 [ 349.828452][ T5939] vhci_hcd: vhci_device speed not set [ 349.851030][ T1220] pwc: Registered as video103. [ 349.857454][ T1220] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 349.877546][ T1220] usb 5-1: USB disconnect, device number 28 [ 350.216748][ T5833] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 350.296523][ T43] usb 2-1: USB disconnect, device number 32 [ 350.305550][ T43] ch341 2-1:0.0: device disconnected [ 350.508995][ T5833] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.520598][ T5833] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 350.531185][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.542004][ T5833] usb 8-1: config 0 descriptor?? [ 350.586177][ T5833] pwc: Askey VC010 type 2 USB webcam detected. [ 350.620305][ T9385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.877'. [ 351.386761][ T5833] pwc: recv_control_msg error -32 req 02 val 2b00 [ 351.458204][ T5833] pwc: recv_control_msg error -32 req 02 val 2700 [ 351.709155][ T5833] pwc: recv_control_msg error -71 req 04 val 1000 [ 351.766261][ T5833] pwc: recv_control_msg error -71 req 04 val 1300 [ 351.800388][ T5833] pwc: recv_control_msg error -71 req 04 val 1400 [ 351.825792][ T5833] pwc: recv_control_msg error -71 req 02 val 2000 [ 351.852778][ T5833] pwc: recv_control_msg error -71 req 02 val 2100 [ 351.956303][ T5833] pwc: recv_control_msg error -71 req 04 val 1500 [ 351.964636][ T5833] pwc: recv_control_msg error -71 req 02 val 2500 [ 352.359866][ T5833] pwc: recv_control_msg error -71 req 02 val 2400 [ 352.370395][ T5833] pwc: recv_control_msg error -71 req 02 val 2600 [ 352.401004][ T5833] pwc: recv_control_msg error -71 req 02 val 2900 [ 352.430498][ T5833] pwc: recv_control_msg error -71 req 02 val 2800 [ 352.442644][ T5833] pwc: recv_control_msg error -71 req 04 val 1100 [ 352.474595][ T5833] pwc: recv_control_msg error -71 req 04 val 1200 [ 352.515180][ T5833] pwc: Registered as video103. [ 352.546019][ T5833] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input20 [ 352.649396][ T5833] usb 8-1: USB disconnect, device number 6 [ 352.870406][ T5939] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 353.333461][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.478122][ T5939] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 353.613965][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.738438][ T5939] usb 1-1: config 0 descriptor?? [ 353.793633][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.7.885'. [ 353.799100][ T5939] pwc: Askey VC010 type 2 USB webcam detected. [ 353.803895][ T30] audit: type=1400 audit(2000000126.510:881): avc: denied { ioctl } for pid=9417 comm="syz.7.885" path="socket:[23036]" dev="sockfs" ino=23036 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 354.650732][ T5939] pwc: recv_control_msg error -32 req 02 val 2b00 [ 354.680929][ T5939] pwc: recv_control_msg error -32 req 02 val 2700 [ 354.722115][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 354.780591][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.889'. [ 354.821805][ T9430] fuse: Unknown parameter 'grou00000000000000000000' [ 354.916792][ T5939] pwc: recv_control_msg error -71 req 04 val 1000 [ 354.926337][ T5939] pwc: recv_control_msg error -71 req 04 val 1300 [ 354.950757][ T5939] pwc: recv_control_msg error -71 req 04 val 1400 [ 355.170093][ T5939] pwc: recv_control_msg error -71 req 02 val 2000 [ 355.187369][ T5939] pwc: recv_control_msg error -71 req 02 val 2100 [ 355.207483][ T5939] pwc: recv_control_msg error -71 req 04 val 1500 [ 355.228945][ T5939] pwc: recv_control_msg error -71 req 02 val 2500 [ 355.245172][ T5939] pwc: recv_control_msg error -71 req 02 val 2400 [ 355.350385][ T5939] pwc: recv_control_msg error -71 req 02 val 2600 [ 355.357341][ T5939] pwc: recv_control_msg error -71 req 02 val 2900 [ 355.387530][ T5939] pwc: recv_control_msg error -71 req 02 val 2800 [ 355.399968][ T5939] pwc: recv_control_msg error -71 req 04 val 1100 [ 355.764764][ T5939] pwc: recv_control_msg error -71 req 04 val 1200 [ 355.870035][ T5939] pwc: Registered as video103. [ 355.893883][ T5939] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 355.966377][ T5939] usb 1-1: USB disconnect, device number 35 [ 357.706118][ T30] audit: type=1326 audit(2000000130.420:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 357.754717][ T30] audit: type=1326 audit(2000000130.420:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 357.778139][ T30] audit: type=1326 audit(2000000130.450:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 357.801852][ T30] audit: type=1326 audit(2000000130.450:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 357.825315][ T30] audit: type=1326 audit(2000000130.450:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 358.277174][ T30] audit: type=1326 audit(2000000130.990:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 358.301732][ T9462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.896'. [ 358.510328][ T30] audit: type=1326 audit(2000000130.990:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 359.115572][ T30] audit: type=1326 audit(2000000130.990:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 359.311845][ T30] audit: type=1326 audit(2000000131.020:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 359.335787][ T30] audit: type=1326 audit(2000000131.020:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 359.367892][ T9474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.915183][ T30] audit: type=1326 audit(2000000131.020:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 359.980071][ T30] audit: type=1326 audit(2000000131.020:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 360.193362][ T30] audit: type=1326 audit(2000000131.020:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 360.233343][ T5833] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 360.310484][ T30] audit: type=1326 audit(2000000131.020:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 360.399939][ T30] audit: type=1326 audit(2000000131.020:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 360.748880][ T30] audit: type=1326 audit(2000000131.030:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 360.773176][ T5833] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.814458][ T5833] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 360.844648][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.863122][ T30] audit: type=1326 audit(2000000131.030:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9018e9a9 code=0x7ffc0000 [ 360.911074][ T5833] usb 8-1: config 0 descriptor?? [ 360.965934][ T5833] pwc: Askey VC010 type 2 USB webcam detected. [ 361.084817][ T9512] befs: (nbd3): No write support. Marking filesystem read-only [ 361.093577][ T9512] syz.3.905: attempt to access beyond end of device [ 361.093577][ T9512] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 361.106628][ T9512] befs: (nbd3): unable to read superblock [ 361.956741][ T5833] pwc: recv_control_msg error -32 req 02 val 2b00 [ 361.975585][ T5833] pwc: recv_control_msg error -32 req 02 val 2700 [ 362.274712][ T5833] pwc: recv_control_msg error -71 req 04 val 1000 [ 362.312555][ T5833] pwc: recv_control_msg error -71 req 04 val 1300 [ 362.387127][ T5833] pwc: recv_control_msg error -71 req 04 val 1400 [ 362.409429][ T5833] pwc: recv_control_msg error -71 req 02 val 2000 [ 362.438820][ T5833] pwc: recv_control_msg error -71 req 02 val 2100 [ 362.460886][ T5833] pwc: recv_control_msg error -71 req 04 val 1500 [ 362.475518][ T5833] pwc: recv_control_msg error -71 req 02 val 2500 [ 362.522868][ T5833] pwc: recv_control_msg error -71 req 02 val 2400 [ 362.538692][ T5833] pwc: recv_control_msg error -71 req 02 val 2600 [ 362.560777][ T5833] pwc: recv_control_msg error -71 req 02 val 2900 [ 362.588066][ T5833] pwc: recv_control_msg error -71 req 02 val 2800 [ 362.685221][ T5833] pwc: recv_control_msg error -71 req 04 val 1100 [ 363.185030][ T5833] pwc: recv_control_msg error -71 req 04 val 1200 [ 363.209288][ T5833] pwc: Registered as video103. [ 363.229824][ T5833] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input22 [ 363.302997][ T5833] usb 8-1: USB disconnect, device number 7 [ 363.611335][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 363.870523][ T5912] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 364.175558][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 364.410841][ T5912] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 364.569145][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.708934][ T5912] usb 1-1: Product: syz [ 364.785842][ T5912] usb 1-1: Manufacturer: syz [ 364.802926][ T5912] usb 1-1: SerialNumber: syz [ 364.875943][ T5912] usb 1-1: config 0 descriptor?? [ 365.128761][ T9548] Invalid ELF header magic: != ELF [ 365.138630][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 365.138648][ T30] audit: type=1400 audit(2000000137.830:901): avc: denied { module_load } for pid=9546 comm="syz.4.912" path="/sys/kernel/notes" dev="sysfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 365.168534][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.190884][ T9548] netlink: 'syz.4.912': attribute type 21 has an invalid length. [ 365.242393][ T5912] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 365.249870][ T5912] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 365.254230][ T30] audit: type=1400 audit(2000000137.930:902): avc: denied { shutdown } for pid=9546 comm="syz.4.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 365.390923][ T9555] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 365.401625][ T9555] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 365.419260][ T31] INFO: task syz.5.454:7682 blocked for more than 143 seconds. [ 365.458374][ T5912] usb 1-1: USB disconnect, device number 36 [ 365.483461][ T31] Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 [ 365.568227][ T30] audit: type=1326 audit(2000000138.280:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 365.645316][ T9564] netlink: 36 bytes leftover after parsing attributes in process `syz.1.914'. [ 365.720680][ T5955] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 365.747709][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.947498][ T31] task:syz.5.454 state:D stack:25464 pid:7682 tgid:7678 ppid:6979 task_flags:0x400140 flags:0x00004004 [ 366.121643][ T5955] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 366.150307][ T30] audit: type=1326 audit(2000000138.280:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 366.158231][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 366.188139][ T31] Call Trace: [ 366.227931][ T31] [ 366.270839][ T31] __schedule+0x116a/0x5dd0 [ 366.298232][ T31] ? __pfx___schedule+0x10/0x10 [ 366.341612][ T31] ? find_held_lock+0x2b/0x80 [ 366.371161][ T31] ? schedule+0x2d7/0x3a0 [ 366.382128][ T5955] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 366.410941][ T31] schedule+0xe7/0x3a0 [ 366.426685][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 366.449233][ T31] super_lock+0x2c0/0x3f0 [ 366.476793][ T31] ? __pfx_super_lock+0x10/0x10 [ 366.506715][ T5955] usb 4-1: Product: syz [ 366.538362][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 366.554625][ T5955] usb 4-1: Manufacturer: syz [ 366.572709][ T31] ? __iterate_supers+0x1b6/0x330 [ 366.577882][ T5955] usb 4-1: SerialNumber: syz [ 366.592600][ T31] __iterate_supers+0x1e0/0x330 [ 366.610049][ T5955] usb 4-1: config 0 descriptor?? [ 366.656693][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 366.735187][ T31] ksys_sync+0x89/0x150 [ 366.767638][ T5955] usb 4-1: selecting invalid altsetting 0 [ 366.782650][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 366.816944][ T31] ? __pfx___do_sys_prctl+0x10/0x10 [ 366.870556][ T31] ? rcu_is_watching+0x12/0xc0 [ 366.919903][ T31] ? do_syscall_64+0x91/0x4c0 [ 366.973316][ T31] __do_sys_sync+0xe/0x20 [ 367.019648][ T31] do_syscall_64+0xcd/0x4c0 [ 367.079986][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.121957][ T5955] usb 4-1: USB disconnect, device number 32 [ 367.138634][ T31] RIP: 0033:0x7f8275d8e9a9 [ 367.181631][ T31] RSP: 002b:00007f8276ba5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 367.279804][ T31] RAX: ffffffffffffffda RBX: 00007f8275fb6240 RCX: 00007f8275d8e9a9 [ 367.382868][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.489244][ T31] RBP: 00007f8275fb6240 R08: 0000000000000000 R09: 0000000000000000 [ 367.580608][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.653627][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.767640][ T31] R13: 0000000000000000 R14: 00007f8275fb6240 R15: 00007ffc1ad6ad38 [ 367.856969][ T31] [ 367.896992][ T31] [ 367.896992][ T31] Showing all locks held in the system: [ 367.953016][ T30] audit: type=1326 audit(2000000138.280:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 367.979730][ T30] audit: type=1326 audit(2000000138.280:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 368.003116][ T30] audit: type=1326 audit(2000000138.280:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 368.029225][ T30] audit: type=1326 audit(2000000138.280:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 368.053635][ T31] 5 locks held by kworker/u8:1/13: [ 368.070338][ T30] audit: type=1326 audit(2000000138.280:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 368.093881][ T31] 1 lock held by khungtaskd/31: [ 368.098746][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 368.135241][ T31] 2 locks held by getty/5596: [ 368.144788][ T31] #0: ffff88814cb1b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 368.154824][ T30] audit: type=1326 audit(2000000138.280:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f462158e9a9 code=0x7ffc0000 [ 368.180329][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 368.197139][ T31] 3 locks held by kworker/1:4/5912: [ 368.202751][ T31] #0: ffff88801cee6d48 ((wq_completion)pm){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 368.213316][ T31] #1: ffffc9000456fd10 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 368.225285][ T31] #2: ffff888029854198 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x21/0xe0 [ 368.235357][ T31] 1 lock held by syz.2.223/6786: [ 368.241115][ T31] 1 lock held by syz.6.649/8480: [ 368.246110][ T31] #0: ffff888075d60428 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 368.256403][ T31] 5 locks held by kworker/u8:13/9230: [ 368.261955][ T31] [ 368.264284][ T31] ============================================= [ 368.264284][ T31] [ 368.307194][ T31] NMI backtrace for cpu 1 [ 368.307213][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 368.307234][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.307244][ T31] Call Trace: [ 368.307249][ T31] [ 368.307255][ T31] dump_stack_lvl+0x116/0x1f0 [ 368.307288][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 368.307312][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 368.307336][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 368.307360][ T31] watchdog+0xf70/0x12c0 [ 368.307384][ T31] ? __pfx_watchdog+0x10/0x10 [ 368.307400][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 368.307428][ T31] ? __kthread_parkme+0x19e/0x250 [ 368.307454][ T31] ? __pfx_watchdog+0x10/0x10 [ 368.307472][ T31] kthread+0x3c2/0x780 [ 368.307488][ T31] ? __pfx_kthread+0x10/0x10 [ 368.307505][ T31] ? rcu_is_watching+0x12/0xc0 [ 368.307527][ T31] ? __pfx_kthread+0x10/0x10 [ 368.307544][ T31] ret_from_fork+0x5d4/0x6f0 [ 368.307568][ T31] ? __pfx_kthread+0x10/0x10 [ 368.307585][ T31] ret_from_fork_asm+0x1a/0x30 [ 368.307614][ T31] [ 368.307620][ T31] Sending NMI from CPU 1 to CPUs 0: [ 368.432907][ C0] NMI backtrace for cpu 0 [ 368.432923][ C0] CPU: 0 UID: 0 PID: 1009 Comm: kworker/u8:5 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 368.432941][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.432950][ C0] Workqueue: bat_events batadv_nc_worker [ 368.432974][ C0] RIP: 0010:kasan_byte_accessible+0x0/0x30 [ 368.432993][ C0] Code: 0c 24 ba 01 00 00 00 e9 0e fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f [ 368.433006][ C0] RSP: 0018:ffffc90003a1fa88 EFLAGS: 00000202 [ 368.433016][ C0] RAX: 0000000000000001 RBX: ffffffff8e5c4e00 RCX: 0000000000000002 [ 368.433024][ C0] RDX: 0000000000000000 RSI: ffffffff8b53c66a RDI: ffffffff8e5c4e00 [ 368.433033][ C0] RBP: ffffffff8e5c4e00 R08: 0000000000000000 R09: 0000000000000000 [ 368.433040][ C0] R10: 0000000000000400 R11: 0000000000000001 R12: ffffffff8b53c66a [ 368.433049][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.433056][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 368.433070][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.433078][ C0] CR2: 000055645cd52300 CR3: 0000000030dc7000 CR4: 00000000003526f0 [ 368.433087][ C0] Call Trace: [ 368.433091][ C0] [ 368.433096][ C0] __kasan_check_byte+0x13/0x50 [ 368.433110][ C0] lock_acquire+0xfc/0x350 [ 368.433128][ C0] ? batadv_nc_worker+0x895/0x1030 [ 368.433146][ C0] batadv_nc_worker+0x16a/0x1030 [ 368.433162][ C0] ? batadv_nc_worker+0x159/0x1030 [ 368.433179][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 368.433200][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 368.433220][ C0] ? rcu_is_watching+0x12/0xc0 [ 368.433237][ C0] process_one_work+0x9cc/0x1b70 [ 368.433255][ C0] ? __pfx_process_one_work+0x10/0x10 [ 368.433271][ C0] ? assign_work+0x1a0/0x250 [ 368.433283][ C0] worker_thread+0x6c8/0xf10 [ 368.433301][ C0] ? __pfx_worker_thread+0x10/0x10 [ 368.433314][ C0] kthread+0x3c2/0x780 [ 368.433326][ C0] ? __pfx_kthread+0x10/0x10 [ 368.433339][ C0] ? rcu_is_watching+0x12/0xc0 [ 368.433354][ C0] ? __pfx_kthread+0x10/0x10 [ 368.433366][ C0] ret_from_fork+0x5d4/0x6f0 [ 368.433385][ C0] ? __pfx_kthread+0x10/0x10 [ 368.433397][ C0] ret_from_fork_asm+0x1a/0x30 [ 368.433417][ C0] [ 368.439660][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 368.678650][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 368.690436][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.700477][ T31] Call Trace: [ 368.703739][ T31] [ 368.706654][ T31] dump_stack_lvl+0x3d/0x1f0 [ 368.711242][ T31] panic+0x71c/0x800 [ 368.715126][ T31] ? __pfx_panic+0x10/0x10 [ 368.719530][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 368.724891][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 368.730860][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 368.736223][ T31] ? watchdog+0xdda/0x12c0 [ 368.740625][ T31] ? watchdog+0xdcd/0x12c0 [ 368.745026][ T31] watchdog+0xdeb/0x12c0 [ 368.749259][ T31] ? __pfx_watchdog+0x10/0x10 [ 368.753917][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 368.759107][ T31] ? __kthread_parkme+0x19e/0x250 [ 368.764126][ T31] ? __pfx_watchdog+0x10/0x10 [ 368.768786][ T31] kthread+0x3c2/0x780 [ 368.772841][ T31] ? __pfx_kthread+0x10/0x10 [ 368.777415][ T31] ? rcu_is_watching+0x12/0xc0 [ 368.782166][ T31] ? __pfx_kthread+0x10/0x10 [ 368.786742][ T31] ret_from_fork+0x5d4/0x6f0 [ 368.791320][ T31] ? __pfx_kthread+0x10/0x10 [ 368.795892][ T31] ret_from_fork_asm+0x1a/0x30 [ 368.800647][ T31] [ 368.803840][ T31] Kernel Offset: disabled [ 368.808170][ T31] Rebooting in 86400 seconds..