last executing test programs: 12m40.728170102s ago: executing program 1 (id=164): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) connect$ax25(r3, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="f00100001800200027bd7000ffdbdf25e0000002000000000000000000000000e00000020000000000000000000000004e2400114e2100000a00008033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1f0}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x109102, 0x0) write$6lowpan_enable(r5, &(0x7f00000000c0)='0', 0x1) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3}], 0xc}) socket$inet6(0xa, 0x3, 0x9) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r7, 0x1}) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r10, 0x0, 0x0, 0x0) 12m39.098500945s ago: executing program 2 (id=171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYRES32], 0x60}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) r4 = socket$isdn(0x22, 0x2, 0x10) r5 = socket$isdn(0x22, 0x2, 0x2) r6 = dup3(r5, r4, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES8=r6, @ANYRES16=r7, @ANYBLOB="00000400000000002400128009000100626f6e640000000014000280057fff5d5dbb97a9b2d57ffb", @ANYRESOCT=r2], 0x44}}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="01c300201000"}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='-\x00', &(0x7f0000000480)='^\x00', 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x448c0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r12, r11, 0x25, 0x8, @void}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 12m38.318686781s ago: executing program 2 (id=173): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000007100)={@multicast, @random="69cb9f223870", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @broadcast, @random="c0ccfe37bdc3", @loopback}}}}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402) read(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x4, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "bd396f2c"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x310f, 0x7, 0x9, 0xc}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x7, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x40, 0x42}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0xec, 0x16, 0x8, 0x8, 0x3}, 0x55, &(0x7f00000003c0)={0x5, 0xf, 0x55, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x4, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0xf000, 0x6, [0xff0030, 0xff0180]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ad7dce8f9d8938718e223cb200aac04a"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "8a0819f49a769920878e4ebb006e36eb"}]}, 0x1, [{0x7d, &(0x7f0000000440)=@string={0x7d, 0x3, "7989357e2798f67ddbfcf6be64d83d92e254e5f44cf4ae9175486a8c9c96fb1ca052ea62c6a84311818f2a004eb17d143deb7d7e178d8d7024909aad49560959e42078e8b843f5f3b71fbfeb0ac25253661cf10517d9f77531b3f34e7859cefe6dcb3f624a7f0ead72485e1c008d15305435735044deabff3bd419"}}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x7, 0x80, 0x1, 0x80000001, {{0x11, 0x4, 0x1, 0x2c, 0x44, 0x66, 0x0, 0x92, 0x29, 0x0, @empty, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0x39, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback}, {@multicast2, 0x5}]}, @rr={0x7, 0xb, 0x89, [@empty, @multicast2]}, @end, @generic={0x1, 0x8, "67d4f49d28e7"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="ce5800f779c300000000000065be2d279500000000020000d5d009734916dc49a6c3a9eef0f605f3d1f7b0a20a5260a1ca0a92d44d63dcdd14d9684771da1045227b5a00a025949ad33eeaea4aef11ef18692a24b8b08c379e56812afa170f7b6dacac182bfd2293c55aab0f6c3a565084b9d0ad684ca24d81869374487550b57af8a22c8797dcc3ddff184f35bf45a3b74280671fdc8007749427b1c4b2314bbcf9346e8cb03b6ee79dec7355e4fd17417a88c4ea4e7a3aaac7bc4e8179389612e502bf5f5a9c488a45a67330fabab11d12bcaae3747c632cfc260ca795d4dce60b70f81fa73ad99eae679fb4cf270c423bf93669d7f19d4b0e3bad643831ce1bbab1c1755bf0468c4c4a88ed0e555a752f0f", @ANYBLOB="af9802c5d115c8378c46ce521167cb767d419160766748dc195bcc9d7001433717b05132ba209b8b51e8b4c59bb4180db79839b9f8f55bd32a9ef9f9cd64f6846a823e190b26119755925d2824ce38760d5e95bf96e9d190b278766b9b22cfc2b70c800d539883b165e4e5b356c7ed2eb86d4304f1bf8ba3479dd952c7e7ee49a1efeb1a8aa2f567a3f7f485d8b2a692e958f463f4ad16ac738f4c1fb09930bc0094a378e090607a3c87a1224a9f2b8d736a5024095c36e9258ffb16b2c7c5205ddeea66c18e7ca66b712b61e2e96c7fb81044f05904df77410fd1333e71ca2221d284b61bf18c24714c9e91468144962d2df0055f"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x28002) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r4, 0x0, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000), &(0x7f00000001c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) 12m33.474974891s ago: executing program 1 (id=182): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x8, 0x0, 0x0, {}, {}, {0xfffffffd, 0x6}, {0x2, 0x87d6}, 0x0, 0x3f0, 0x6, 0xd613, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20000000, 0xfffffffd, 0x24, 0x0, 0x0, 0x4}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x20002, 0x4) 12m33.406002161s ago: executing program 2 (id=183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000304000000d403"]}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "b66ae47d59a5864edfbc57ffed2b40972508c166fcea61b9aaaeef02a0aa734a064583969ed89c09cfb346314e467d0f74129e5e9e93da0e36"}}}, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r0, @ANYRESHEX=r0], 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000007100)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000240)="342028ed6e42a9ba7b850752e6c4f3c7d6fa1e348c7d54c52e29a1b4b6d3da6c84e6", 0x22}, {0x0}], 0x2}}, {{&(0x7f0000000940)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000980)="81707d2768", 0x5}], 0x1}}], 0x2, 0x0) 12m33.375648383s ago: executing program 1 (id=184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt(r1, 0x5, 0xb, &(0x7f0000000240)=""/207, &(0x7f0000000040)=0xcf) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) faccessat(0xffffffffffffffff, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6, 0xdb90}}, './file0\x00'}) epoll_wait(r7, 0x0, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xfff}, 0x8) 12m32.824223912s ago: executing program 3 (id=186): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020601040000000000007f00000064010500050002000000050001000700000009797a3000"/52], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48001) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={0x0, 0xcb, "127ca00471e09c831557c107f63ae8a0769a0c3e47d071ff1f5b4210aa45d094c793bfa83e27ec9002f8e063959c4b9c15f904c333be3e9598ef7044a11721fecbc6e2340066ad3a26f19f65abc6a9bb7e608f1bf3eabd6c730b7fc39f36f02bcc131c251b1231ce937390f7d0dc9e0dafcf5896b7dc3c3a781104a8f990208b49413dc43483ff8ad0ce3ea288eb9e2b566921430907c1cca7eaa054c5a845b7be2baccfcaf0d6db7b552d6b09c9392ae439fbc4a77c443558fb11e1c2e9ea8dded837f64292befc46def0"}, &(0x7f0000000140)=0xd3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e20, 0x10, @private2}}, 0x7, 0x4, 0x40, 0x9c26, 0xd, 0x0, 0xf}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000006c0)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x6, @remote}, 0xc, {0x2, 0x4e23, @empty}}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 12m32.823786301s ago: executing program 3 (id=187): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/2, 0x2}], 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 12m32.215458779s ago: executing program 1 (id=189): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="1f0000001300034700bb5be1c3e4feff06000000010000004500000025000000", 0x20}], 0x1) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) listen(0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x4007) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'tunl0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001400000000008"], 0xfc}}, 0x0) shmget(0x0, 0x2000, 0x3f0, &(0x7f0000ffd000/0x2000)=nil) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x40050}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10044020}, 0x24000045) 12m30.816924838s ago: executing program 4 (id=191): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34020000", @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b0004000000"], 0x34}}, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x4, @empty}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) 12m30.259692673s ago: executing program 4 (id=192): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="07000000040000001800", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000d7c61e4e000200000000000000000000000000000000000000df98b5c17d0f4883dfb110b8858693f5923d45fb03ab713e5f1b6004584b4335e42068de1373d8b1faede49075baa06b997bfb8c22d842e85c4ac65ed10d01d02a"], 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340), &(0x7f0000000140)) r1 = add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000480), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8ca15ac1f3deef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b5add70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de489292545003bcae3d", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, &(0x7f0000003780)=""/194, 0xc2, &(0x7f00000003c0)={&(0x7f0000000380)={'tgr160-generic\x00'}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r1}, &(0x7f0000000880)=""/223, 0xdf, &(0x7f0000000780)={&(0x7f0000000600)={'sha3-224\x00'}, &(0x7f0000003880)="28160fb9c4923742ba1efe37403097ad05039f404754c5b40370688fb8039d69eb94e942cab666a31eb789b42131cf63e19c77297801c021aed039c9a58382a2a5c76c5760eb0062257bff992a14dba172fafff19f8227b261dae638d83d2043aba85af149fc2566bce105e87727e6e10a2be2146f5ea4b26665cf5318a80b6ff4f7f521e58bcfff7e2bd1c3183d16bf7bb6e2fc2d7bc980c882756d03ef7e84155cadc45d3e51a67662b9b9a3aea0d598fda468747479f0e99aaa80831f3dd861f86e1efa37b1206e2a93454f6cd05916e28adce29a5d380e9925deee3e20c144d70bdbe6268568f29f9a9a2aca6b1b60911dbaf82410cff7a474bf68abba047f9462583546f2f4bedef8eb171c7fe1ba8f736334f0297ed6c545d99dd32114650658e6c5c0c6991639549841e0d81fd431eb6d11b7ee8c45e1bd55a54c31f005df411120fca44195ca34b5c4c025502a0aa32f5b920f60cec394f7c3e8fe038b6251b210d1e1c8d50092c41033a082d045d5b6c9a0cd02263c9e8c90f62574605288364e8292a2200d92ce64368bec2115de391e8529594ba06deb80ac472f594fd6d57965530bf544dcbae5023e17c2f88c903f513480a15128a1c8fb146f72c9a743ea2040ee5862d0347cd0773e82d2938b1014422ec7c4cc5d825439e624b56bbb5d2c1bf72bed06e2dd2751a3d65476ae04ee4b1e61038cbc9d912576bdf81e6038e4a0139e250f1d16692e65351f42dc542ac18a7d6b20628362b034b7ca0afc69b2ee56447a5c49136ff29497fdb0c909d8b169494d93c169a9403f03cc1ba25e907a8b92e4fc9d223dafb4c05079040451dcc23527d43e8e4f144e6739c468c293d5c97fccfad5285a9604062ba39807d586e4383e904ac7ad9d8b17b9889f6d2f43ebb9b0f1c0be60590611d87b00380ea4417259d73751e7d830b38e6d3e241fe84fd54a3997ff5c4eba2959417557a118b5e5dc7cb4f80645e9c01dead68d64b7f062a6399fc8afdd1e9b55de16a18fd3a75428b5e9dd873f6c3578f47916e014c05a9987e49a9813b49c06b1993627ade47aa05a09d25bab66ff8318d4ec5695c2801abc2f6b3d66bd73626093d4b1d589ad49a6923d5342905ea33e3d14064b30b511b06fcf54bbc61641a6ed97c7ebfcef6a594b873331376ca2d997ef8f40a308e4e8bd8bd5c5a0d1218613c76f5f722f06a46448dd422f4822a8ae4af7469aa02d13eb5b0d31cfdedb9df858ec11ab8fc4a698a8496efc0a5e116859cd6f9d1d8cd6d12ba0cd71bd032799575bbb88cd7606960cf0505fe552e99cfddc50390ba60e9cf77738033b56bdc9d13480b6126a42fd80fe5fd91c7a0b51473869edb578a08ce89888162f95d3b3765a67de2c0033ca96ed243e70238b2c983431f4b5e6f71a206874618113b112ff403a5f60c7840891e2c86d0472dc2bfe8a32a228565b400c10736e5f8b14582521d73613a8bb852b7fadd9871aa54bb415a02eec7e7e2363b491c562f22f4e52563413f4816f32c3083adf7b81fc0419b2be16e9f64c3672d9d7078be250de853bada1a695a0854fb04b8398ef81bff86882fe983e24bacd7742784e8bfffdd90c82c405c08f974d0c41e89ae9d806ab47425626ec0eb9079add06fabb281a400a36b9ebb14e3f7b6bdfd13ed8a58529d2e64d6dc91328d4bca410af5f57eeeed99e8561dfe59cec0cc69f3dffbf7f5ca6feff830d3f6a5716026505bf131227ce1da22c46c3683a85249fd0b83540e2b946208f1dc1f12af0f43516ec24c33a3c76a44d8c1d4802f89927efee52d631e79010aa9a5f8464df9cf1c645e834cc173f177ea50a534752fa338b4961a1bddd1239dd4d488434099d482e653047da88bdf457a1675caba320c73d576b462f67168eac7c6609cbd7bcd6e62d1a332bc69739b744001e911e40d78ba4b73d351bfe2dbc63c50bc3b66ebfe5f9835670cef12f473fd1610e1007a11b8cc91303253c37d6b6305eeb08d3582940d66fcd964432c07f3896ed39d149a8d35218aa81ad3f9dd36fd914410bb0f3c4ec6df489441654122d5c0616ebed33580da1e634743eb274ca41aa1ddca57adaf8186b6d528dc42aa5e7b3c6120cc416276ce0966b3b2e0317ee0808f6e1a3f7528c9c9e42139795b4cde17b4fda87008822a08a76814b5c2915c03afcd47eadb8240ab19ea37aed97df82c4b9b96cd1962f6d3605f5901f32f2eccf6929c95efdd8fc24bb3e3a1017de7258470e6cb991c97b0c7c72da4ebc87c41f04a2dbee696b8769c776563184f7ec9344c149c25819bd5d69c08f12850d2e048ca0629ffcdd5f0c5112d678e8f18a708ff6da8b44376c11fcddadc6623415a0d56a934bdb1c69383931b945e8f46725e74fda2644f0228cad2d280cb6ab70c5405d2cf9b1d853572354d43d58bf8a60c4a4a07483e4d57687dd5578ccfbd3498f3a783256e7ae68f97aff410b174dec06768e52e1a35faec3797ad2e4ac8290cd0dc7ec316876164f56ed7d43935ae8d935b9487d7c5e83ecb0dcabbe888a868bff39deef77fb3f0fd86031f9152287da3ad33d2d14cb08b122b0ba57eff6852abe797fe4bdfe8ad8313b53876c77106f3ae1fe9fdf9142454a5cfb0242cf668d5efb917dcb05f1b1cafff897be805d46f4912ec49b52177a7210b5b5e9d688850b0631f62530fc75e7659a66cc5f283818eac441b9ba71462e5f1efc1dfa28b9bd5b0bd21fbf2906537f14220dd8366712c1fe920a837fc7e5ad204eb4cb24fbcd7cf55970b7b9c56472282b48c9b09ccb01e337e7f35285dfb799491c75f91faa9e23cbf4b2c7a6cf1c26d9db0cdbeaabc64245590deba0cf302fa0f720204530b765c2af3aa3e083f9b269d2e554d975e01a04dbe92455ec2a5d5658d46698ccf9a6b67205a39940c20a08c49f7573bf574780d5ab707dc14d2b72a433fe2c5515cb5599811e96754c55a10bb60991eed4a1ecc45469c60634534290756ef21232348b3b7ed456dcdf11c9e3be1f40155f84b31e567c73fd26280e57f97c31c4a24952cf4df1baf45fa79538ad9042f1dd9c60635b35f10606978d529cc9520176e79c3edd76b0813f77fd6e7641372677ecd44e2c3c9ce1a13c9be72cddd843002b6a19744bf61d1732173b4810e54490d50e17ce207a5577f8365a4d5651ff6bfec196f345645b57a08ad48c05effa36e25b3705afa553967f5bef7be1457df6a25eaf92461c5a151923081c086f1f57fb56e43ce8d10990af5dd99726b2066f92f358320c78292a831ce1b8990a39417d8a8be98d81eeb88f06db0d2eafecf2ad2e2f3ea5ea7d035943bf903975bba8f66fb447449711483002249c831659db060963dba4c0b38477e69c784ea3ac5bb0b0e9bf6a8433879d99536a4a1e7af44ffbaf5d6554d42e1f3e30ded3b70502cf5d1ed7fe136baeb7978bbdd74ebb71c15a5fee33672c598e0404630b04340016c72e8022c00d7d41baccd504a032b7f5b8da40de069bda38fb1b4473d16a72c5c6bd31eebd06d3cc1beec3cd1beb7686fa3f134307dfefdec49683856e3cc3acb77c083a73c47a54be85fd46c34b0508021b610c032567b88c3325e3f4077c88ace22f592cc97a64cdee2c18d6eb15b06b0d9d014d4331bbf8278a33f1b3e9a779e7abb8ec30c3749f92dbd844a85d0d713d538f5d9d15916a13b7f7d9762e38073b1adf751aaca45063e0d66a2c206aa6a95827c890c3b102e87975f9f773e0e1f3873091ea10dbcfbb02111b9d521122b58d58aa463e8f6239c9dd0975c17525a71fdb27a1ffa1c4722f0b28ccd15768df3c6e745fc050c24d954ec6235c5e86aec8b43a9b809b1e7973561e36688b524603d7ffa01e462478eb1519ffb76b130e56b3db2cc4e890f498763874b3c49413aeece31cae6804c97e05bff888d7ea567405490e777c31615fd587e52360ea95f2b8bbb23c77c234c7346c3a38d9572f57fdeda56103a0b910fe26f532e6a2212d257743fc929f15ff115d66c124c7392d1756c43c6815457edb325cb1ab3e6d2c101344d14e482c98cbd27a8bb84477edf8e3f31c7180e5f5fd75d0188de79982373a8a33cfac6c6b4ff5c128764ee29229315840218a990e2b7c688967391400005abb6d2dbc88540d4a5d1add9d0c430e4763d5446b6f6879c9fb23f0a4634c0a582afa436154aca5c6d0c2400cb023d37fbc90c2755ed0aba8a22965c161538967be13663897c8170279e6187411b0870a873eb89a8ec20a900e4eb21a7074aa880a4c03196fc8507c3a4311e26c12c25792d445f4c2a1ccc131b9e336d889dc32a39c7c81946c630a87fbeb8e6bb7b3c539f3f744973867672430f1b3980d5d98c8de5d1fe52ce26898baf9a3d310ea2b4a0f178063e31afdd3edbc63db7d35f746a300fe98caed17f609692846a7a0d48d988fd345725b16d7838ed3a583f01d4aaca9a4a6c8e904f159c57016f3ae01b4ef01bed885413b0b729383ece3df6d6314384914cd00df6510034ee4ccec311e2f0dbf986099b5a76a8b1af09ca0ab5df53f58236741eff8332b2cbf43c22404ce4aa6412a16d1e63b69ea64d8ec64436e92aaeed4c9a21c830a594992e4747899e2213aa8e4b4558b09ce016a5bce4817a0f1646ccc80518373593a4c9b4c87ab1075487af01c4d92acf01fda862117e29793891068ef1d8f4091fe8dc477b23fbbf6f4eb8b9a72124d319242b754e37f186f30ad52671e8f44000a4be88a5db06e52b85b65561c5d4f0c52bff307dab214e1fe69a21285aad712d8e0c7436fc2d4615d6e52d33b56f3fe1afe635311055ac39a7adf964fb1dabd2aa271957f4e4c62b5a4efde37d7fbe79d3b6af1fd478e16bdeae2a7fc2f3acdb1043aa3a9cb297dc8f0005c90114e707bf4e030036c7839576333134160af0307e97f93c8ce76254d20dc1208861ac4aef77d4d58d47ab7119120d8f95d894b7c8e0944a465f92cb91950322c83bc1f5949ec9fe2a5566b7647f341cf3229161110b2bea48d820f5add36c7a34228d7a644a4c546ca0d6521ed41c1df8d9f5c14f25a43b2da57f56435b90b198351a1e588f5838a187752be0ced04808b875fe2194c3e929c1aa7323a3d60b6d1aab574b5d4f3d660c9de1a08d79f9a2d40bc1f141685dc20a7d682cb2ad4cc68e0b09cb4126be0ec4368cec178d9ce27e55fb6cec49c470849f2fc02e203c6406472ca883b3973dc6d318f980d8899307bcef78867b40115c7f1fad8e7b694b992154be6fc8046aac9c248b508f666fa3995181bc96dc8923fbdacb37a0b97d0335486f706ca4072731cee3625cd6bcdf631b85cf8323c5993533c53cc2c4a8de1762f5bfb6c58dcae0efab9f8b6432fd2a1eb457b0acfef65eecb0ffd9aac5b4c1ab2b1bb0fb3e4e5a6779ccd2ffbce6ee81b6869a89491714e9038bf28fc4878043400569db1448546ca2dd8d58e24dc9a33c9fc6d1c6d3ab2faa3c142908a5a89c93de89455328e7e14feba8fe42a2ae50110015c9fe7d612580b242531471d6096a6362e6873b331e7ebbb47630cfadf3d612cc4aa9be23854595bebeb1c5877a16d22a81c5f77799f4e6901930a406fbeb31298eae22e258df4ef29e6e93dce8eeb90416716f6c65b9cea6d616ccb6bf6132a6c431b0c26319a88434d59f854937b6eda732356da388b49cabc718d5ef7f88d85188dd529c1dd155da566b4946c224df679ca70513e1ffbc95b845b937a69ffa537825a76fefa1689c892a04d96cb767e774729bd52ff233ffa", 0xffffffffffffff72}) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) getdents(r7, &(0x7f0000001280)=""/4075, 0xffb) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 12m29.052151658s ago: executing program 3 (id=193): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xebd, 0xecc, 0x10000}) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x10080, &(0x7f0000000080)={0x0, 0x3938700}) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x8, 0x8, 0x8a8}, 0x3}, 0x20, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x179) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x4, 0x2, 0x1400}}, 0x20, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000240)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1, 0xc23, 0xffffffffffff6e8e, 0x2}, 0x1}, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000340)=@gcm_256={{0x7}, "96149fc578b694f2", "4dbecb4cb679a547327998be13da80831f7ecd5401b67d3acf24424fb4ab74a4", "fa7121e7", "121f592dfa563bef"}, 0x38) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000440)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000540)={{r0}, r5, 0x10, @inherit={0x68, &(0x7f00000004c0)={0x1, 0x4, 0x8000000000000000, 0x4, {0x3e, 0x0, 0x5, 0x2, 0x1c7}, [0x0, 0xfff, 0x181, 0x1]}}, @subvolid=0x2}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@generic={&(0x7f0000001540)='./file0\x00', 0x0, 0x10}, 0x18) getrlimit(0x0, &(0x7f00000015c0)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000001600)={0x0, 0xf, 0x2, 0x4, 0x2, [0x0, 0x9, 0x7, 0xfffffff4]}) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001680), r2) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x40}}, 0x40000) r8 = syz_open_dev$admmidi(&(0x7f0000001780), 0x0, 0x80000) read$midi(r8, &(0x7f00000017c0)=""/141, 0x8d) connect$inet(r0, &(0x7f0000001880)={0x2, 0x4e23, @remote}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) 12m29.046525056s ago: executing program 2 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x13) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x16) write$dsp(r2, &(0x7f0000001040), 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') io_setup(0x1ff, &(0x7f0000000640)) chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xc6a, 0x0, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101382, 0x0) r4 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "56ac20d8f94515785840c37f0474c6ec0a5ea6bc7fcb4a5dc4a7a67a41124795626f66ae923434e2cf6b23bb70ddf08f14fb8f28608ca8537622e5f1448652a1", 0x3a}, 0x48, 0xfffffffffffffffe) socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000e80)=[{{&(0x7f0000000680)=@xdp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/49, 0x31}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f0000000800)=""/45, 0x2d}, {&(0x7f0000000840)=""/145, 0x91}, {&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/214, 0xd6}], 0x6, &(0x7f0000000b00)=""/255, 0xff}, 0x800}, {{&(0x7f0000000c00)=@caif=@rfm, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000000cc0)=""/173, 0xad}], 0x2, &(0x7f0000000dc0)=""/144, 0x90}, 0x10000}], 0x2, 0x10000, &(0x7f0000000f40)={r5, r6+60000000}) r7 = syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f80)) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r11 = syz_open_dev$rtc(&(0x7f0000000fc0), 0x6, 0x40) ioctl$RTC_EPOCH_READ(r11, 0x8008700d, &(0x7f0000001000)) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r12 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="7d061217632df3d547402e9befed92d2018f22f900c845f6926d79baa610eb325d505ec96f00dde3000164350dfcb8367c4d36e7cdfa05a856e68812a5f35a215a5f9bcf77e3b76bfde66bf8dab5c82a4286f9f63bd1173e755684bcc9cb8816f308bd4373ae5fd334a000429d5e95eb91c837f37f287748a506bcb8fbffff484441d17a1240", 0x86, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r4, 0x0, r12}, &(0x7f0000000480)=""/78, 0x4e, &(0x7f0000000600)={&(0x7f0000000400)={'hmac(sha256-avx2)\x00'}, &(0x7f0000000500)="4d331153536f10d44c8ad6d508c34106caa6861070068184aeebcb1eb5da40ae15e11756b8af0b622554096c56264cdaad0c34e2b2f7ffbcbaabef366ac30a2837e0349adbad460252678bca34cf6cd4485fb29bc785041d67acdf7ce015799adc01dfbeb738cb0defaa76117257142605620909d576483779d16ed998fccc28199747e5f5d4ad3d4c814e4712907c15d9695105277d552af9b1468ee72c70d63eb107909ab15b20e3b2b73e7819e1161aea221df7b8cdafa4025a49dce6ca474d321c3f15ac25482ec60c28b905f30f189382bb8f871f2c06858fcb8b9f958d4faa036f52b433f59f32cd538d89f3f5b3883777", 0xf4}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x3, 0xeeee0000, 0x2, 0xffffffffffffffff, 0x8}) 12m28.905134289s ago: executing program 3 (id=195): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x20002, 0x4) 12m28.779133889s ago: executing program 4 (id=197): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0xc5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000af047a9c8e05dd6febb99e9c8d90fe16a773f924fd7296ea3bbc01aacd53", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_usb_connect(0x0, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000072389020b822972d645101020301090242000102000000090401"], 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYRES64=r0], 0x15) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') (async, rerun: 32) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x1, 0xc0eb, 0x3, 0x1004, r0, 0x4, '\x00', 0x0, r2, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1008, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async, rerun: 64) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=0x0}}) (async, rerun: 64) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=@raw=[@ldst={0x2, 0x2, 0x6, 0x4, 0x3, 0x20, 0xfffffffffffffff0}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000000)='GPL\x00', 0x8000, 0xde, &(0x7f00000005c0)=""/222, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0x6, 0x5df}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x4, 0x5, 0x1}, {0x3, 0x1, 0xe, 0xb}, {0x4, 0x2, 0xc, 0x2}, {0x2, 0x2, 0x5, 0x1}], 0x10, 0x10000, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x30, {0x2, 0x4e24, @broadcast}, 'veth1_to_hsr\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES8=r0, @ANYRESDEC], 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ad205b6813eedffa35b0400000"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r12, r9, 0x25, 0x4, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r7, r9, 0x25, 0x5, @val=@kprobe_multi=@addrs={0x0, 0x2, 0x0, &(0x7f00000003c0)=[0x7, 0x2], 0x9fc0000000}}, 0x30) 12m28.686911584s ago: executing program 3 (id=198): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chdir(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001240)='kmem_cache_free\x00', r2, 0x0, 0x8e}, 0x18) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x348}, &(0x7f0000000480)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff3, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r6 = dup(r0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x3, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hoplimit_2292={{0x14}}], 0x18}, 0x20040814) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0xf00, 0xe0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc, 0x25}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "87c89043c7c8c54f7c21a2ba"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "405f98937870"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4140}, 0x800) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xaf, 0x1b1c, 0x1c06, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x8e, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xcacb, 0x2, 0x1, {0x22, 0xd28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xf9, 0x7, 0x7, 0xff, 0x3e}, 0x118, &(0x7f0000000140)={0x5, 0xf, 0x118, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xb, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0x39, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x6, 0xfffc, 0x9}, @generic={0xf7, 0x10, 0x2, "a7b514528a654cca6a3945072fcff761a581d372d0a0c8d326365e6b6e1189e2fe5c9aa1557809274584ce9296a12fa6b0edcff413db9463e3d01c2d5461b10f2c85d794d214c48ee5362853c90b1ff1a64f42d6315f8b3072b8dac38a0b0b1dfe2723b88e066ed944ccd9f6e88af2cf1c33ce119f30ed772972d5589063ae1af91b179f15d866fc2acac56136332706aac8694535a848f986ae3cae6ba86971ed07b32af0ee8d8fca07792a5e492f9c6c4b04eabe229fee892b44a0555b9fce2eab2012063c2647211e8dcffbd2371a343fb9c7a13ef43531ad83477ec5485fa9e307cfb9a3fd71a8a4ff3e8e3c67578e6f86f5"}]}, 0x4, [{0x43, &(0x7f0000000280)=@string={0x43, 0x3, "d40b9787180a18fb344e429a37e72a2e3a83438faf630d50245d4603fb4073caf239a253a018047abe1fa7e773c136d14cacb61968ccf922d4fbb559108582b443"}}, {0xe9, &(0x7f0000000300)=@string={0xe9, 0x3, "cceaa9fb6f7ef5d72b69d9f4683a3b337f33ec2a92d73fabfd535ef00a4d2afec14740bd7522d7cba84d6108f35851750c3664eb453bc4fd87c377c92b6fbb605a396b49ce635cf6ff5c86d91f4b090380d15d78be9b957a8f2cd3b7e9ca16b1441773e23ccd7a88e7e80fc516d18b2147bd164fab620a96e8b34ef9a9c821efe9e165423c7bc4c9e9a60270fac10e8b06b6611cb60073ceefc2a4b0164dddaf83f65ef757c7abbabd2171c268c46b6f5008e0fe8a264f80b95d76d0292e37afe4c96f86387476058f6edfc70f5edfb8e23ae72920ff680aaacead074838681a5c495b70afbc8a"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "978de1ec37d99aa3acbd1faafe0d5ec537448c618b7900645672ae085ac8"}}, {0xd3, &(0x7f0000000440)=@string={0xd3, 0x3, "b1a38614fa8b2969ac8776fd6c127ca05538aded27e9007d1d3c8b75678da4f8391d225f66c9143046c3a09ece83c074616ada580a93fe8d9bb4ce24cd47455cc211ea060a273a3de23ef05ae32ca20674adba13ac57340d90af59097562fc0ab2d536a2eb66b6b86d2d06b95aa1ea88a1dc963e46e539073a69786f2d8028ef925313be06143354dcacb1411219d8c88a24bca500d179bccbd8daca198c6a114c8004b52dbfc73c8d6ff3b343cfae71d36dd4e03e1094287b15dd0f8465f0fa8877674c50147470f79716f3189a246764"}}]}) syz_usb_control_io$hid(r11, &(0x7f0000000780)={0x24, &(0x7f00000005c0)={0x20, 0x8, 0xea, {0xea, 0x30, "7ef22c1702de0ba63497827daa7c76c2a86fb502c576d3c8c9e2076fea4c107a403ec5fbb063d5c9ad9e0f2ed96c03e46fa02ca695bf30059cba3d4b474781187cfe3f5ac6464bd93626d925e8bb18b984d66f1b2f768eca36d47ade8eb3e6ac3a50d8100d666fa3ded5b00697b832b96a5933d895dc42a72ced00d7e90b4c3cacad67666c4a35b0967ee3a9dbd99039d5531a629442d916e8cda3322b75cc37f03ce7f7ab97aaf2ad4d294fe296b1d3ac0dc7eb3924d18ea58e02788f14514668069ed0763428fec41b290ffb95b61557dbc308e67ffcf5b591f68dbcf63311fe905e7d0eb81c77"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000700)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "35e82d9c"}, @main=@item_4={0x3, 0x0, 0x8, "b4f28e96"}, @local=@item_4={0x3, 0x2, 0x5, "ef7fc749"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2f, 0x1, {0x22, 0xe8}}}}, &(0x7f0000000940)={0x2c, &(0x7f00000007c0)={0x0, 0x14, 0x4a, "86394ed9d40e8e3e4e33eece284a61e516aefa03d13e14e67dd6e7a83383b3d0ca86e2076616c7e39ca760bcd819433639d1513dbc407461f5a45ebe09f5b7d861d96f4440a8b7d66bb0"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xd7}, &(0x7f00000008c0)={0x20, 0x1, 0x36, "5ea6675710fd47f7d9229c31d7a4d6dad6f6acb46ef360a1c0c72a9a5cbe842c536ea995f9b874638cc4d5a12d8f3a69f2add18ca151"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x9}}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={0x0}) r12 = syz_usb_connect$cdc_ncm(0x6, 0xa5, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x8, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "bc555bc3"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x9, 0x5}, [@dmm={0x7, 0x24, 0x14, 0xe, 0x1000}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0x7fff}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x3}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x7f7, 0xd, 0x4c, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x4, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x8, 0xfa}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x250, 0x4, 0x2, 0x9, 0x40, 0x7}, 0x1d5, &(0x7f0000000a80)={0x5, 0xf, 0x1d5, 0x6, [@generic={0xe9, 0x10, 0xb, "49f4c87f10f223adaec1983997763bae4a905f145495b54fccd3d0cc51f07a83a3b2820456915d49eaaf51c20903dc95e539647c798e9d2ccb5e808ff8b6335f7795feacdf26695f8af7fdea6b97246b3fb456d62f10be24685d127a4e06c956b6ef95307d47ff6d46a593b75745ce4f44146b021354cbb631344ed94d83e077c2ac9cc668b54ac133a01a0055131b81b6ee97176ccf98f35196c1819b21191633aa54c857aa862e336e487004371908a303a4ee1fc2297e0419c2ba232c11e7e8c6e0d92d509cb8c95fcb832d4f5c6834166712e0ba5b25eb5251a27ed68aaa0f8594c4a37c"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x12, 0x2, 0x7, 0xf000, 0x96b, [0x0, 0xff0060]}, @generic={0xa8, 0x10, 0x3, "cfc0b73ae6ff28f9faf07c9e14ef7c55af94bab33752552f2f95deedf07de6278158006388171149ebe81a99cc6133bb647726531a600a6ccdfefe309cf54bfe5ed5d479ae2c8392b763801877cc24b36d3dbc529f16b25fa890d07c1dc87cf3a060db2c7656447f4183c8bfe1852edb15d8ec79b980e5f7ddbad77e0cd6f06fa975cb287ee1111a20229ea95f724304ec67e61f694774a8d57e4afaee4969bcbc735d0027"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "bfe6d884e40e66222486e061d7534d91"}, @ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0xb, 0x0, 0x5, [0x0, 0x3f00]}]}, 0x2, [{0x93, &(0x7f0000000c80)=@string={0x93, 0x3, "245b7492c1fced1450ca7ea7f609b0cd95dd35e7bfddfe27383c4e16362efdde038290359041fe78a613c22af12a76129214ac3fb76dd0df01553ff173d5b268ee5d4c473b69411eff7d31515515ca28b92eb47080340608ffae5149c0eafbe00f279c0e29897cc022acdf5d8d8595d51082c33e8c98e74c18cfe44a9cf0045eb840f55198b6b53aee1967cd1a3ffda43d"}}, {0x7f, &(0x7f0000000d40)=@string={0x7f, 0x3, "c0f8cf20f48b4005bdd4cb0c4bf04f7f92d60423370804d3dbdb409a36673338e74930e1c211bd85bd53f3303dd659dda5251d7db84194dd20130241ad453bf922fd5ad80979ffc9290c69b8fca6bb03e88c3c2b230bf36891bb1ae4232ffb4930ff381a7dfba3913f8e91046b29f9d6c94c419d7b30582f44c48b472d"}}]}) syz_usb_control_io$cdc_ncm(r12, &(0x7f0000000f40)={0x14, &(0x7f0000000e00)={0x0, 0x3, 0xd3, {0xd3, 0x31, "c8980b4ec3f105ade2b95c4c3b6cb7a79da222b9d3cbfe157b94a84d9d3d2332d37c104d2c6a3fdd16ef0831bc78d7892eff5449ba1e8b6812ce0433f8b6b8c3dd15aa30d0ab3bc23b822dff314a57753d5bfb3a84d2fbe0045d454d0ff682ec37868963eb2cbf619f4c85bf12f0924b81c74c9427de974df49c97fe08c58823faa6a91368ed56befc6a35fa1e26acfbbc4c90d535c02c540332b0afb94863ebc6f04aca48588e3670f3fb0f46d05388b88536f6999b81bd887e81ee2fb80389ba3ba6c51ab98ea7dbde02f9e2727c8bb2"}}, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f80)={0x0, 0x15, 0x33, "401569529ee27aef3ea77da775b06eb39ea2ab48963b8cc49a15ecb7218b6fbb1e623dbb6ef709491e565088b1c1eee4e8204e"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0x0, 0xe, 0x8, 0xffff, 0x8, 0x0, 0x3, 0x2, 0x3, 0x0, 0xfff, 0x2}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000010c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001100)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000001140)={0x20, 0x89, 0x2, 0x1}}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x101000) 12m28.607785878s ago: executing program 1 (id=199): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18ed02bba560152b9c6e0000000089a75346"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x18) syz_open_dev$MSR(&(0x7f0000000080), 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4140aecd, &(0x7f00000000c0)) 12m28.607192713s ago: executing program 2 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x42, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/11, 0xb}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f00000013c0)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000500)=""/234, 0xea}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f0000000680)=""/110, 0x6e}], 0x5, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001240)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}], 0x2, 0x40000040, &(0x7f0000000c80)) fcntl$getown(r2, 0x9) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='snd_soc_jack_report\x00', r4}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x2, 0x0, 0x0) 12m25.361985724s ago: executing program 4 (id=202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x2c, 0x30]}}}}]}) 12m25.243602516s ago: executing program 4 (id=203): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendfile(r0, 0xffffffffffffffff, 0x0, 0x110003) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x184}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f746100000010000280"], 0x118}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd6a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80010}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xf05, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4, 0xd}, {0x1, 0xfff1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x20004804) 12m23.824141985s ago: executing program 3 (id=205): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) userfaultfd(0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, 0x0, &(0x7f00000002c0)=""/27}, 0x20) syz_io_uring_setup(0x4c70, &(0x7f0000000380)={0x0, 0xc48, 0x2, 0x1, 0x100093, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$netlink(0x10, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) memfd_create(0x0, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x3f92, &(0x7f0000000480)={0x0, 0x1b9e, 0x800, 0x3, 0x34f}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x24, 0x3, 0x4}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8000) 12m23.436316397s ago: executing program 1 (id=206): openat$kvm(0x0, 0x0, 0x40, 0x0) mprotect(&(0x7f00006e0000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chown(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) 12m23.38401434s ago: executing program 4 (id=207): syz_open_dev$loop(&(0x7f0000000100), 0x400000040000006, 0x400a00) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x810) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0xff, 0x3}}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) memfd_secret(0x80000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102385, 0xffffff66) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='\x02\x00\x00\x00\x00\x00\x00\x00ext', &(0x7f00000003c0)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) r4 = syz_io_uring_setup(0x231, &(0x7f00000005c0)={0x0, 0x0, 0x20, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000001c0)) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "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"}, 0x418}) 11m36.357830914s ago: executing program 33 (id=206): openat$kvm(0x0, 0x0, 0x40, 0x0) mprotect(&(0x7f00006e0000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chown(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) 11m36.275182942s ago: executing program 34 (id=208): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x8000000001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x24, r4, 0x1, 0x11e, 0x40000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) mq_open(&(0x7f0000000180)='netlink_extack\x00', 0x1, 0x0, &(0x7f00000001c0)={0x800000000, 0x0, 0x7, 0x4}) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0x3) socket$nl_route(0x10, 0x3, 0x0) 11m36.173898594s ago: executing program 35 (id=205): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) userfaultfd(0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, 0x0, &(0x7f00000002c0)=""/27}, 0x20) syz_io_uring_setup(0x4c70, &(0x7f0000000380)={0x0, 0xc48, 0x2, 0x1, 0x100093, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$netlink(0x10, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) memfd_create(0x0, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x3f92, &(0x7f0000000480)={0x0, 0x1b9e, 0x800, 0x3, 0x34f}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x24, 0x3, 0x4}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8000) 11m36.055604884s ago: executing program 36 (id=207): syz_open_dev$loop(&(0x7f0000000100), 0x400000040000006, 0x400a00) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x810) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0xff, 0x3}}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) memfd_secret(0x80000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102385, 0xffffff66) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='\x02\x00\x00\x00\x00\x00\x00\x00ext', &(0x7f00000003c0)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97r1, {0xee00, 0xee01}}, './file0\x00'}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000002440)={&(0x7f00005fd000/0x1000)=nil, 0x6, 0x3, 0x40}) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x1000, 0x1000, &(0x7f0000000440)="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", &(0x7f0000001440)=""/4096, 0x7, 0x0, 0xae, 0xeb, &(0x7f00000000c0)="db2d034eea93eeac886abf2c24f6fa68ea85808567599558565bd0d521873b68e8dab4396a1279b28a40147783de27b937d1298a5f797498f907a0d10890625a74c1e24ac53839d90303d86db48a889a0a582b041c02bda4b0df71d93e1a920e3af66a4b4e66bdd7f4f83a88a88688bf1ca5ef6365ee89284809fdd1d40750b17d773f3b6d990519ab6cbb1200e8148b2dbce9dcfc66294e1890bfa8aa2bd825ab8ae1c079d23e9cbe75da1ebf9d", &(0x7f0000000180)="6f3d5c7dab5f55e4a6af1ccfac4db019730aa37caeee4d02b99cfed175cdcb1a12febf0cc474635b270203a6c65135becbe393e16d8cb15bab93381b24acb98816e1d00faa854756b78a5fe20a49c120fda3539c1c2ffaad99bc5788c84fe3fc8e1cfa1bd4fbca7c0f527a23783fc308784abd9fc61f594254dc4e9c0b11db7faf3a4b323bf6213e85cc62199f04b4248782353ef9a5545420a7ca3380817536feff33ff9ed2b54fbf8639bfec41a5c54a0a0f14dcd7fd48e698c9c52164085b0909786e2f1cbbc5a25ae36d1f68b28520094cd8092b535e0fc0f63c1253513df8000fa57881a330af3e8e", 0x2, 0x0, 0xfffffffd}, 0x50) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) ioctl$SG_IO(r0, 0x2285, 0x0) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000000)="aa1d484ea0000700f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10, &(0x7f0000006680)) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000340)={0x8, 0x1, 0x3, 0x1000, 0x2, 0xff, 0x6}) (async) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000002440)={&(0x7f00005fd000/0x1000)=nil, 0x6, 0x3, 0x40}) (async) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x1000, 0x1000, &(0x7f0000000440)="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", &(0x7f0000001440)=""/4096, 0x7, 0x0, 0xae, 0xeb, &(0x7f00000000c0)="db2d034eea93eeac886abf2c24f6fa68ea85808567599558565bd0d521873b68e8dab4396a1279b28a40147783de27b937d1298a5f797498f907a0d10890625a74c1e24ac53839d90303d86db48a889a0a582b041c02bda4b0df71d93e1a920e3af66a4b4e66bdd7f4f83a88a88688bf1ca5ef6365ee89284809fdd1d40750b17d773f3b6d990519ab6cbb1200e8148b2dbce9dcfc66294e1890bfa8aa2bd825ab8ae1c079d23e9cbe75da1ebf9d", &(0x7f0000000180)="6f3d5c7dab5f55e4a6af1ccfac4db019730aa37caeee4d02b99cfed175cdcb1a12febf0cc474635b270203a6c65135becbe393e16d8cb15bab93381b24acb98816e1d00faa854756b78a5fe20a49c120fda3539c1c2ffaad99bc5788c84fe3fc8e1cfa1bd4fbca7c0f527a23783fc308784abd9fc61f594254dc4e9c0b11db7faf3a4b323bf6213e85cc62199f04b4248782353ef9a5545420a7ca3380817536feff33ff9ed2b54fbf8639bfec41a5c54a0a0f14dcd7fd48e698c9c52164085b0909786e2f1cbbc5a25ae36d1f68b28520094cd8092b535e0fc0f63c1253513df8000fa57881a330af3e8e", 0x2, 0x0, 0xfffffffd}, 0x50) (async) 10m32.799045238s ago: executing program 9 (id=349): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000000c0)={0x45, 0x800000, "ef2a44ac922eead5cb860b923cf971247db7d5665f6cab1b", {0x7, 0x1}, 0x7}) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x4, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchdir(r1) 10m32.620059647s ago: executing program 9 (id=351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x10080, &(0x7f0000002300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xffffa000}}) 10m30.242931784s ago: executing program 9 (id=359): mknod(&(0x7f0000000040)='./file0\x00', 0x80, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0xfffffffffffffffe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffc, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002300)={&(0x7f00000022c0)='svcrdma_no_rwctx_err\x00', r1, 0x0, 0x1da7}, 0x18) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x3016}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20}, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0xffa6) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x200d00, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000002280)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x525, 0x4, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@noop, @rr={0x7, 0xf, 0x9a, [@private=0xa010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x30}]}, @timestamp={0x44, 0xc, 0x7, 0x0, 0x9, [0x0, 0x0]}]}}}}}) 10m15.156971247s ago: executing program 37 (id=359): mknod(&(0x7f0000000040)='./file0\x00', 0x80, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0xfffffffffffffffe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffc, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002300)={&(0x7f00000022c0)='svcrdma_no_rwctx_err\x00', r1, 0x0, 0x1da7}, 0x18) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc040564a, &(0x7f0000000100)={0x0, 0x1, 0x3016}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20}, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0xffa6) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x200d00, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000002280)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x525, 0x4, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@noop, @rr={0x7, 0xf, 0x9a, [@private=0xa010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x30}]}, @timestamp={0x44, 0xc, 0x7, 0x0, 0x9, [0x0, 0x0]}]}}}}}) 2m40.890203824s ago: executing program 8 (id=1971): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x317f, &(0x7f0000000500)={0x0, 0xbc87, 0x2, 0x80000f, 0x24c, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x20001000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4e", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r8 = fsmount(r1, 0x1, 0xd) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000100)={0x0, 0xb8c}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0) readv(r4, &(0x7f0000000780), 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x6) read$watch_queue(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) 2m39.835991257s ago: executing program 8 (id=1974): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x13) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r2, r1, 0x4}, 0x10) open(0x0, 0x16543e, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'wg2\x00', {0x2, 0x4e26, @loopback}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x6c14, 0x80, 0x3, 0x34d}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x40000004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b", @ANYRES16], 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) socket$nl_generic(0x10, 0x3, 0x10) 2m37.027962597s ago: executing program 8 (id=1982): ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x230, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1d0, 0x1, [@m_mirred={0x90, 0xa, 0x0, 0x0, {{0x2}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xc, 0x20000000, 0xa0b, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xffffffff, 0x5, 0x10, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4025, 0x4, 0x0, 0x4, 0x3}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xd8, 0x20, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1, 0x1, 0x3, 0x7fffffff}}]}, {0x94, 0x6, "e0aea23d6eebeeab55912fc34eaa42db9e333843f06623eebc400332e1193f0aa2ca3bde15a5339fd5c84031b447623e46e977dc90ae5093fbcc0c980afee0982f29e31cd2a86384c5da3fe8e2d0c745e465d5c34d02cc44c9ca17414f1501a3c89b1eadfc2035c01d6134a3da1eb9bfb036f8450b6ecf93ea651e257d49666dc1035d3a661455eba1476b5308c35c11"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x64, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x1, 0x20000000, 0x81, 0xfff}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe}]}, {0xf, 0x6, "1df7fae888e399ecc544ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x804}, 0x0) ustat(0x6, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 2m36.065845262s ago: executing program 8 (id=1987): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x25, 0x5, 0x0) sendmsg$xdp(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 2m35.775500235s ago: executing program 8 (id=1989): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "62648f4b35b737b9", "21c20c7e7ad9ecfe5bccea278546791cbaf728f83c0a7efa8e26655613653bb4", '\x00', "01d787a90d233d89"}, 0x38) (async) sendfile(r1, r2, &(0x7f0000000100)=0x10, 0x10001) (async) fcntl$lock(r0, 0x25, &(0x7f00000004c0)={0x0, 0x0, 0x7ffffffffffd, 0x3}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005d35b94082058d00ac7a010203010902120001000009000904"], 0x0) r3 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x2, 0x0, 0x400, 0xfffffffffffffff6, r3}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020}, 0x2020) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) 2m33.844076s ago: executing program 8 (id=1996): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 2m18.031834548s ago: executing program 38 (id=1996): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 33.885099821s ago: executing program 5 (id=2361): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 32.247100405s ago: executing program 5 (id=2364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) socket$kcm(0x2d, 0x2, 0x0) socketpair(0x2, 0x80000, 0x9, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) 31.821062407s ago: executing program 5 (id=2367): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) ioperm(0x0, 0x8, 0x8000000000004) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000100)) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setitimer(0x3, 0x0, 0x0) 30.892143812s ago: executing program 5 (id=2369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0x5, @remote, 0x6}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffffffe, @loopback, 0x400}}]}, 0x70}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) landlock_create_ruleset(&(0x7f0000000100)={0x200, 0x2, 0x3}, 0x18, 0x3) 30.842923848s ago: executing program 5 (id=2370): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff0800044000000081080008400000000320000180"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x94, 0x7e, 0xac, 0x20, 0x8ca, 0x111, 0x6dc8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x89, 0x26, 0x3c}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000300)={0x0, @initdev, @empty}, &(0x7f0000000340)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}]}}]}, 0x3c}}, 0x44050) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x6, 0xfffffffd, 0x38, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7800, 0x0, 0x0, 0x4}}) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000480)={0x1d, r10}, 0x67) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xf4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x100) r11 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r12, @ANYRES8=r3, @ANYRES8=r1], 0x4}}, 0x0) sendfile(r11, r2, 0x0, 0x100000000) 29.105968573s ago: executing program 5 (id=2374): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x182) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000060900000000000061194c00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2f) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 14.084604003s ago: executing program 39 (id=2374): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x182) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000060900000000000061194c00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2f) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 11.403642822s ago: executing program 6 (id=2418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6a, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f00000007c0)={0x52, 0x2, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r9, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11.333169653s ago: executing program 0 (id=2419): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x7}, 0xe) listen(r0, 0x9) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0xfffffffd, 0x0, 0x1}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x8, r2, &(0x7f0000000040)=0x1000, 0xfffffffffffffffc, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec0000001204010328bd7000fbdbdf250300f84c829d7ec4db37761f775c7afb928d013fe3f6d5d1e56115e6c045948b1275b7efc6ecca79d8dfb8279ab10cf19717ae421ef545c05cbd10c0c0bd38748fd0dbf479c7e6cc08005200040000003e00dd002f77127d58ff58b50954cd306be898208c3dd78b7211eeb4f38df399936cb335a500d70c4c582c117427fc234c909b7499bd40c4a515070bbe4100002400378014002f00fe8000000000000000000000000000aa040019800500bc00"/236], 0xec}, 0x1, 0x0, 0x0, 0x8015}, 0x4000) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004", @ANYRES8=r4, @ANYRES32=r4, @ANYRES16=r4, @ANYRESOCT=r4], 0x24}}, 0x4000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) read$msr(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x1c, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffffc0}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r11, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x0, 0xd9f, {0x77359400}, {0x3, 0x1, 0x3, 0x3, 0x6, 0x77, "ab858a8a"}, 0xfed, 0x1, {&(0x7f0000000040)=[{0x1, 0x10001, {0xbb}, 0x8001}, {0x800, 0x4, {0x9}, 0x66}]}}) 11.14803257s ago: executing program 0 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000010, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 10.462993284s ago: executing program 6 (id=2423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x50, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a0000000109021200010000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0xa, 0x6, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r5, &(0x7f00000004c0)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000500000009500000600000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) userfaultfd(0x802) listen(r4, 0x8) r7 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="00f2000000000000240012800b0001006272696467650000140002800800080088a8ffff050007"], 0x44}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 9.779126887s ago: executing program 0 (id=2424): syz_io_uring_setup(0x400112, &(0x7f00000003c0)={0x0, 0xb9d7, 0x800, 0x5, 0x119}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x6, 0x8000000000004) getrlimit(0xe, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000080000000000000085005e006d000000957e6461cec7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(r1) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_open_dev$vim2m(0x0, 0x9, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r5) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.151342349s ago: executing program 6 (id=2427): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x164, 0x11, 0x20, 0x70bd2d, 0x25dfdbff, {0x6}, [@generic="659c2b5cb6dff2eb336f587896cb64ecb8e7361f2271676aa02d2f89123bd47b150be40e244ef093e069e8ab27ad5bbb17b0a4de6d734333bddd679673818657549ab759112a2175d5c257156fe96932f085156956974b402960753ad5f7f0600b0c37f058a9afe8ca5d231242bf3d56a404bfc6642ac98de710ea8202dae566b9d4cb776c91e96b2fc17a782b7111c02a365db42d7e71ae7fd5810dec5b8c43e59da54bfa2e0e7d49c930bbce8bc8894e8f37696c6bd85d16b8f81799f60ff2ba592edecf577d9712da97cd2708a34b694c6660e96ac73690bcf90cb3865ba13b8571", @nested={0x64, 0xc9, 0x0, 0x1, [@nested={0x4, 0x50}, @nested={0x4, 0x12}, @nested={0x4, 0x1a3}, @nested={0x4, 0x11}, @generic="cafac8c0f19574bd16cc602c241052485bb04bcb01d5dd2d08d672b2b3dcac1cba6b3c5205d3e6912966b31b55d4cc0c88cdbc0913da9d61c91c46ba46e415edbf9b1f9a30a47ab0", @typed={0x8, 0xe4, 0x0, 0x0, @str='-%+\x00'}]}, @typed={0x8, 0x136, 0x0, 0x0, @ipv4=@local}]}, 0x164}, 0x1, 0x0, 0x0, 0x4080}, 0x4004010) (async) r1 = socket$kcm(0x29, 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/5, 0x5}], 0x1, &(0x7f0000000340)=""/145, 0x91}, 0x22) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x404, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x20000001) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4fc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000680)={@broadcast, @loopback, 0x1, 0x6, [@empty, @multicast2, @loopback, @broadcast, @private=0xa010101, @broadcast]}, 0x28) (async) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) (async) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x240000c0) (async) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x20) (async) read$FUSE(r4, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x1, 0x0) (async) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) write$UHID_INPUT(r6, &(0x7f00000028c0)={0x8, {"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", 0x1000}}, 0x1006) getresgid(&(0x7f0000003900), &(0x7f0000003940), &(0x7f0000003980)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000039c0), &(0x7f0000003a00)=0x6) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003a40), 0x212000, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe) (async) pselect6(0x40, &(0x7f0000003a80)={0x5, 0x4, 0x200, 0x81, 0x7, 0x2, 0x6, 0x9}, &(0x7f0000003ac0)={0x5f06, 0x2, 0x2, 0x7, 0x1417, 0x5, 0xc, 0x8}, &(0x7f0000003b00)={0x2cf7, 0x679b, 0x4, 0x3, 0x1c, 0x4b81, 0x7314, 0x3}, &(0x7f0000003b40), &(0x7f0000003bc0)={&(0x7f0000003b80)={[0x6]}, 0x8}) r7 = socket(0x1d, 0x2, 0x40d) (async) tkill(r5, 0x1) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000003c00)={0x6c, @loopback, 0x4e20, 0x0, 'wrr\x00', 0xc, 0xf, 0x45}, 0x2c) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003c40), 0x341, 0x0) preadv(r8, &(0x7f0000004d80)=[{&(0x7f0000003c80)=""/6, 0x6}, {&(0x7f0000003cc0)=""/122, 0x7a}, {&(0x7f0000003d40)=""/63, 0x3f}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x4, 0x5, 0x8) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000004dc0)={0x0}, &(0x7f0000004e00)=0xc) syz_open_procfs(r9, &(0x7f0000004e40)='sessionid\x00') (async) sched_setscheduler(r9, 0x2, &(0x7f0000004e80)=0x2) 7.151061494s ago: executing program 7 (id=2428): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.42435043s ago: executing program 6 (id=2429): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 4.41507391s ago: executing program 0 (id=2430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x3, &(0x7f0000000300)={0xffffffffffffffc0}) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r5, 0x103, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80081}, 0x4060) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x8) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80000) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrlimit(0xd, &(0x7f0000000380)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, 0x0, 0x705, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x7) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ae5adb0b63108a20"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44804) 4.041847958s ago: executing program 6 (id=2431): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000500)=0x0) prlimit64(r0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33c1f83223027407a18c82a49a7cbcb4191"], 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000000)={r9, 0xff, 0x7b73, 0x6, 0x1, 0xe9}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x4) timer_create(0x6, &(0x7f0000000180)={0x0, 0x14, 0x1, @thr={&(0x7f0000000240)="343bd2695dee382d1d8577469b2c687c78f318a34fc0619d24e68c4fa5b29b347cbc0fc0d8b4076f35a8e1e8f7b39af8bd7af04d4b250688210e983415bd53f0d9e5e2c5cecfbe8f96453fd6c94331f15b1d563db9aeff435b70a22341d1361ccccfeca1949fee385d24c99f7ab80e8b9db58ad092deea3e7e57dab0b0764ae1edc2492241bf0d1cfcdadf146af7909bfc1f4187c2fcf1f92bf256636e5ac2c6bdda5d5eb54d866ca62a8aa7b7b7c52b516ac62ce8b840f9a2fa1c4a15c6f53e88f1e92d6f18b29676", &(0x7f0000000340)="028c8422a21062bcf15b53fab524180668787bb71093d8148359cc7d42b166ae7ba6f9e8a7431eef2f9d2db949769c309e9bae27fe387342ea7a380dcf1eec372019e7e32bcab3908c45d7fc8173347578f914baee778cef736396d9a97898a6144c4e0762a036d6471d9377df41af2f62d0146d290275e207d6e5e018a31f1a71571759712e58aef8d945bd5443c430c0eb0c268d3238f8fd05d261487937308da345c80d9f8163ac0774fe2477dc3ffc6e86a3e21452343e1910481636c40b461e700a890dea34353f8780ce918aca1a2a43d94cfb73dae79e367c5314fcfd3d19c7a0aefdae662790a665d0da3b"}}, &(0x7f0000000440)=0x0) timer_settime(r10, 0x0, &(0x7f0000000480)={{0x0, 0x989680}}, &(0x7f00000004c0)) 3.975616625s ago: executing program 0 (id=2432): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5bacabb8d965689422588ee102d6a6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80cee51e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf44c92026b5be1ad6933ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b6", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000380)={&(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x0, 0x10000000, 0x0, 0x0, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x28, 0x2, 0xffffffff000c0000, 0x0, 0xfff9, 0x0, 0x8004}}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101180, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) unlink(&(0x7f0000000100)='./file0/file0\x00') 3.868234571s ago: executing program 7 (id=2433): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000000de1affd502000000000240000000032c000003000a01030000e6ff00000000020000000100050073797a30000000000900030081797a32000000001400000011000100"/111], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x499, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000), &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000dd0008000600000003006477667500000400000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.806060086s ago: executing program 0 (id=2434): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x13) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r1, 0xffffffffffffffff, 0x4}, 0x10) open(0x0, 0x16543e, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'wg2\x00', {0x2, 0x4e26, @loopback}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x6c14, 0x80, 0x3, 0x34d}, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x40000004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r3}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b", @ANYRES16], 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) socket$nl_generic(0x10, 0x3, 0x10) 2.877729429s ago: executing program 7 (id=2435): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) 1.708060487s ago: executing program 6 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x50, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a0000000109021200010000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0xa, 0x6, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r5, &(0x7f00000004c0)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) userfaultfd(0x802) listen(r4, 0x8) r7 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="00f2000000000000240012800b0001006272696467650000140002800800080088a8ffff050007"], 0x44}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 1.671379169s ago: executing program 7 (id=2437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x3, &(0x7f0000000300)={0xffffffffffffffc0}) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r5, 0x103, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80081}, 0x4060) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x8) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80000) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) getrlimit(0xd, &(0x7f0000000380)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, r6, 0x705, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ae5adb0b63108a20"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44804) 1.24055765s ago: executing program 7 (id=2438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000010, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=2439): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000340)={{0x8, @loopback, 0x4e2c, 0x1, 'ovf\x00', 0x14, 0x2, 0x19}, {@empty, 0x4e22, 0x3, 0x10001, 0x400fc1a, 0x8}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8010800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x50) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000002c0)={0x4000, r5}, 0x0) landlock_restrict_self(r6, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x7, &(0x7f0000000040)=[{0x7, 0x5, 0x3, 0xe}, {0x5, 0x3, 0x7, 0x3}, {0x3, 0x9, 0x4, 0x7fffffff}, {0xcfa7, 0x4, 0xfc, 0xfffffff7}, {0x0, 0xf5, 0x1, 0x7}, {0x5, 0xb4, 0xb, 0x8}, {0x0, 0x4, 0x8, 0x268f}]}, 0x10) truncate(&(0x7f0000000280)='./file1\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x7, 0xb, 0x80, 0x9}]}) socket$vsock_stream(0x28, 0x1, 0x0) kernel console output (not intermixed with test programs): 1: config 0 descriptor?? [ 786.707903][ T5901] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 786.742343][T11338] usb 7-1: Using ep0 maxpacket: 16 [ 786.748168][T11338] usb 7-1: too many configurations: 18, using maximum allowed: 8 [ 786.760912][T11338] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 786.769212][T11338] usb 7-1: can't read configurations, error -61 [ 786.776373][T11338] usb usb7-port1: unable to enumerate USB device [ 786.921831][ T5901] usb 1-1: USB disconnect, device number 66 [ 787.386956][T14504] nfs: Unknown parameter ' ' [ 787.871669][ T6151] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 788.023852][ T6151] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.034259][ T6151] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 788.041619][ T5867] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 788.043302][ T6151] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 788.059981][ T6151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.069266][ T6151] usb 1-1: config 0 descriptor?? [ 788.213230][ T5867] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.224580][ T5867] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 788.233857][ T5867] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 788.243075][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.253009][ T5867] usb 8-1: config 0 descriptor?? [ 788.390180][T14514] netlink: 'syz.0.2126': attribute type 8 has an invalid length. [ 788.398574][T14514] vlan0: entered promiscuous mode [ 788.404467][T14514] bond0: entered promiscuous mode [ 788.416160][T14514] bridge0: entered allmulticast mode [ 788.423657][ T5901] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 788.621069][ T5901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.664457][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 788.724892][ T6151] usb 1-1: USB disconnect, device number 67 [ 788.734977][ T5901] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 788.748528][ T24] usb 6-1: USB disconnect, device number 74 [ 788.757318][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.776480][ T5901] usb 7-1: Product: syz [ 788.780704][ T5901] usb 7-1: Manufacturer: syz [ 788.794239][ T5901] usb 7-1: SerialNumber: syz [ 788.920030][T14518] netlink: 'syz.7.2127': attribute type 8 has an invalid length. [ 788.925448][ T5901] usb 7-1: config 0 descriptor?? [ 788.942240][T14518] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.950082][T14518] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.971128][T14518] bridge0: entered allmulticast mode [ 789.188297][ T6151] usb 7-1: USB disconnect, device number 88 [ 789.208082][ T5901] usb 8-1: USB disconnect, device number 76 [ 789.281852][T11338] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 789.441583][T11338] usb 6-1: Using ep0 maxpacket: 8 [ 789.448027][T11338] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 789.455490][T11338] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 789.466743][T11338] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 789.478439][T11338] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 789.489766][T11338] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 789.509379][T11338] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 789.519206][T11338] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 789.530864][T11338] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 789.543986][T11338] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 789.555105][T11338] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 789.567634][T11338] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 789.577119][T11338] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 789.589020][T11338] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 789.603917][T11338] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 789.618559][T11338] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 789.790149][T11338] usb 6-1: string descriptor 0 read error: -22 [ 789.796967][T11338] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 789.806592][T11338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.826209][T11338] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 790.237377][T11338] usb 6-1: USB disconnect, device number 75 [ 790.444452][T14520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14520 comm=syz.5.2129 [ 790.668290][ T30] audit: type=1400 audit(1747576774.552:749): avc: denied { read } for pid=14540 comm="syz.6.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 791.096124][ T6863] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 791.473582][ T6863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.487302][ T6863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.497471][ T6863] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 791.512997][ T6863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.526243][ T6863] usb 8-1: config 0 descriptor?? [ 791.845611][ T5901] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 792.082822][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.210849][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 792.371205][ T5901] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 792.449729][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.514064][ T5901] usb 6-1: Product: syz [ 792.544173][ T5901] usb 6-1: Manufacturer: syz [ 792.566631][ T5901] usb 6-1: SerialNumber: syz [ 792.623027][ T5901] usb 6-1: config 0 descriptor?? [ 792.850609][ T30] audit: type=1326 audit(1747576776.752:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14566 comm="syz.0.2141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aac58e969 code=0x0 [ 792.897683][ T24] usb 6-1: USB disconnect, device number 76 [ 792.931695][ T5901] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 792.986518][ T6863] usbhid 8-1:0.0: can't add hid device: -71 [ 792.992870][ T6863] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 793.002344][ T6863] usb 8-1: USB disconnect, device number 77 [ 793.095278][ T5901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.112085][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 793.127591][ T5901] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 793.136874][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.144907][ T5901] usb 7-1: Product: syz [ 793.149136][ T5901] usb 7-1: Manufacturer: syz [ 793.153752][ T5901] usb 7-1: SerialNumber: syz [ 793.160146][ T5901] usb 7-1: config 0 descriptor?? [ 793.371434][T11338] usb 7-1: USB disconnect, device number 89 [ 793.985401][ T30] audit: type=1400 audit(1747576777.892:751): avc: denied { append } for pid=14578 comm="syz.0.2145" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 794.798880][ T30] audit: type=1400 audit(1747576778.702:752): avc: denied { create } for pid=14584 comm="syz.0.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 794.818405][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.944873][T14589] xt_hashlimit: size too large, truncated to 1048576 [ 795.131757][ T24] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 795.147048][T14595] tipc: Enabling of bearer rejected, failed to enable media [ 795.155832][T14596] tipc: Enabling of bearer rejected, failed to enable media [ 795.311707][ T6863] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 795.361600][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 795.370965][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 795.383937][ T24] usb 7-1: config 8 has an invalid interface number: 100 but max is 0 [ 795.401592][ T24] usb 7-1: config 8 has no interface number 0 [ 795.407704][ T24] usb 7-1: config 8 interface 100 has no altsetting 0 [ 795.463399][ T24] usb 7-1: New USB device found, idVendor=0b57, idProduct=6736, bcdDevice=4a.06 [ 795.481541][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.493407][ T6863] usb 8-1: config 8 has an invalid interface number: 177 but max is 0 [ 795.499813][ T24] usb 7-1: Product: syz [ 795.509918][ T24] usb 7-1: Manufacturer: syz [ 795.509992][ T6863] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 795.520020][ T24] usb 7-1: SerialNumber: syz [ 795.524807][ T6863] usb 8-1: config 8 has no interface number 0 [ 795.550318][ T6863] usb 8-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 795.551570][T11338] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 795.592210][ T6863] usb 8-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.671978][ T6863] usb 8-1: config 8 interface 177 has no altsetting 0 [ 795.678887][ T6863] usb 8-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 795.711400][ T6863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.756406][T14587] veth5: entered promiscuous mode [ 795.761906][T14587] veth5: entered allmulticast mode [ 795.776072][ T24] usbhid 7-1:8.100: couldn't find an input interrupt endpoint [ 795.802033][ T24] usb 7-1: USB disconnect, device number 90 [ 795.873041][T11338] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 795.888342][T11338] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.898591][T11338] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 795.907776][T11338] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.919152][T11338] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.934500][T11338] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 795.943786][T14589] xt_hashlimit: size too large, truncated to 1048576 [ 795.948148][T14589] syz.7.2148: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null) [ 795.950629][T11338] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 795.950886][T14589] ,cpuset= [ 795.965546][T11338] usb 6-1: Product: syz [ 795.981787][T11338] usb 6-1: Manufacturer: syz [ 795.986549][T14589] syz7,mems_allowed=0-1 [ 795.992176][T11338] cdc_wdm 6-1:1.0: skipping garbage [ 795.996277][T14589] CPU: 1 UID: 0 PID: 14589 Comm: syz.7.2148 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 795.996303][T14589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 795.996312][T14589] Call Trace: [ 795.996318][T14589] [ 795.996324][T14589] dump_stack_lvl+0x16c/0x1f0 [ 795.996359][T14589] warn_alloc+0x248/0x3a0 [ 795.996377][T14589] ? __pfx_warn_alloc+0x10/0x10 [ 795.996401][T14589] ? __get_vm_area_node+0x1dc/0x330 [ 795.996421][T14589] ? __get_vm_area_node+0x208/0x330 [ 795.996447][T14589] __vmalloc_node_range_noprof+0x1110/0x1540 [ 795.996478][T14589] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 795.996507][T14589] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 795.996544][T14589] __kvmalloc_node_noprof+0x2ff/0x600 [ 795.996568][T14589] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 795.996590][T14589] ? net_generic+0xea/0x2a0 [ 795.996609][T14589] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 795.996635][T14589] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 795.996656][T14589] hashlimit_mt_check_common+0x8bb/0x1460 [ 795.996685][T14589] hashlimit_mt_check_v1+0x2fc/0x370 [ 795.996707][T14589] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 795.996729][T14589] ? find_held_lock+0x2b/0x80 [ 795.996755][T14589] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 795.996779][T14589] xt_check_match+0x286/0xa50 [ 795.996799][T14589] ? __schedule+0x8e0/0x5de0 [ 795.996820][T14589] ? __pfx_xt_check_match+0x10/0x10 [ 795.996840][T14589] ? pcpu_memcg_post_alloc_hook+0x1e/0x740 [ 795.996866][T14589] ? xt_find_match+0x1f6/0x290 [ 795.996892][T14589] find_check_entry.constprop.0+0x34e/0xa20 [ 795.996921][T14589] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 795.996949][T14589] ? kasan_quarantine_put+0x10a/0x240 [ 795.996972][T14589] ? lockdep_hardirqs_on+0x7c/0x110 [ 795.996997][T14589] ? kfree+0x2b6/0x4d0 [ 795.997017][T14589] ? translate_table+0xc0e/0x17b0 [ 795.997041][T14589] translate_table+0xd0b/0x17b0 [ 795.997073][T14589] ? __pfx_translate_table+0x10/0x10 [ 795.997092][T14589] ? xt_alloc_table_info+0x3e/0xa0 [ 795.997118][T14589] do_ip6t_set_ctl+0x570/0xb00 [ 795.997139][T14589] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 795.997164][T14589] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 795.997187][T14589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 795.997222][T14589] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 795.997245][T14589] nf_setsockopt+0x8d/0xf0 [ 795.997265][T14589] ipv6_setsockopt+0x135/0x170 [ 795.997288][T14589] rawv6_setsockopt+0xc2/0x510 [ 795.997306][T14589] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 795.997325][T14589] ? selinux_socket_setsockopt+0x6a/0x80 [ 795.997350][T14589] ? sock_common_setsockopt+0x2e/0xf0 [ 795.997372][T14589] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 795.997393][T14589] do_sock_setsockopt+0x221/0x470 [ 795.997414][T14589] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 795.997449][T14589] __sys_setsockopt+0x1a0/0x230 [ 795.997470][T14589] __x64_sys_setsockopt+0xbd/0x160 [ 795.997485][T14589] ? do_syscall_64+0x91/0x260 [ 795.997506][T14589] ? lockdep_hardirqs_on+0x7c/0x110 [ 795.997527][T14589] do_syscall_64+0xcd/0x260 [ 795.997551][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.997568][T14589] RIP: 0033:0x7f0b5bf8e969 [ 795.997582][T14589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.997598][T14589] RSP: 002b:00007f0b5cdf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 795.997614][T14589] RAX: ffffffffffffffda RBX: 00007f0b5c1b5fa0 RCX: 00007f0b5bf8e969 [ 795.997624][T14589] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 795.997634][T14589] RBP: 00007f0b5c010ab1 R08: 00000000000004c0 R09: 0000000000000000 [ 795.997643][T14589] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 795.997652][T14589] R13: 0000000000000000 R14: 00007f0b5c1b5fa0 R15: 00007ffe34150d68 [ 795.997675][T14589] [ 795.997765][T14589] Mem-Info: [ 795.998176][T11338] cdc_wdm 6-1:1.0: skipping garbage [ 796.010387][T14589] active_anon:7874 inactive_anon:0 isolated_anon:0 [ 796.010387][T14589] active_file:16505 inactive_file:41271 isolated_file:0 [ 796.010387][T14589] unevictable:768 dirty:312 writeback:0 [ 796.010387][T14589] slab_reclaimable:11507 slab_unreclaimable:112340 [ 796.010387][T14589] mapped:39900 shmem:4338 pagetables:855 [ 796.010387][T14589] sec_pagetables:0 bounce:0 [ 796.010387][T14589] kernel_misc_reclaimable:0 [ 796.010387][T14589] free:1273084 free_pcp:5323 free_cma:0 [ 796.022158][T11338] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 796.031674][T14589] Node 0 active_anon:31496kB inactive_anon:0kB active_file:65840kB inactive_file:164760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159320kB dirty:1248kB writeback:0kB shmem:15816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11352kB pagetables:3420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 796.031725][T14589] Node 1 active_anon:0kB inactive_anon:0kB active_file:180kB inactive_file:324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:280kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 796.031766][T14589] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.036190][T11338] cdc_wdm 6-1:1.0: Unknown control protocol [ 796.041013][T14589] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 796.546996][T14589] Node 0 DMA32 free:1186604kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:32076kB inactive_anon:0kB active_file:65840kB inactive_file:162936kB unevictable:1536kB writepending:1244kB present:3129332kB managed:2543896kB mlocked:0kB bounce:0kB free_pcp:952kB local_pcp:64kB free_cma:0kB [ 796.577876][T14589] lowmem_reserve[]: 0 0 1 1 1 [ 796.582673][T14589] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 796.610317][ T873] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 796.618244][T14589] lowmem_reserve[]: 0 0 0 0 0 [ 796.623819][T14589] Node 1 Normal free:3900380kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:180kB inactive_file:324kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8664kB local_pcp:0kB free_cma:0kB [ 796.653386][T14589] lowmem_reserve[]: 0 0 0 0 0 [ 796.658127][T14589] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 796.671021][T14589] Node 0 DMA32: 567*4kB (UE) 211*8kB (UE) 70*16kB (UE) 575*32kB (UME) 242*64kB (UME) 68*128kB (UME) 48*256kB (UME) 27*512kB (UME) 20*1024kB (UM) 20*2048kB (UME) 253*4096kB (UM) = 1171508kB [ 796.691262][T14589] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 796.704291][T14589] Node 1 Normal: 240*4kB (UME) 62*8kB (UME) 56*16kB (UME) 211*32kB (UME) 104*64kB (UME) 31*128kB (UME) 15*256kB (UME) 8*512kB (UME) 8*1024kB (UM) 1*2048kB (E) 943*4096kB (UM) = 3900432kB [ 796.723683][T14589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.733519][T14589] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 796.742940][T14589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.752642][T14589] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 796.761996][ T873] usb 1-1: device descriptor read/64, error -71 [ 796.764272][T14589] 64961 total pagecache pages [ 796.773034][T14589] 0 pages in swap cache [ 796.777184][T14589] Free swap = 124996kB [ 796.781338][T14589] Total swap = 124996kB [ 796.785881][T14589] 2097051 pages RAM [ 796.789768][T14589] 0 pages HighMem/MovableOnly [ 796.795064][T14589] 428971 pages reserved [ 796.799295][T14589] 0 pages cma reserved [ 797.011684][ T873] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 797.171914][ T873] usb 1-1: device descriptor read/64, error -71 [ 797.240634][T11338] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 797.249285][ T6863] usb 8-1: string descriptor 0 read error: -71 [ 797.261268][ T6863] ir_toy 8-1:8.177: required endpoints not found [ 797.270833][ T6863] usb 8-1: USB disconnect, device number 78 [ 797.305755][ T873] usb usb1-port1: attempt power cycle [ 797.431959][T11338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.443376][T11338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.453629][T11338] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 797.465026][T11338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.475576][T11338] usb 7-1: config 0 descriptor?? [ 797.651638][ T873] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 797.674173][ T873] usb 1-1: device descriptor read/8, error -71 [ 797.811680][ T24] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 797.888993][T14606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.897800][T14606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.910340][T11338] hid-rmi 0003:0461:4E72.001E: unknown main item tag 0x0 [ 797.919360][T11338] hid-rmi 0003:0461:4E72.001E: unknown main item tag 0x0 [ 797.921827][ T873] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 797.934111][T11338] hid-rmi 0003:0461:4E72.001E: unknown main item tag 0x0 [ 797.941335][T11338] hid-rmi 0003:0461:4E72.001E: item fetching failed at offset 10/11 [ 797.949729][T11338] hid-rmi 0003:0461:4E72.001E: parse failed [ 797.955793][T11338] hid-rmi 0003:0461:4E72.001E: probe with driver hid-rmi failed with error -22 [ 797.962290][ T873] usb 1-1: device descriptor read/8, error -71 [ 797.972757][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.984166][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 797.998896][ T24] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 798.008042][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.017497][ T24] usb 8-1: Product: syz [ 798.021794][ T24] usb 8-1: Manufacturer: syz [ 798.026894][ T24] usb 8-1: SerialNumber: syz [ 798.033439][ T24] usb 8-1: config 0 descriptor?? [ 798.082098][ T873] usb usb1-port1: unable to enumerate USB device [ 798.133324][T14606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.196515][T14606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.244485][T11338] usb 8-1: USB disconnect, device number 79 [ 798.259546][T14606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.274399][ T6151] usb 7-1: USB disconnect, device number 91 [ 798.310500][ T873] usb 6-1: USB disconnect, device number 77 [ 798.449445][T14616] nfs: Unknown parameter '' [ 798.790993][T14619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.876744][T14622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.432267][T14656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2165'. [ 802.121611][ T873] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 802.151833][ T6151] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 802.455038][ T6151] usb 1-1: unable to get BOS descriptor or descriptor too short [ 802.533102][ T6151] usb 1-1: config 1 has an invalid interface number: 91 but max is 0 [ 802.600387][ T6151] usb 1-1: config 1 has no interface number 0 [ 802.639073][ T6151] usb 1-1: config 1 interface 91 has no altsetting 0 [ 802.665264][ T6151] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 802.701406][ T6151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.711686][ T873] usb 7-1: Using ep0 maxpacket: 32 [ 802.734383][ T873] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 802.737608][ T6151] usb 1-1: Product: syz [ 802.749443][ T873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.758408][ T873] usb 7-1: Product: syz [ 802.762677][ T873] usb 7-1: Manufacturer: syz [ 802.767576][ T873] usb 7-1: SerialNumber: syz [ 802.768930][ T6151] usb 1-1: Manufacturer: syz [ 802.787421][ T6151] usb 1-1: SerialNumber: syz [ 802.808194][ T6151] kl5kusb105 1-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 802.819312][ T6151] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 802.986470][T14673] vivid-002: ================= START STATUS ================= [ 802.997208][T14673] vivid-002: Radio HW Seek Mode: Bounded [ 803.004026][T14673] vivid-002: Radio Programmable HW Seek: false [ 803.038405][ T6151] usb 1-1: USB disconnect, device number 72 [ 803.046581][ T6151] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 803.057078][ T6151] kl5kusb105 1-1:1.91: device disconnected [ 803.058223][T14673] vivid-002: RDS Rx I/O Mode: Block I/O [ 803.073458][T14673] vivid-002: Generate RBDS Instead of RDS: false [ 803.080044][T14673] vivid-002: RDS Reception: true [ 803.085334][T14673] vivid-002: RDS Program Type: 0 inactive [ 803.091376][T14673] vivid-002: RDS PS Name: inactive [ 803.099980][T14673] vivid-002: RDS Radio Text: inactive [ 803.107035][T14673] vivid-002: RDS Traffic Announcement: false inactive [ 803.134117][T14673] vivid-002: RDS Traffic Program: false inactive [ 803.144599][T14673] vivid-002: RDS Music: false inactive [ 803.168840][T14673] vivid-002: ================== END STATUS ================== [ 803.707685][ T873] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 803.727844][ T873] usb 7-1: USB disconnect, device number 92 [ 804.971914][T14712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2183'. [ 805.721658][ T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 805.724290][ T6863] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 805.854130][ T30] audit: type=1400 audit(1747576789.582:753): avc: denied { relabelfrom } for pid=14730 comm="syz.6.2187" name="" dev="pipefs" ino=48998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 805.965201][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 805.975464][ T24] usb 1-1: config 1 has an invalid interface number: 91 but max is 0 [ 805.983930][ T24] usb 1-1: config 1 has no interface number 0 [ 805.991660][ T24] usb 1-1: config 1 interface 91 has no altsetting 0 [ 806.003092][ T24] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 806.012475][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.020820][ T24] usb 1-1: Product: syz [ 806.039880][ T24] usb 1-1: Manufacturer: syz [ 806.052038][ T6863] usb 8-1: Using ep0 maxpacket: 16 [ 806.058694][ T6863] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.070695][ T6863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.076115][ T24] usb 1-1: SerialNumber: syz [ 806.097284][ T6863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 806.109910][ T6863] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 806.119666][ T6863] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.217100][ T6863] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 806.229858][ T24] kl5kusb105 1-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 806.231665][ T6863] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 806.242320][ T24] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 806.296807][ T6863] usb 8-1: Manufacturer: syz [ 806.339014][ T6863] usb 8-1: config 0 descriptor?? [ 806.454225][ T5901] usb 1-1: USB disconnect, device number 73 [ 806.470977][ T5901] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 806.641230][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'. [ 806.816028][ T5901] kl5kusb105 1-1:1.91: device disconnected [ 806.885130][T14740] sp0: Synchronizing with TNC [ 806.923625][ T6863] rc_core: IR keymap rc-hauppauge not found [ 806.929581][ T6863] Registered IR keymap rc-empty [ 806.940918][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 806.981458][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.013562][ T6863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 807.043125][ T6863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input50 [ 807.100942][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.136144][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.162761][T14749] lo speed is unknown, defaulting to 1000 [ 807.175660][T14750] lo speed is unknown, defaulting to 1000 [ 807.188912][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.213407][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.255875][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.285345][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.311655][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.331639][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.343935][ T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 807.369581][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.402477][ T6863] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 807.433195][ T6863] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 807.451547][ T6863] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 807.501731][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 807.594418][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.611578][T14761] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2195'. [ 807.751468][ T6863] usb 8-1: USB disconnect, device number 80 [ 807.757647][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.797486][ T24] usb 6-1: Product: syz [ 807.802397][ T24] usb 6-1: Manufacturer: syz [ 807.807347][ T24] usb 6-1: SerialNumber: syz [ 808.041698][T14746] vivid-000: ================= START STATUS ================= [ 808.058192][T14746] vivid-000: Radio HW Seek Mode: Bounded [ 808.070860][T14746] vivid-000: Radio Programmable HW Seek: false [ 808.077578][T14746] vivid-000: RDS Rx I/O Mode: Block I/O [ 808.083896][T14746] vivid-000: Generate RBDS Instead of RDS: false [ 808.090360][T14746] vivid-000: RDS Reception: true [ 808.096404][T14746] vivid-000: RDS Program Type: 0 inactive [ 808.102569][T14746] vivid-000: RDS PS Name: inactive [ 808.107909][T14746] vivid-000: RDS Radio Text: inactive [ 808.113682][T14746] vivid-000: RDS Traffic Announcement: false inactive [ 808.120609][T14746] vivid-000: RDS Traffic Program: false inactive [ 808.127169][T14746] vivid-000: RDS Music: false inactive [ 808.132923][T14746] vivid-000: ================== END STATUS ================== [ 808.141627][ T5901] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 808.271663][ T5901] usb 7-1: device descriptor read/64, error -71 [ 808.403560][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.561876][ T5901] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 808.714970][ T24] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 808.738153][ T24] usb 6-1: USB disconnect, device number 78 [ 808.781629][ T5901] usb 7-1: device descriptor read/64, error -71 [ 808.892305][ T5901] usb usb7-port1: attempt power cycle [ 808.991656][ T6863] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 809.151685][ T6863] usb 8-1: Using ep0 maxpacket: 16 [ 809.159184][ T6863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.170080][ T6863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.179867][ T6863] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 809.193098][ T6863] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 809.202221][ T6863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.219940][ T6863] usb 8-1: config 0 descriptor?? [ 809.231693][ T5901] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 809.271811][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 809.280493][ T5901] usb 7-1: device descriptor read/8, error -71 [ 809.435608][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 809.445039][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.453101][ T24] usb 1-1: Product: syz [ 809.457366][ T24] usb 1-1: Manufacturer: syz [ 809.462016][ T24] usb 1-1: SerialNumber: syz [ 809.470633][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 809.486586][ T873] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 809.497934][ T5867] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 809.521747][ T5901] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 809.552807][ T5901] usb 7-1: device descriptor read/8, error -71 [ 809.637145][T14774] random: crng reseeded on system resumption [ 809.665890][ T5901] usb usb7-port1: unable to enumerate USB device [ 809.676712][ T5867] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 809.689706][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.698202][ T5867] usb 6-1: Product: syz [ 809.706300][ T5867] usb 6-1: Manufacturer: syz [ 809.710964][ T5867] usb 6-1: SerialNumber: syz [ 809.718931][ T5867] usb 6-1: config 0 descriptor?? [ 809.731274][ T5867] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 809.776880][ T6863] usbhid 8-1:0.0: can't add hid device: -71 [ 809.783411][ T6863] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 809.793986][ T6863] usb 8-1: USB disconnect, device number 81 [ 809.944906][T14778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.953864][T14778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.153402][ T6151] usb 1-1: USB disconnect, device number 74 [ 810.251779][ T5867] gspca_sn9c2028: read1 error -110 [ 810.257248][ T5867] gspca_sn9c2028: read1 error -32 [ 810.262635][ T5867] gspca_sn9c2028: read1 error -32 [ 810.268047][ T5867] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -32 [ 810.343780][T14787] new mount options do not match the existing superblock, will be ignored [ 810.561812][ T873] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 810.584654][ T873] ath9k_htc: Failed to initialize the device [ 810.639605][ T6151] usb 1-1: ath9k_htc: USB layer deinitialized [ 810.645811][ T6863] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 810.801599][ T6863] usb 8-1: Using ep0 maxpacket: 32 [ 810.808386][ T6863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.819543][ T6863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.829783][ T6863] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 810.839011][ T6863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.848585][ T6863] usb 8-1: config 0 descriptor?? [ 810.855379][ T6863] hub 8-1:0.0: USB hub found [ 810.951757][ T6151] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 811.061343][ T6863] hub 8-1:0.0: 4 ports detected [ 811.113598][ T6151] usb 1-1: unable to get BOS descriptor or descriptor too short [ 811.122538][ T6151] usb 1-1: config 1 has an invalid interface number: 91 but max is 0 [ 811.130651][ T6151] usb 1-1: config 1 has no interface number 0 [ 811.137350][ T6151] usb 1-1: config 1 interface 91 has no altsetting 0 [ 811.146752][ T6151] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 811.155990][ T6151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.164067][ T6151] usb 1-1: Product: syz [ 811.168293][ T6151] usb 1-1: Manufacturer: syz [ 811.173424][ T6151] usb 1-1: SerialNumber: syz [ 811.181104][ T6151] kl5kusb105 1-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 811.197384][ T6151] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 811.267019][ T6863] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 811.274554][ T6863] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 811.284547][ T6863] usbhid 8-1:0.0: can't add hid device: -71 [ 811.290518][ T6863] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 811.301625][T11338] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 811.313518][ T6863] usb 8-1: USB disconnect, device number 82 [ 811.386535][ T6151] usb 1-1: USB disconnect, device number 75 [ 811.394823][ T6151] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 811.405196][ T6151] kl5kusb105 1-1:1.91: device disconnected [ 811.462770][T11338] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.473087][T11338] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.484194][T11338] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.493604][T11338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.501688][T11338] usb 7-1: Product: syz [ 811.505859][T11338] usb 7-1: Manufacturer: syz [ 811.510476][T11338] usb 7-1: SerialNumber: syz [ 811.718673][T11338] usb 7-1: 0:2 : does not exist [ 811.724512][T11338] usb 7-1: unit 6 not found! [ 811.734269][T11338] usb 7-1: USB disconnect, device number 97 [ 811.796377][T14799] netlink: 337 bytes leftover after parsing attributes in process `syz.7.2206'. [ 812.020362][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2207'. [ 812.121748][T14805] sp0: Synchronizing with TNC [ 812.304143][ T873] usb 6-1: USB disconnect, device number 79 [ 812.441616][ T5867] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 812.518695][ T6151] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 812.609510][ T5867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.627832][ T24] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 812.633418][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2212'. [ 812.636430][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 812.674035][ T5867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 812.683559][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 812.691641][ T5867] usb 1-1: SerialNumber: syz [ 812.721879][ T6151] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.724223][ T5867] usb 1-1: 0:2 : does not exist [ 812.734374][ T6151] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 812.746395][ T6151] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 812.760438][ T6151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.793536][ T6151] usb 7-1: config 0 descriptor?? [ 812.811708][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 812.835515][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 812.861973][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 812.879176][ T24] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 812.892756][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.905639][ T24] usb 8-1: config 0 descriptor?? [ 812.952307][ T5867] usb 1-1: USB disconnect, device number 76 [ 813.253006][T14824] netlink: 'syz.6.2209': attribute type 8 has an invalid length. [ 813.362057][ T6151] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 813.675809][ T30] audit: type=1400 audit(1747576797.582:754): avc: denied { create } for pid=14812 comm="syz.7.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 813.703293][ T6151] usb 6-1: Using ep0 maxpacket: 16 [ 813.715614][ T30] audit: type=1400 audit(1747576797.622:755): avc: denied { bind } for pid=14812 comm="syz.7.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 813.736040][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.156103][ T6151] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 814.167657][ T6151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 814.174886][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 814.181161][ T6151] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 814.197099][ T6151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.205331][ T6151] usb 6-1: Product: syz [ 814.207261][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 814.217479][ T6151] usb 6-1: Manufacturer: syz [ 814.224987][ T6151] usb 6-1: SerialNumber: syz [ 814.232709][ T6151] usb 6-1: config 0 descriptor?? [ 814.234962][ T24] usb 8-1: USB disconnect, device number 83 [ 814.246114][ T9] usb 7-1: USB disconnect, device number 98 [ 814.582709][ T6151] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 814.603006][ T6151] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 814.901576][ T24] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 815.113179][T14844] nfs: Bad value for 'source' [ 815.210022][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 815.324281][ T24] usb 1-1: config 1 has an invalid interface number: 91 but max is 0 [ 815.351444][ T24] usb 1-1: config 1 has no interface number 0 [ 815.358278][ T24] usb 1-1: config 1 interface 91 has no altsetting 0 [ 815.370275][ T24] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 815.400032][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.416615][T14846] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2220'. [ 815.424672][ T24] usb 1-1: Product: syz [ 815.439088][ T24] usb 1-1: Manufacturer: syz [ 815.449745][T14846] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2220'. [ 815.469729][ T24] usb 1-1: SerialNumber: syz [ 815.485904][ T24] kl5kusb105 1-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 815.518078][ T24] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 815.704154][ T24] usb 1-1: USB disconnect, device number 77 [ 815.785202][ T6151] usb 8-1: new full-speed USB device number 84 using dummy_hcd [ 815.830617][ T24] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 815.843589][ T24] kl5kusb105 1-1:1.91: device disconnected [ 815.944806][ T6151] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 815.970905][ T6151] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 815.984803][ T6151] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25647, setting to 64 [ 815.996130][ T6151] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.012179][ T6151] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 816.026685][ T6151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.036632][ T6151] usb 8-1: Product: syz [ 816.040889][ T6151] usb 8-1: Manufacturer: syz [ 816.056377][ T6151] usb 8-1: SerialNumber: syz [ 816.066328][ T6151] usb 8-1: config 0 descriptor?? [ 816.073917][ T6151] usb 8-1: can't set config #0, error -71 [ 816.088140][ T6151] usb 8-1: USB disconnect, device number 84 [ 816.109981][T14857] sctp: [Deprecated]: syz.6.2224 (pid 14857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.109981][T14857] Use struct sctp_sack_info instead [ 816.128548][ T30] audit: type=1400 audit(1747576800.042:756): avc: denied { create } for pid=14856 comm="syz.6.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 816.164839][ T30] audit: type=1400 audit(1747576800.042:757): avc: denied { write } for pid=14856 comm="syz.6.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 816.185033][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.394640][ T30] audit: type=1326 audit(1747576800.302:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14862 comm="syz.0.2226" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7aac58e969 code=0x0 [ 816.417534][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.454511][ T30] audit: type=1400 audit(1747576800.362:759): avc: denied { write } for pid=14859 comm="syz.6.2225" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 816.553886][ T24] usb 6-1: USB disconnect, device number 80 [ 816.692133][ T6151] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 816.856384][ T6151] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0 [ 816.869718][ T6151] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 0 [ 816.899170][ T6151] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8 [ 816.928880][ T6151] usb 1-1: config 1 interface 0 has no altsetting 0 [ 816.943284][ T6151] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 816.955023][ T6151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.964116][ T6151] usb 1-1: Product: Ñ [ 816.968251][ T6151] usb 1-1: Manufacturer:   [ 816.973119][ T6151] usb 1-1: SerialNumber: ꚹ㮩쬹㖩澭ë¯ã„…쳵ᮼﺒ컆롌ᬳ尉잓炢䟭刉જս뀖ᵠ螀莩佉襶録䀈┬嵔â—ã‚èœè„™ã˜ì༎䪬躓鱚çµçž½í‰†æ¹¿ê¿‹âš•å·£ï½ŽçœŠÃ’将─傊樇댅゙ïžÓ©ä€­ï‡¶äº¼áž¬ïŒ³íš [ 816.998538][T14866] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 817.171637][ T24] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 817.191727][ T5901] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 817.324166][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.334366][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 817.343378][ T5901] usb 8-1: Using ep0 maxpacket: 32 [ 817.348559][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 817.358108][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.366153][T11338] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 817.378975][ T5901] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 817.389493][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.398126][ T24] usb 6-1: config 0 descriptor?? [ 817.403204][ T5901] usb 8-1: Product: syz [ 817.407402][ T5901] usb 8-1: Manufacturer: syz [ 817.413447][ T5901] usb 8-1: SerialNumber: syz [ 817.521728][T11338] usb 7-1: Using ep0 maxpacket: 32 [ 817.533923][T11338] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 817.543182][T11338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.551230][T11338] usb 7-1: Product: syz [ 817.555739][T11338] usb 7-1: Manufacturer: syz [ 817.560379][T11338] usb 7-1: SerialNumber: syz [ 817.626888][T14881] vivid-004: ================= START STATUS ================= [ 817.634830][T14881] vivid-004: Radio HW Seek Mode: Bounded [ 817.640604][T14881] vivid-004: Radio Programmable HW Seek: false [ 817.649567][T14881] vivid-004: RDS Rx I/O Mode: Block I/O [ 817.657013][T14881] vivid-004: Generate RBDS Instead of RDS: false [ 817.666547][T14881] vivid-004: RDS Reception: true [ 817.673536][T14881] vivid-004: RDS Program Type: 0 inactive [ 817.694918][T14881] vivid-004: RDS PS Name: inactive [ 817.726377][T14881] vivid-004: RDS Radio Text: inactive [ 817.732880][T14881] vivid-004: RDS Traffic Announcement: false inactive [ 817.740915][T14881] vivid-004: RDS Traffic Program: false inactive [ 817.747883][T14881] vivid-004: RDS Music: false inactive [ 817.754325][T14881] vivid-004: ================== END STATUS ================== [ 817.773357][T14872] netlink: 'syz.5.2229': attribute type 8 has an invalid length. [ 818.074800][T14887] vivid-002: ================= START STATUS ================= [ 818.084933][ T6863] usb 6-1: USB disconnect, device number 81 [ 818.093182][T14887] vivid-002: Radio HW Seek Mode: Bounded [ 818.098868][T14887] vivid-002: Radio Programmable HW Seek: false [ 818.107223][T14887] vivid-002: RDS Rx I/O Mode: Block I/O [ 818.112842][T14887] vivid-002: Generate RBDS Instead of RDS: false [ 818.119942][T14887] vivid-002: RDS Reception: true [ 818.128887][T14887] vivid-002: RDS Program Type: 0 inactive [ 818.157736][T14887] vivid-002: RDS PS Name: inactive [ 818.167849][T14887] vivid-002: RDS Radio Text: inactive [ 818.177398][T14887] vivid-002: RDS Traffic Announcement: false inactive [ 818.186694][T14887] vivid-002: RDS Traffic Program: false inactive [ 818.194620][T14887] vivid-002: RDS Music: false inactive [ 818.200979][T14887] vivid-002: ================== END STATUS ================== [ 818.243450][ T5901] usb 8-1: 2:1 : no UAC_FORMAT_TYPE desc [ 818.563199][ T5901] usb 8-1: USB disconnect, device number 85 [ 818.621307][T11338] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 818.652885][T11338] usb 7-1: USB disconnect, device number 99 [ 819.625943][ T6151] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 819.655485][ T30] audit: type=1400 audit(1747576803.542:760): avc: denied { write } for pid=14892 comm="syz.0.2233" path="socket:[49236]" dev="sockfs" ino=49236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 819.712053][ T6151] usb 1-1: USB disconnect, device number 78 [ 820.006366][ T30] audit: type=1400 audit(1747576803.832:761): avc: denied { connect } for pid=14901 comm="syz.0.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 820.072486][ T5867] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 820.755502][ T5867] usb 8-1: unable to get BOS descriptor or descriptor too short [ 820.784535][ T5867] usb 8-1: config 1 has an invalid interface number: 91 but max is 0 [ 820.799294][ T5867] usb 8-1: config 1 has no interface number 0 [ 820.807164][ T5867] usb 8-1: config 1 interface 91 has no altsetting 0 [ 820.817822][ T5867] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 820.828724][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.847448][ T5867] usb 8-1: Product: syz [ 820.851682][ T5867] usb 8-1: Manufacturer: syz [ 820.856333][ T5867] usb 8-1: SerialNumber: syz [ 820.878027][ T5867] kl5kusb105 8-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 820.894400][ T5867] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 820.938333][T14921] lo speed is unknown, defaulting to 1000 [ 821.021655][ T5901] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 821.080350][ T9] usb 8-1: USB disconnect, device number 86 [ 821.089823][ T9] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 821.122121][ T9] kl5kusb105 8-1:1.91: device disconnected [ 821.181589][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 821.198950][ T5901] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 821.216610][ T5901] usb 6-1: config 0 has no interface number 0 [ 821.225617][ T5901] usb 6-1: New USB device found, idVendor=8086, idProduct=95a5, bcdDevice=b6.d8 [ 821.234837][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.242935][ T5901] usb 6-1: Product: syz [ 821.247194][ T5901] usb 6-1: Manufacturer: syz [ 821.251863][ T5901] usb 6-1: SerialNumber: syz [ 821.258807][ T5901] usb 6-1: config 0 descriptor?? [ 823.254133][ T6151] usb 6-1: USB disconnect, device number 82 [ 823.598093][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.620575][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.901614][ T6151] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 824.183112][ T6151] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 824.213299][ T6151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 824.222104][T14945] lo speed is unknown, defaulting to 1000 [ 824.784864][ T6151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 824.878850][ T6151] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 824.985742][ T6151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.129023][ T6151] usb 6-1: config 0 descriptor?? [ 825.145773][ T6151] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 825.394325][T11340] usb 6-1: USB disconnect, device number 83 [ 825.434993][ T30] audit: type=1326 audit(1747576809.322:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.6.2247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f602b785927 code=0x0 [ 826.103836][ T5901] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 826.216579][T14970] FAULT_INJECTION: forcing a failure. [ 826.216579][T14970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.230054][T14970] CPU: 0 UID: 0 PID: 14970 Comm: syz.0.2254 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 826.230079][T14970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.230088][T14970] Call Trace: [ 826.230094][T14970] [ 826.230100][T14970] dump_stack_lvl+0x16c/0x1f0 [ 826.230125][T14970] should_fail_ex+0x512/0x640 [ 826.230149][T14970] _copy_from_user+0x2e/0xd0 [ 826.230170][T14970] copy_msghdr_from_user+0x98/0x160 [ 826.230187][T14970] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 826.230210][T14970] ? __pfx___schedule+0x10/0x10 [ 826.230231][T14970] ___sys_sendmsg+0xfe/0x1d0 [ 826.230248][T14970] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.230282][T14970] ? lockdep_hardirqs_on+0x20/0x110 [ 826.230308][T14970] __sys_sendmsg+0x16d/0x220 [ 826.230324][T14970] ? __pfx___sys_sendmsg+0x10/0x10 [ 826.230338][T14970] ? rcu_is_watching+0x12/0xc0 [ 826.230365][T14970] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 826.230384][T14970] do_syscall_64+0xcd/0x260 [ 826.230406][T14970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.230421][T14970] RIP: 0033:0x7f7aac58e969 [ 826.230433][T14970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.230448][T14970] RSP: 002b:00007f7aad44f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.230462][T14970] RAX: ffffffffffffffda RBX: 00007f7aac7b6080 RCX: 00007f7aac58e969 [ 826.230472][T14970] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 826.230480][T14970] RBP: 00007f7aad44f090 R08: 0000000000000000 R09: 0000000000000000 [ 826.230489][T14970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.230497][T14970] R13: 0000000000000000 R14: 00007f7aac7b6080 R15: 00007ffe98c8d4e8 [ 826.230516][T14970] [ 826.410477][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.459471][ T5901] usb 7-1: unable to get BOS descriptor or descriptor too short [ 826.496451][ T5901] usb 7-1: config 1 has an invalid interface number: 91 but max is 0 [ 826.573233][ T5901] usb 7-1: config 1 has no interface number 0 [ 826.605358][ T5901] usb 7-1: config 1 interface 91 has no altsetting 0 [ 826.689810][ T5901] usb 7-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 826.701634][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.709713][ T5901] usb 7-1: Product: syz [ 826.716302][ T5901] usb 7-1: Manufacturer: syz [ 826.720930][ T5901] usb 7-1: SerialNumber: syz [ 826.730477][ T5901] kl5kusb105 7-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 826.747002][ T5901] usb 7-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 826.935055][ T9] usb 7-1: USB disconnect, device number 100 [ 827.031003][ T9] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 827.051746][T11340] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 827.660162][ T9] kl5kusb105 7-1:1.91: device disconnected [ 827.806913][T11340] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 827.816844][T11340] usb 6-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 827.885180][T11340] usb 6-1: config 0 has no interface number 0 [ 827.920407][T11340] usb 6-1: too many endpoints for config 0 interface 231 altsetting 181: 83, using maximum allowed: 30 [ 827.991374][T11340] usb 6-1: config 0 interface 231 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 83 [ 828.144825][T11340] usb 6-1: config 0 interface 231 has no altsetting 0 [ 828.229342][T11340] usb 6-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 828.336722][T11340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.404367][T11340] usb 6-1: Product: syz [ 828.447132][T11340] usb 6-1: Manufacturer: syz [ 828.485957][T11340] usb 6-1: SerialNumber: syz [ 828.641232][T11340] usb 6-1: config 0 descriptor?? [ 829.043591][T14974] loop2: detected capacity change from 0 to 7 [ 829.050334][T14974] Dev loop2: unable to read RDB block 7 [ 829.058315][T14974] loop2: unable to read partition table [ 829.066959][T14974] loop2: partition table beyond EOD, truncated [ 829.081777][T14974] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 829.124154][ T30] audit: type=1400 audit(1747576813.032:763): avc: denied { write } for pid=14988 comm="syz.7.2259" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 829.185400][T14993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2261'. [ 829.441615][T15000] lo speed is unknown, defaulting to 1000 [ 829.447685][T15000] lo speed is unknown, defaulting to 1000 [ 829.457988][T15000] lo speed is unknown, defaulting to 1000 [ 829.516733][T15000] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 829.784759][T15000] lo speed is unknown, defaulting to 1000 [ 829.799171][T15000] lo speed is unknown, defaulting to 1000 [ 829.806420][T15000] lo speed is unknown, defaulting to 1000 [ 829.815643][T15000] lo speed is unknown, defaulting to 1000 [ 829.823193][T15000] lo speed is unknown, defaulting to 1000 [ 829.829632][T15000] lo speed is unknown, defaulting to 1000 [ 829.951723][ T5901] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 830.172812][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 830.197368][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.208714][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.219409][ T5901] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 830.228547][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.295105][ T5901] usb 1-1: config 0 descriptor?? [ 830.350289][ T9] usb 6-1: USB disconnect, device number 84 [ 830.670582][T15007] FAULT_INJECTION: forcing a failure. [ 830.670582][T15007] name failslab, interval 1, probability 0, space 0, times 0 [ 830.683742][T15007] CPU: 0 UID: 0 PID: 15007 Comm: syz.5.2264 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 830.683768][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 830.683779][T15007] Call Trace: [ 830.683785][T15007] [ 830.683792][T15007] dump_stack_lvl+0x16c/0x1f0 [ 830.683823][T15007] should_fail_ex+0x512/0x640 [ 830.683847][T15007] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 830.683867][T15007] should_failslab+0xc2/0x120 [ 830.683887][T15007] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 830.683906][T15007] ? __alloc_skb+0x2b2/0x380 [ 830.683928][T15007] __alloc_skb+0x2b2/0x380 [ 830.683947][T15007] ? __pfx___alloc_skb+0x10/0x10 [ 830.683968][T15007] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 830.683996][T15007] netlink_alloc_large_skb+0x69/0x130 [ 830.684019][T15007] netlink_sendmsg+0x6a1/0xdd0 [ 830.684046][T15007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.684085][T15007] ____sys_sendmsg+0xa95/0xc70 [ 830.684111][T15007] ? copy_msghdr_from_user+0x10a/0x160 [ 830.684131][T15007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.684166][T15007] ___sys_sendmsg+0x134/0x1d0 [ 830.684188][T15007] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.684239][T15007] __sys_sendmsg+0x16d/0x220 [ 830.684256][T15007] ? __pfx___sys_sendmsg+0x10/0x10 [ 830.684278][T15007] ? rcu_is_watching+0x12/0xc0 [ 830.684305][T15007] do_syscall_64+0xcd/0x260 [ 830.684328][T15007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.684343][T15007] RIP: 0033:0x7f5d5898e969 [ 830.684356][T15007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.684371][T15007] RSP: 002b:00007f5d567f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.684385][T15007] RAX: ffffffffffffffda RBX: 00007f5d58bb6080 RCX: 00007f5d5898e969 [ 830.684394][T15007] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 830.684403][T15007] RBP: 00007f5d567f6090 R08: 0000000000000000 R09: 0000000000000000 [ 830.684412][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.684422][T15007] R13: 0000000000000000 R14: 00007f5d58bb6080 R15: 00007fff3a7d09c8 [ 830.684444][T15007] [ 830.905948][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.985270][ T5901] gt683r_led 0003:1770:FF00.001F: collection stack underflow [ 830.993699][ T5901] gt683r_led 0003:1770:FF00.001F: item 0 1 0 12 parsing failed [ 831.126287][ T5901] gt683r_led 0003:1770:FF00.001F: hid parsing failed [ 831.341824][ T5901] gt683r_led 0003:1770:FF00.001F: probe with driver gt683r_led failed with error -22 [ 831.361792][ T5901] usb 1-1: USB disconnect, device number 80 [ 832.599798][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2269'. [ 832.627024][T15024] 9pnet_fd: Insufficient options for proto=fd [ 832.766728][ T30] audit: type=1400 audit(1747576816.672:764): avc: denied { setopt } for pid=15029 comm="syz.0.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 833.121802][ T5901] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 833.208159][T11340] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 833.287444][ T5901] usb 8-1: unable to get BOS descriptor or descriptor too short [ 833.302017][ T30] audit: type=1400 audit(1747576817.192:765): avc: denied { getopt } for pid=15040 comm="syz.5.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 833.339977][ T5901] usb 8-1: config 1 has an invalid interface number: 91 but max is 0 [ 833.351776][ T5901] usb 8-1: config 1 has no interface number 0 [ 833.358009][ T5901] usb 8-1: config 1 interface 91 has no altsetting 0 [ 833.370640][ T5901] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 833.381325][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.403973][ T5901] usb 8-1: Product: syz [ 833.408414][ T5901] usb 8-1: Manufacturer: syz [ 833.420371][ T5901] usb 8-1: SerialNumber: syz [ 833.442108][ T5901] kl5kusb105 8-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 833.460820][ T5901] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 833.477013][T11340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.489726][T11340] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 833.525081][T11340] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 833.535169][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.545930][T11340] usb 1-1: config 0 descriptor?? [ 833.785811][ T873] usb 8-1: USB disconnect, device number 87 [ 833.809615][ T873] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 833.860955][ T873] kl5kusb105 8-1:1.91: device disconnected [ 833.867196][ T5901] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 833.885746][T15038] netlink: 'syz.0.2272': attribute type 8 has an invalid length. [ 834.156529][ T5901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.179583][T11340] usb 1-1: USB disconnect, device number 81 [ 834.179754][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 834.203921][ T5901] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 834.217439][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.227876][ T5901] usb 7-1: Product: syz [ 834.232250][ T5901] usb 7-1: Manufacturer: syz [ 834.236862][ T5901] usb 7-1: SerialNumber: syz [ 834.246439][ T5901] usb 7-1: config 0 descriptor?? [ 834.553845][T11340] usb 7-1: USB disconnect, device number 101 [ 835.888632][T15075] input: syz1 as /devices/virtual/input/input52 [ 836.261584][T11338] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 836.431884][T11338] usb 6-1: Using ep0 maxpacket: 32 [ 836.573463][T11338] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 836.637616][T11338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.656942][T11338] usb 6-1: config 0 descriptor?? [ 836.737960][T11340] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 837.300438][T11338] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 837.441841][T11340] usb 8-1: device descriptor read/64, error -71 [ 838.209357][T11340] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 839.333700][T11340] usb 8-1: device descriptor read/64, error -71 [ 839.348006][T11338] gspca_vc032x: reg_w err -71 [ 839.356412][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.363950][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.385994][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.399456][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.404928][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.410292][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.415720][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.421229][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.442830][T11340] usb usb8-port1: attempt power cycle [ 839.707057][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.713902][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.719744][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.726735][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.733188][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.738522][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.741395][ T30] audit: type=1400 audit(1747576823.642:766): avc: denied { listen } for pid=15105 comm="syz.0.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 839.745353][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.774481][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.788545][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.796581][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2290'. [ 839.811198][T11338] gspca_vc032x: I2c Bus Busy Wait 00 [ 839.831271][T11338] gspca_vc032x: Unknown sensor... [ 839.856592][T11338] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 839.953886][T11338] usb 6-1: USB disconnect, device number 85 [ 840.032385][T11340] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 840.088963][T11340] usb 8-1: unable to get BOS descriptor or descriptor too short [ 840.168752][T11340] usb 8-1: config 1 has an invalid interface number: 91 but max is 0 [ 840.234974][T11340] usb 8-1: config 1 has no interface number 0 [ 840.308720][T11340] usb 8-1: config 1 interface 91 has no altsetting 0 [ 840.401115][T11340] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 840.474914][T11340] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.551665][T11340] usb 8-1: Product: syz [ 840.585946][T11340] usb 8-1: Manufacturer: syz [ 840.632749][T11340] usb 8-1: SerialNumber: syz [ 840.716296][T11340] kl5kusb105 8-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 840.791997][T11340] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 840.817260][T15116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.843495][T15111] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 841.102089][T11340] usb 8-1: USB disconnect, device number 90 [ 841.202113][T11340] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 841.238566][T11340] kl5kusb105 8-1:1.91: device disconnected [ 841.470863][T15114] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 841.741607][ T24] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 841.823449][ T5901] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 841.931695][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 841.940017][ T24] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 841.949371][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.957703][ T24] usb 6-1: Product: syz [ 841.962632][ T24] usb 6-1: Manufacturer: syz [ 841.976635][ T24] usb 6-1: SerialNumber: syz [ 841.984909][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 841.997379][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.007756][ T24] usb 6-1: config 0 descriptor?? [ 842.016272][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 842.044339][T11340] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 842.047159][T11340] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 842.076606][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 842.082874][ T5901] usb 7-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 842.092327][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.103420][ T5901] usb 7-1: config 0 descriptor?? [ 842.441833][T11340] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 842.517433][ T5901] thrustmaster 0003:044F:B651.0021: item fetching failed at offset 5/7 [ 842.526241][ T5901] thrustmaster 0003:044F:B651.0021: parse failed [ 842.532767][ T5901] thrustmaster 0003:044F:B651.0021: probe with driver thrustmaster failed with error -22 [ 842.601565][T11340] usb 1-1: Using ep0 maxpacket: 32 [ 842.608198][T11340] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 842.616734][T11340] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 842.626445][T11340] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 842.635567][T11340] usb 1-1: config 1 has no interface number 0 [ 842.697892][T11340] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 842.710114][T11340] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 842.725503][T11340] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 842.742295][ T9] usb 7-1: USB disconnect, device number 102 [ 842.748369][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.787359][T11340] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 842.883821][ T24] gspca_sq930x: ucbus_write failed -71 [ 843.271227][T15135] binder: 15133:15135 ioctl c0306201 0 returned -14 [ 843.488738][T11340] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 843.977927][ T24] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 844.596849][ T6151] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 844.847593][ T24] usb 6-1: USB disconnect, device number 86 [ 845.066198][ T5867] usb 1-1: USB disconnect, device number 82 [ 845.073981][ T5867] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 845.131859][ T5901] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 845.300184][ T5901] usb 7-1: not running at top speed; connect to a high speed hub [ 845.380665][ T5901] usb 7-1: config 0 has an invalid interface number: 37 but max is 0 [ 845.392955][ T5901] usb 7-1: config 0 has no interface number 0 [ 845.399225][ T5901] usb 7-1: config 0 interface 37 has no altsetting 0 [ 845.463950][ T5901] usb 7-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=75.dc [ 845.497446][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.554428][ T5901] usb 7-1: Product: syz [ 845.578527][ T5901] usb 7-1: Manufacturer: syz [ 845.605734][ T5901] usb 7-1: SerialNumber: syz [ 845.910851][ T5901] usb 7-1: config 0 descriptor?? [ 845.992087][ T873] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 846.174384][ T873] usb 8-1: Using ep0 maxpacket: 32 [ 846.221738][ T873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.259639][ T5901] usb 7-1: USB disconnect, device number 103 [ 846.279926][ T873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.325103][ T6151] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 846.328960][ T873] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 846.356301][ T873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.388409][ T873] usb 8-1: config 0 descriptor?? [ 847.030492][ T6151] usb 6-1: unable to get BOS descriptor or descriptor too short [ 847.047163][ T6151] usb 6-1: config 1 has an invalid interface number: 91 but max is 0 [ 847.064949][ T6151] usb 6-1: config 1 has no interface number 0 [ 847.077250][ T6151] usb 6-1: config 1 interface 91 has no altsetting 0 [ 847.088021][ T6151] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 847.097475][ T6151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.106021][ T6151] usb 6-1: Product: syz [ 847.110301][ T6151] usb 6-1: Manufacturer: syz [ 847.117269][ T6151] usb 6-1: SerialNumber: syz [ 847.128847][ T6151] kl5kusb105 6-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 847.139306][ T6151] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 847.225770][ T873] usbhid 8-1:0.0: can't add hid device: -71 [ 847.237623][ T873] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 847.256789][ T873] usb 8-1: USB disconnect, device number 91 [ 847.485688][ T9] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 847.498287][ T5870] usb 6-1: USB disconnect, device number 87 [ 847.506274][ T5870] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 847.520130][ T5870] kl5kusb105 6-1:1.91: device disconnected [ 847.652839][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 847.672862][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.684220][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 847.706337][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.718019][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.736213][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 847.747619][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 847.756853][ T9] usb 7-1: Product: syz [ 847.761100][ T9] usb 7-1: Manufacturer: syz [ 847.772592][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 847.777898][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 847.787162][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 847.793568][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 848.104234][ T5870] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 848.681381][T15183] netlink: 'syz.7.2312': attribute type 10 has an invalid length. [ 848.698854][T15183] bond0: (slave wlan1): Opening slave failed [ 848.786480][T15190] input: syz0 as /devices/virtual/input/input53 [ 848.996089][T15179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.070430][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.081437][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.091671][ T5870] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 849.101765][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.147394][ T5870] usb 1-1: config 0 descriptor?? [ 849.604549][ T5870] uclogic 0003:5543:0064.0022: item fetching failed at offset 0/3 [ 849.615461][ T5870] uclogic 0003:5543:0064.0022: parse failed [ 849.621646][ T9] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 849.624173][ T5870] uclogic 0003:5543:0064.0022: probe with driver uclogic failed with error -22 [ 849.773353][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 849.789515][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.809952][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 849.819077][ T9] usb 6-1: config 1 has no interface number 1 [ 849.825690][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 849.838788][ T9] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.854450][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 849.864141][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.872485][ T9] usb 6-1: Product: syz [ 849.876743][ T9] usb 6-1: Manufacturer: syz [ 849.881410][ T9] usb 6-1: SerialNumber: syz [ 849.886909][ T30] audit: type=1400 audit(1747576833.792:767): avc: denied { connect } for pid=15195 comm="syz.7.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 849.998868][ T6151] usb 1-1: USB disconnect, device number 83 [ 850.136383][ T9] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 850.146764][ T5870] usb 7-1: USB disconnect, device number 104 [ 850.176624][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 850.317138][ T9] usb 6-1: USB disconnect, device number 88 [ 851.874753][ T30] audit: type=1400 audit(1747576835.782:768): avc: denied { ioctl } for pid=15215 comm="syz.0.2321" path="socket:[51198]" dev="sockfs" ino=51198 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 851.916354][T15217] sp0: Synchronizing with TNC [ 852.637383][ T6151] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 853.191032][ T6151] usb 6-1: unable to get BOS descriptor or descriptor too short [ 853.261765][ T6151] usb 6-1: config 1 has an invalid interface number: 91 but max is 0 [ 853.426375][ T6151] usb 6-1: config 1 has no interface number 0 [ 853.463906][ T6151] usb 6-1: config 1 interface 91 has no altsetting 0 [ 853.605292][ T6151] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 853.616372][T15236] raw_sendmsg: syz.6.2324 forgot to set AF_INET. Fix it! [ 853.732474][ T6151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.740581][ T6151] usb 6-1: Product: syz [ 853.744861][ T6151] usb 6-1: Manufacturer: syz [ 853.749504][ T6151] usb 6-1: SerialNumber: syz [ 854.053714][ T6151] kl5kusb105 6-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 854.063630][ T6151] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 854.271953][ T9] usb 6-1: USB disconnect, device number 89 [ 854.279571][ T9] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 854.301642][ T873] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 854.318610][ T9] kl5kusb105 6-1:1.91: device disconnected [ 854.451650][ T873] usb 7-1: Using ep0 maxpacket: 8 [ 854.467985][ T873] usb 7-1: config 8 has an invalid interface number: 198 but max is 0 [ 854.481579][ T873] usb 7-1: config 8 has no interface number 0 [ 854.493781][ T873] usb 7-1: config 8 interface 198 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 854.514295][ T873] usb 7-1: config 8 interface 198 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 854.531625][ T5870] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 854.543306][ T873] usb 7-1: config 8 interface 198 has no altsetting 0 [ 854.563179][ T873] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=aa.a3 [ 854.572607][ T873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.583422][ T873] usb 7-1: Product: syz [ 854.587623][ T873] usb 7-1: Manufacturer: syz [ 854.601704][ T873] usb 7-1: SerialNumber: syz [ 854.614478][T15245] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 854.622586][T15245] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 854.703616][ T5870] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 854.725951][ T5870] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 854.751719][ T5870] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 854.775061][ T5870] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 854.811845][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.823333][ T5870] usb 8-1: Product: syz [ 854.827528][ T5870] usb 8-1: Manufacturer: syz [ 854.841626][ T5870] usb 8-1: SerialNumber: syz [ 854.872505][ T5870] usb 8-1: config 0 descriptor?? [ 855.038047][T15231] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 855.048104][ T5870] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 855.301690][ T5867] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 855.401832][ T873] usb 7-1: USB disconnect, device number 105 [ 855.463681][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.479235][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 855.498021][ T5867] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 855.507517][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.519323][ T5867] usb 6-1: Product: syz [ 855.524688][ T5867] usb 6-1: Manufacturer: syz [ 855.529439][ T5867] usb 6-1: SerialNumber: syz [ 855.540515][ T5867] usb 6-1: config 0 descriptor?? [ 855.752207][ T9] usb 6-1: USB disconnect, device number 90 [ 855.791598][ T6151] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 855.941678][ T6151] usb 1-1: Using ep0 maxpacket: 32 [ 855.952216][ T6151] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 855.973605][ T6151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.989008][ T6151] usb 1-1: Product: syz [ 855.993416][ T6151] usb 1-1: Manufacturer: syz [ 855.998093][ T6151] usb 1-1: SerialNumber: syz [ 856.210269][T15262] vivid-000: ================= START STATUS ================= [ 856.218245][T15262] vivid-000: Radio HW Seek Mode: Bounded [ 856.224749][T15262] vivid-000: Radio Programmable HW Seek: false [ 856.231095][T15262] vivid-000: RDS Rx I/O Mode: Block I/O [ 856.236875][T15262] vivid-000: Generate RBDS Instead of RDS: false [ 856.243453][T15262] vivid-000: RDS Reception: true [ 856.248493][T15262] vivid-000: RDS Program Type: 0 inactive [ 856.254348][ T9] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 856.262073][T15262] vivid-000: RDS PS Name: inactive [ 856.267335][T15262] vivid-000: RDS Radio Text: inactive [ 856.273029][T15262] vivid-000: RDS Traffic Announcement: false inactive [ 856.279955][T15262] vivid-000: RDS Traffic Program: false inactive [ 856.287040][T15262] vivid-000: RDS Music: false inactive [ 856.292854][T15262] vivid-000: ================== END STATUS ================== [ 856.433558][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 856.489443][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 856.500661][ T5870] usb 8-1: USB disconnect, device number 92 [ 856.519896][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.881743][ T9] usb 7-1: Product: syz [ 856.885966][ T9] usb 7-1: Manufacturer: syz [ 856.890602][ T9] usb 7-1: SerialNumber: syz [ 856.909465][ T6151] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 856.927729][ T24] IPVS: starting estimator thread 0... [ 856.927992][ T6151] usb 1-1: USB disconnect, device number 84 [ 857.137022][T15264] vivid-002: ================= START STATUS ================= [ 857.154031][T15264] vivid-002: Radio HW Seek Mode: Bounded [ 857.160025][T15264] vivid-002: Radio Programmable HW Seek: false [ 857.166463][T15264] vivid-002: RDS Rx I/O Mode: Block I/O [ 857.172320][T15264] vivid-002: Generate RBDS Instead of RDS: false [ 857.178797][T15264] vivid-002: RDS Reception: true [ 857.184093][T15264] vivid-002: RDS Program Type: 0 inactive [ 857.191019][T15264] vivid-002: RDS PS Name: inactive [ 857.200417][T15264] vivid-002: RDS Radio Text: inactive [ 857.206261][T15281] IPVS: using max 36 ests per chain, 86400 per kthread [ 857.215903][T15264] vivid-002: RDS Traffic Announcement: false inactive [ 857.223008][T15264] vivid-002: RDS Traffic Program: false inactive [ 857.229658][T15264] vivid-002: RDS Music: false inactive [ 857.241837][T15264] vivid-002: ================== END STATUS ================== [ 857.300501][ T9] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 857.314306][ T9] usb 7-1: USB disconnect, device number 106 [ 859.041589][ T6151] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 860.072431][ T6151] usb 1-1: unable to get BOS descriptor or descriptor too short [ 860.401345][ T6151] usb 1-1: config 1 has an invalid interface number: 91 but max is 0 [ 860.452806][ T6151] usb 1-1: config 1 has no interface number 0 [ 860.469198][ T6151] usb 1-1: config 1 interface 91 has no altsetting 0 [ 860.489558][ T6151] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 860.531176][ T6151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.561948][ T6151] usb 1-1: Product: syz [ 860.574903][ T6151] usb 1-1: Manufacturer: syz [ 860.591387][ T6151] usb 1-1: SerialNumber: syz [ 860.678831][ T6151] kl5kusb105 1-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 860.735924][ T6151] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 860.908027][ T6151] usb 1-1: USB disconnect, device number 85 [ 861.023092][ T6151] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 861.180104][ T6151] kl5kusb105 1-1:1.91: device disconnected [ 861.666062][T15315] sp0: Synchronizing with TNC [ 861.868945][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2343'. [ 862.330172][ T5870] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 862.793363][ T5870] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 862.811688][ T5870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.824560][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 862.884064][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.101201][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.237165][ T5870] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 863.247984][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 863.276846][ T5870] usb 1-1: Product: syz [ 863.284715][ T5870] usb 1-1: Manufacturer: syz [ 863.289563][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2348'. [ 863.300618][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 863.306789][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 863.313881][ T5870] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 863.323018][ T5870] cdc_wdm 1-1:1.0: Unknown control protocol [ 863.512989][ T24] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 865.101702][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 865.110479][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 865.119706][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.127863][ T24] usb 7-1: Product: syz [ 865.132107][ T24] usb 7-1: Manufacturer: syz [ 865.136745][ T24] usb 7-1: SerialNumber: syz [ 865.321597][ T5867] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 865.367608][T15332] vivid-002: ================= START STATUS ================= [ 865.379316][T15332] vivid-002: Radio HW Seek Mode: Bounded [ 865.385893][T15332] vivid-002: Radio Programmable HW Seek: false [ 865.399273][T15332] vivid-002: RDS Rx I/O Mode: Block I/O [ 865.405570][T15332] vivid-002: Generate RBDS Instead of RDS: false [ 865.413659][T15332] vivid-002: RDS Reception: true [ 865.418924][T15332] vivid-002: RDS Program Type: 0 inactive [ 865.426779][T15332] vivid-002: RDS PS Name: inactive [ 865.438061][T15332] vivid-002: RDS Radio Text: inactive [ 865.443774][T15332] vivid-002: RDS Traffic Announcement: false inactive [ 865.450899][T15332] vivid-002: RDS Traffic Program: false inactive [ 865.457513][T15332] vivid-002: RDS Music: false inactive [ 865.463219][T15332] vivid-002: ================== END STATUS ================== [ 865.476843][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 865.706272][ T5867] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 865.779150][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.880584][ T5867] usb 6-1: Product: syz [ 865.886560][ T5867] usb 6-1: Manufacturer: syz [ 865.891371][ T5867] usb 6-1: SerialNumber: syz [ 865.896789][ T24] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 865.935765][ T24] usb 7-1: USB disconnect, device number 107 [ 866.072200][ T5870] usb 1-1: USB disconnect, device number 86 [ 866.124866][T15349] vivid-000: ================= START STATUS ================= [ 866.134884][T15349] vivid-000: Radio HW Seek Mode: Bounded [ 866.140554][T15349] vivid-000: Radio Programmable HW Seek: false [ 866.151397][T15349] vivid-000: RDS Rx I/O Mode: Block I/O [ 866.158179][T15349] vivid-000: Generate RBDS Instead of RDS: false [ 866.165691][T15349] vivid-000: RDS Reception: true [ 866.170648][T15349] vivid-000: RDS Program Type: 0 inactive [ 866.176912][T15349] vivid-000: RDS PS Name: inactive [ 866.183752][T15349] vivid-000: RDS Radio Text: inactive [ 866.189239][T15349] vivid-000: RDS Traffic Announcement: false inactive [ 866.197526][T15349] vivid-000: RDS Traffic Program: false inactive [ 866.204035][T15349] vivid-000: RDS Music: false inactive [ 866.209524][T15349] vivid-000: ================== END STATUS ================== [ 866.265249][ T5867] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 866.279112][ T5867] usb 6-1: USB disconnect, device number 91 [ 866.321828][ T6151] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 866.427669][ T30] audit: type=1400 audit(1747576850.332:769): avc: denied { watch watch_reads } for pid=15357 comm="syz.6.2355" path="/syzcgroup/cpu/syz6/syz0" dev="cgroup" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 866.453163][ T5870] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 866.493233][ T6151] usb 8-1: Using ep0 maxpacket: 32 [ 866.501941][ T6151] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 866.511228][ T6151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.520999][ T6151] usb 8-1: Product: syz [ 866.531605][ T6151] usb 8-1: Manufacturer: syz [ 866.536327][ T6151] usb 8-1: SerialNumber: syz [ 866.683054][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 866.690580][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.701765][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.711598][ T5870] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 866.720806][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.269351][ T5870] usb 1-1: config 0 descriptor?? [ 867.271874][T15353] vivid-004: ================= START STATUS ================= [ 867.282372][T15353] vivid-004: Radio HW Seek Mode: Bounded [ 867.288080][T15353] vivid-004: Radio Programmable HW Seek: false [ 867.294434][T15353] vivid-004: RDS Rx I/O Mode: Block I/O [ 867.301748][T15353] vivid-004: Generate RBDS Instead of RDS: false [ 867.308483][T15353] vivid-004: RDS Reception: true [ 867.313682][T15353] vivid-004: RDS Program Type: 0 inactive [ 867.319507][T15353] vivid-004: RDS PS Name: inactive [ 867.325095][T15353] vivid-004: RDS Radio Text: inactive [ 867.330664][T15353] vivid-004: RDS Traffic Announcement: false inactive [ 867.337520][T15353] vivid-004: RDS Traffic Program: false inactive [ 867.344061][T15353] vivid-004: RDS Music: false inactive [ 867.349635][T15353] vivid-004: ================== END STATUS ================== [ 867.494355][ T5870] macally 0003:060B:0001.0023: unknown main item tag 0x0 [ 867.501452][ T5870] macally 0003:060B:0001.0023: unknown main item tag 0x0 [ 867.544865][ T5870] macally 0003:060B:0001.0023: unknown main item tag 0x0 [ 867.546934][ T6151] usb 8-1: 2:1 : no UAC_FORMAT_TYPE desc [ 867.554399][ T5870] macally 0003:060B:0001.0023: unknown main item tag 0x0 [ 867.567525][ T5870] macally 0003:060B:0001.0023: unknown main item tag 0x0 [ 867.582863][ T6151] usb 8-1: USB disconnect, device number 93 [ 867.584143][ T5870] macally 0003:060B:0001.0023: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.0-1/input0 [ 867.907005][ T5870] usb 1-1: USB disconnect, device number 87 [ 868.041781][ T5901] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 868.241770][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 868.255442][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.280257][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.303450][ T5901] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 868.315395][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.355451][ T5901] usb 7-1: config 0 descriptor?? [ 868.408721][ T5901] hub 7-1:0.0: USB hub found [ 868.780692][T15369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.859270][T15369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.059720][ T5901] hub 7-1:0.0: 1 port detected [ 869.847943][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.891933][ T5870] hub 7-1:0.0: activate --> -90 [ 869.916813][T15394] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2364'. [ 869.929047][T15394] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2364'. [ 870.085484][T15400] vlan1: entered promiscuous mode [ 870.091461][T15400] vlan1: entered allmulticast mode [ 870.097328][T15400] hsr_slave_1: entered allmulticast mode [ 870.131676][ T6151] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 870.612516][ T24] usb 7-1: USB disconnect, device number 108 [ 870.681662][ T6151] usb 8-1: Using ep0 maxpacket: 32 [ 870.690125][ T6151] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 870.699408][ T6151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.708006][ T6151] usb 8-1: Product: syz [ 870.712243][ T6151] usb 8-1: Manufacturer: syz [ 870.716904][ T6151] usb 8-1: SerialNumber: syz [ 870.928580][T15393] vivid-004: ================= START STATUS ================= [ 870.951172][T15393] vivid-004: Radio HW Seek Mode: Bounded [ 870.961292][T15393] vivid-004: Radio Programmable HW Seek: false [ 870.970407][T15393] vivid-004: RDS Rx I/O Mode: Block I/O [ 870.977997][T15393] vivid-004: Generate RBDS Instead of RDS: false [ 870.991598][T15393] vivid-004: RDS Reception: true [ 870.996654][T15393] vivid-004: RDS Program Type: 0 inactive [ 871.004025][T15393] vivid-004: RDS PS Name: inactive [ 871.009335][T15393] vivid-004: RDS Radio Text: inactive [ 871.015498][T15393] vivid-004: RDS Traffic Announcement: false inactive [ 871.018969][T15409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 871.023541][T15393] vivid-004: RDS Traffic Program: false inactive [ 871.023577][T15393] vivid-004: RDS Music: false inactive [ 871.044780][T15393] vivid-004: ================== END STATUS ================== [ 871.152498][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 871.281983][ T5867] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 871.445657][ T6151] usb 8-1: 2:1 : no UAC_FORMAT_TYPE desc [ 871.484545][ T6151] usb 8-1: USB disconnect, device number 94 [ 871.501657][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 871.510194][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 871.520938][ T9] usb 1-1: can't read configurations, error -61 [ 871.581626][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 871.592351][ T5867] usb 6-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 871.602136][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.611426][ T5867] usb 6-1: config 0 descriptor?? [ 871.618424][ T5867] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 871.624826][ T5867] gspca_mr97310a: reg write [21] error -22 [ 871.630668][ T5867] mr97310a 6-1:0.0: probe with driver mr97310a failed with error -22 [ 871.740040][T15414] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 871.756898][T15414] batman_adv: batadv0: Adding interface: gretap1 [ 871.763308][T15414] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.788968][T15414] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 872.036978][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 872.080014][ T24] usb 6-1: USB disconnect, device number 92 [ 872.201545][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 872.208368][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 872.216050][ T9] usb 1-1: can't read configurations, error -61 [ 872.222543][ T9] usb usb1-port1: attempt power cycle [ 872.361085][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2372'. [ 872.632171][ T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 872.722959][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 872.732795][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 872.743851][ T9] usb 1-1: can't read configurations, error -61 [ 873.061040][ T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 873.082189][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 873.088955][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 873.104954][ T9] usb 1-1: can't read configurations, error -61 [ 873.140517][ T9] usb usb1-port1: unable to enumerate USB device [ 873.159637][T15423] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 873.401636][ T5867] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 873.553207][ T5867] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 873.562015][ T5867] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.572154][ T5867] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 873.581135][ T5867] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.592118][ T5867] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.603384][ T5867] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 873.612639][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 873.620957][ T5867] usb 8-1: Product: syz [ 873.625765][ T5867] usb 8-1: Manufacturer: syz [ 873.636058][ T5867] cdc_wdm 8-1:1.0: skipping garbage [ 873.641293][ T5867] cdc_wdm 8-1:1.0: skipping garbage [ 873.647599][ T5867] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 873.653773][ T5867] cdc_wdm 8-1:1.0: Unknown control protocol [ 873.751970][ T24] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 873.901585][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 873.915799][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.933880][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.956106][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 873.974157][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 874.011681][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 874.026079][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 874.035415][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 874.043502][ T24] usb 7-1: Manufacturer: syz [ 874.049905][ T24] usb 7-1: config 0 descriptor?? [ 874.329464][ T5901] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 874.541682][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 874.548439][ T5901] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 874.562723][ T24] rc_core: IR keymap rc-hauppauge not found [ 874.569768][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 874.578978][ T24] Registered IR keymap rc-empty [ 874.584164][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.591378][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.605065][ T5901] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:26.0/input/input55 [ 874.614486][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.642513][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 874.657865][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input54 [ 874.678688][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.701682][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.721700][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.741741][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.761638][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.782349][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.803457][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.829807][T15433] input: syz0 as /devices/virtual/input/input56 [ 874.841745][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.861726][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.882550][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 874.904430][ T24] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 874.905146][T15439] tipc: Enabled bearer , priority 0 [ 874.917275][ T24] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 874.936223][T15439] tipc: Resetting bearer [ 875.932997][ T9] tipc: Node number set to 4269801642 [ 876.230702][ T24] usb 8-1: USB disconnect, device number 95 [ 877.009810][ T24] usb 7-1: USB disconnect, device number 109 [ 877.036966][ T5172] bcm5974 1-1:26.0: could not read from device [ 877.038008][ T9] usb 1-1: USB disconnect, device number 92 [ 877.054006][ T5172] bcm5974 1-1:26.0: could not read from device [ 877.258719][T15448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2380'. [ 878.803254][ T30] audit: type=1400 audit(1747576862.712:770): avc: denied { watch_with_perm } for pid=15464 comm="syz.6.2385" path="/488/bus" dev="tmpfs" ino=2674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 878.870446][T15469] 9pnet_fd: Insufficient options for proto=fd [ 878.935384][ T9] usb 8-1: new full-speed USB device number 96 using dummy_hcd [ 879.876521][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 879.889725][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 879.902163][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1280, setting to 64 [ 879.922353][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 879.961155][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 879.981353][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 880.011330][ T9] usb 8-1: SerialNumber: syz [ 880.042472][T15461] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 880.049888][T15461] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 880.062079][ T9] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 880.181603][ T5901] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 880.371754][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 880.382198][ T5901] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 880.418378][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.464224][T15461] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 880.472908][ T5901] usb 1-1: config 0 has no interface number 0 [ 880.484461][ T5901] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 880.504807][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.540687][ T5901] usb 1-1: Product: syz [ 880.559577][ T5901] usb 1-1: Manufacturer: syz [ 880.573606][ T5901] usb 1-1: SerialNumber: syz [ 880.590356][ T5901] usb 1-1: config 0 descriptor?? [ 880.609726][ T5901] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 880.616700][ T5901] usb 1-1: No valid video chain found. [ 880.637734][ T9] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 880.661276][ T9] usb 8-1: USB disconnect, device number 96 [ 880.800120][T15478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.811097][T15478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.820517][ T5901] usb 1-1: USB disconnect, device number 93 [ 880.924814][T15486] tipc: Invalid UDP bearer configuration [ 880.924845][T15486] tipc: Enabling of bearer rejected, failed to enable media [ 883.269867][T15505] sit1: entered promiscuous mode [ 883.269891][T15505] sit1: entered allmulticast mode [ 883.283687][T15505] trusted_key: encrypted_key: insufficient parameters specified [ 883.284246][T15505] SELinux: syz.6.2396 (15505) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 883.315773][ T30] audit: type=1400 audit(1747576867.222:771): avc: denied { read } for pid=15502 comm="syz.0.2395" path="socket:[51930]" dev="sockfs" ino=51930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 883.396471][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2397'. [ 883.758033][T15510] sp0: Synchronizing with TNC [ 884.185072][T15524] loop2: detected capacity change from 0 to 7 [ 884.212152][T15524] Dev loop2: unable to read RDB block 7 [ 884.218613][T15524] loop2: AHDI p1 p2 p3 [ 884.223471][T15524] loop2: partition table partially beyond EOD, truncated [ 884.367982][T15524] loop2: p1 start 1601398130 is beyond EOD, truncated [ 884.384236][T15524] loop2: p2 start 1702059890 is beyond EOD, truncated [ 884.975160][T15537] FAULT_INJECTION: forcing a failure. [ 884.975160][T15537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.994344][T15537] CPU: 1 UID: 0 PID: 15537 Comm: syz.7.2405 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 884.994372][T15537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 884.994380][T15537] Call Trace: [ 884.994385][T15537] [ 884.994390][T15537] dump_stack_lvl+0x16c/0x1f0 [ 884.994412][T15537] should_fail_ex+0x512/0x640 [ 884.994431][T15537] _copy_from_user+0x2e/0xd0 [ 884.994448][T15537] copy_msghdr_from_user+0x98/0x160 [ 884.994462][T15537] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 884.994482][T15537] ___sys_sendmsg+0xfe/0x1d0 [ 884.994495][T15537] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.994542][T15537] __sys_sendmsg+0x16d/0x220 [ 884.994562][T15537] ? __pfx___sys_sendmsg+0x10/0x10 [ 884.994596][T15537] do_syscall_64+0xcd/0x260 [ 884.994619][T15537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.994634][T15537] RIP: 0033:0x7f0b5bf8e969 [ 884.994648][T15537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.994734][T15537] RSP: 002b:00007f0b5cdf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.994752][T15537] RAX: ffffffffffffffda RBX: 00007f0b5c1b5fa0 RCX: 00007f0b5bf8e969 [ 884.994764][T15537] RDX: 0000000004000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 884.994774][T15537] RBP: 00007f0b5cdf9090 R08: 0000000000000000 R09: 0000000000000000 [ 884.994784][T15537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.994794][T15537] R13: 0000000000000000 R14: 00007f0b5c1b5fa0 R15: 00007ffe34150d68 [ 884.994825][T15537] [ 885.217014][T15538] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 885.234224][T15538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.121562][ T24] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 886.186808][T15544] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 886.560585][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 886.569639][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.580805][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 886.591705][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.611635][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.649406][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 886.677140][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 886.703365][ T24] usb 7-1: Product: syz [ 886.719747][ T24] usb 7-1: Manufacturer: syz [ 886.755431][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 886.760719][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 886.784006][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 886.789959][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 887.601629][ T24] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 887.763234][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 887.789843][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.813561][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 887.833956][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.856251][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.878178][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 887.889519][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 887.912080][ T24] usb 1-1: Product: syz [ 887.916898][ T24] usb 1-1: Manufacturer: syz [ 887.926046][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 887.931432][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 887.939010][ T24] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 887.945378][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 888.996223][ T6151] usb 7-1: USB disconnect, device number 110 [ 889.570857][T15577] FAULT_INJECTION: forcing a failure. [ 889.570857][T15577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.584365][T15577] CPU: 1 UID: 0 PID: 15577 Comm: syz.7.2416 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 889.584392][T15577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 889.584403][T15577] Call Trace: [ 889.584409][T15577] [ 889.584416][T15577] dump_stack_lvl+0x16c/0x1f0 [ 889.584448][T15577] should_fail_ex+0x512/0x640 [ 889.584477][T15577] _copy_from_user+0x2e/0xd0 [ 889.584504][T15577] copy_from_sockptr_offset+0x15c/0x1b0 [ 889.584530][T15577] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 889.584563][T15577] do_tcp_getsockopt+0x1008/0x26c0 [ 889.584587][T15577] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 889.584609][T15577] ? find_held_lock+0x2b/0x80 [ 889.584639][T15577] ? __lock_acquire+0x5ca/0x1ba0 [ 889.584680][T15577] ? find_held_lock+0x2b/0x80 [ 889.584702][T15577] ? avc_has_perm_noaudit+0x117/0x3b0 [ 889.584726][T15577] ? avc_has_perm_noaudit+0x149/0x3b0 [ 889.584749][T15577] ? avc_has_perm+0x11a/0x1c0 [ 889.584768][T15577] ? __pfx_avc_has_perm+0x10/0x10 [ 889.584791][T15577] ? __lock_acquire+0xaa4/0x1ba0 [ 889.584822][T15577] ? sock_has_perm+0x259/0x2f0 [ 889.584849][T15577] ? find_held_lock+0x2b/0x80 [ 889.584869][T15577] ? __might_fault+0xe3/0x190 [ 889.584887][T15577] ? __might_fault+0xe3/0x190 [ 889.584903][T15577] ? __might_fault+0x13b/0x190 [ 889.584923][T15577] tcp_getsockopt+0xdf/0x100 [ 889.584941][T15577] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 889.584969][T15577] do_sock_getsockopt+0x3fc/0x800 [ 889.584996][T15577] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 889.585019][T15577] ? __fget_files+0x204/0x3c0 [ 889.585048][T15577] __sys_getsockopt+0x12f/0x260 [ 889.585074][T15577] __x64_sys_getsockopt+0xbd/0x160 [ 889.585092][T15577] ? do_syscall_64+0x91/0x260 [ 889.585121][T15577] ? lockdep_hardirqs_on+0x7c/0x110 [ 889.585145][T15577] do_syscall_64+0xcd/0x260 [ 889.585174][T15577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.585192][T15577] RIP: 0033:0x7f0b5bf8e969 [ 889.585208][T15577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.585226][T15577] RSP: 002b:00007f0b5cdd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 889.585243][T15577] RAX: ffffffffffffffda RBX: 00007f0b5c1b6080 RCX: 00007f0b5bf8e969 [ 889.585256][T15577] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000006 [ 889.585266][T15577] RBP: 00007f0b5cdd8090 R08: 0000200000000000 R09: 0000000000000000 [ 889.585277][T15577] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 889.585288][T15577] R13: 0000000000000000 R14: 00007f0b5c1b6080 R15: 00007ffe34150d68 [ 889.585311][T15577] [ 890.343619][ T5867] usb 1-1: USB disconnect, device number 94 [ 890.429759][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2417'. [ 890.614182][ T30] audit: type=1400 audit(1747576874.512:772): avc: denied { compute_member } for pid=15582 comm="syz.0.2419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 890.767790][T15589] hub 8-0:1.0: USB hub found [ 890.775573][T15589] hub 8-0:1.0: 1 port detected [ 890.829397][T15589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 892.281578][ T6151] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 892.331615][ T6863] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 892.443632][ T6151] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.461555][ T6151] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 892.470756][ T6151] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 892.501560][ T6151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.532778][ T6863] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 892.541590][ T6863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.552214][ T6151] usb 7-1: config 0 descriptor?? [ 892.557400][ T6863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 892.566612][ T6863] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.579376][ T6863] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.606593][ T6863] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 892.617742][ T6863] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 892.625930][ T6863] usb 1-1: Product: syz [ 892.630239][ T6863] usb 1-1: Manufacturer: syz [ 892.638573][ T6863] cdc_wdm 1-1:1.0: skipping garbage [ 892.643984][ T6863] cdc_wdm 1-1:1.0: skipping garbage [ 892.650400][ T6863] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 892.656665][ T6863] cdc_wdm 1-1:1.0: Unknown control protocol [ 892.939384][T15610] netlink: 'syz.6.2423': attribute type 8 has an invalid length. [ 893.744572][ T24] usb 7-1: USB disconnect, device number 111 [ 893.895627][T15615] FAULT_INJECTION: forcing a failure. [ 893.895627][T15615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.909074][T15615] CPU: 1 UID: 0 PID: 15615 Comm: syz.7.2426 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 893.909101][T15615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 893.909112][T15615] Call Trace: [ 893.909119][T15615] [ 893.909126][T15615] dump_stack_lvl+0x16c/0x1f0 [ 893.909158][T15615] should_fail_ex+0x512/0x640 [ 893.909187][T15615] _copy_from_user+0x2e/0xd0 [ 893.909214][T15615] copy_from_sockptr_offset+0x15c/0x1b0 [ 893.909241][T15615] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 893.909273][T15615] do_tcp_getsockopt+0x1091/0x26c0 [ 893.909296][T15615] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 893.909315][T15615] ? lock_acquire+0x179/0x350 [ 893.909343][T15615] ? find_held_lock+0x2b/0x80 [ 893.909367][T15615] ? __lock_acquire+0x5ca/0x1ba0 [ 893.909407][T15615] ? find_held_lock+0x2b/0x80 [ 893.909429][T15615] ? avc_has_perm_noaudit+0x117/0x3b0 [ 893.909454][T15615] ? avc_has_perm_noaudit+0x149/0x3b0 [ 893.909477][T15615] ? avc_has_perm+0x11a/0x1c0 [ 893.909495][T15615] ? __pfx_avc_has_perm+0x10/0x10 [ 893.909527][T15615] ? __lock_acquire+0xaa4/0x1ba0 [ 893.909552][T15615] ? sock_has_perm+0x259/0x2f0 [ 893.909580][T15615] ? find_held_lock+0x2b/0x80 [ 893.909601][T15615] ? __might_fault+0xe3/0x190 [ 893.909619][T15615] ? __might_fault+0xe3/0x190 [ 893.909636][T15615] ? __might_fault+0x13b/0x190 [ 893.909657][T15615] tcp_getsockopt+0xdf/0x100 [ 893.909675][T15615] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 893.909702][T15615] do_sock_getsockopt+0x3fc/0x800 [ 893.909729][T15615] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 893.909752][T15615] ? __fget_files+0x204/0x3c0 [ 893.909788][T15615] __sys_getsockopt+0x12f/0x260 [ 893.909814][T15615] __x64_sys_getsockopt+0xbd/0x160 [ 893.909832][T15615] ? __x64_sys_getsockopt+0x4/0x160 [ 893.909853][T15615] do_syscall_64+0xcd/0x260 [ 893.909881][T15615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.909898][T15615] RIP: 0033:0x7f0b5bf8e969 [ 893.909914][T15615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.909932][T15615] RSP: 002b:00007f0b5cdd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 893.909949][T15615] RAX: ffffffffffffffda RBX: 00007f0b5c1b6080 RCX: 00007f0b5bf8e969 [ 893.909961][T15615] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000006 [ 893.909972][T15615] RBP: 00007f0b5cdd8090 R08: 0000200000000000 R09: 0000000000000000 [ 893.909983][T15615] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 893.909994][T15615] R13: 0000000000000000 R14: 00007f0b5c1b6080 R15: 00007ffe34150d68 [ 893.910019][T15615] [ 897.387180][ T6151] usb 1-1: USB disconnect, device number 95 [ 897.403803][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2429'. [ 897.506576][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'. [ 897.578127][T15631] sp0: Synchronizing with TNC [ 897.886752][T15635] fuse: Unknown parameter '' [ 897.984920][T15638] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2433'. [ 898.121774][ T5867] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 898.331671][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 898.375510][ T5867] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 898.431852][ T5867] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.488958][ T5867] usb 7-1: config 0 has no interface number 0 [ 898.621683][ T5867] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 898.655555][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.678579][ T5867] usb 7-1: Product: syz [ 898.692196][ T5867] usb 7-1: Manufacturer: syz [ 898.706415][ T5867] usb 7-1: SerialNumber: syz [ 898.720974][ T5867] usb 7-1: config 0 descriptor?? [ 898.786709][ T5867] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 898.805494][ T5867] usb 7-1: No valid video chain found. [ 898.811755][ T24] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 898.995235][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.032186][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 899.112599][ T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 899.138002][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.205971][ T24] usb 1-1: Product: syz [ 899.235837][ T24] usb 1-1: Manufacturer: syz [ 899.328374][ T6151] usb 7-1: USB disconnect, device number 112 [ 899.777320][ T24] usb 1-1: SerialNumber: syz [ 900.079261][ T24] usb 1-1: config 0 descriptor?? [ 900.433238][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2437'. [ 900.445146][ T9] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 900.543107][ T6151] usb 1-1: USB disconnect, device number 96 [ 900.623308][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.635199][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 900.644456][ T9] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 900.654245][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.666422][ T9] usb 7-1: config 0 descriptor?? [ 901.689361][T15660] netlink: 'syz.6.2436': attribute type 8 has an invalid length. [ 901.860431][ T31] INFO: task kworker/1:3:5814 blocked for more than 143 seconds. [ 901.923920][ T31] Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 [ 901.967057][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 901.994688][ T31] task:kworker/1:3 state:D stack:21080 pid:5814 tgid:5814 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 902.008709][ T6151] usb 7-1: USB disconnect, device number 113 [ 902.009970][ T31] Workqueue: events rfkill_sync_work [ 902.023344][ T31] Call Trace: [ 902.026959][ T31] [ 902.030073][ T31] __schedule+0x116f/0x5de0 [ 902.034906][ T31] ? __lock_acquire+0x9f0/0x1ba0 [ 902.040944][ T31] ? __pfx___schedule+0x10/0x10 [ 902.046922][ T31] ? find_held_lock+0x2b/0x80 [ 902.052118][ T31] ? schedule+0x2d7/0x3a0 [ 902.057094][ T31] schedule+0xe7/0x3a0 [ 902.061444][ T31] schedule_preempt_disabled+0x13/0x30 [ 902.067749][ T31] __mutex_lock+0x6c7/0xb90 [ 902.099356][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 902.114004][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 902.119296][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 902.133221][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 902.139681][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 902.147115][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 902.152461][ T31] nfc_dev_down+0x2d/0x2e0 [ 902.157659][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 902.163301][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 902.169336][ T31] rfkill_set_block+0x1fe/0x550 [ 902.174646][ T31] rfkill_sync+0x10a/0x1c0 [ 902.179555][ T31] rfkill_sync_work+0x27/0x40 [ 902.185723][ T31] process_one_work+0x9cf/0x1b70 [ 902.191205][ T31] ? __pfx_process_one_work+0x10/0x10 [ 902.197118][ T31] ? assign_work+0x1a0/0x250 [ 902.202277][ T31] worker_thread+0x6c8/0xf10 [ 902.207325][ T31] ? __kthread_parkme+0x19e/0x250 [ 902.217286][ T31] ? __pfx_worker_thread+0x10/0x10 [ 902.223274][ T31] kthread+0x3c2/0x780 [ 902.227712][ T31] ? __pfx_kthread+0x10/0x10 [ 902.232934][ T31] ? __pfx_kthread+0x10/0x10 [ 902.238026][ T31] ? __pfx_kthread+0x10/0x10 [ 902.243148][ T31] ? __pfx_kthread+0x10/0x10 [ 902.249225][ T31] ? rcu_is_watching+0x12/0xc0 [ 902.254300][ T31] ? __pfx_kthread+0x10/0x10 [ 902.261107][ T31] ret_from_fork+0x45/0x80 [ 902.266255][ T31] ? __pfx_kthread+0x10/0x10 [ 902.271508][ T31] ret_from_fork_asm+0x1a/0x30 [ 902.276794][ T31] [ 902.280123][ T31] INFO: task kworker/1:8:5872 blocked for more than 143 seconds. [ 902.289337][ T31] Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 [ 902.299848][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 902.309753][ T31] task:kworker/1:8 state:D stack:22968 pid:5872 tgid:5872 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 902.324196][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 902.331210][ T31] Call Trace: [ 902.334968][ T31] [ 902.338188][ T31] __schedule+0x116f/0x5de0 [ 902.343162][ T31] ? __schedule+0x1186/0x5de0 [ 902.348375][ T31] ? __lock_acquire+0x9f0/0x1ba0 [ 902.354784][ T31] ? __pfx___schedule+0x10/0x10 [ 902.360297][ T31] ? find_held_lock+0x2b/0x80 [ 902.365408][ T31] ? schedule+0x2d7/0x3a0 [ 902.465042][ T31] schedule+0xe7/0x3a0 [ 902.469718][ T31] schedule_preempt_disabled+0x13/0x30 [ 902.478552][ T31] __mutex_lock+0x6c7/0xb90 [ 902.516296][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 902.532928][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 902.539362][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 902.565986][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 902.586429][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 902.595972][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 902.602348][ T31] process_one_work+0x9cf/0x1b70 [ 902.628286][ T31] ? __pfx_process_one_work+0x10/0x10 [ 902.634418][ T31] ? assign_work+0x1a0/0x250 [ 902.639307][ T31] worker_thread+0x6c8/0xf10 [ 902.667807][ T31] ? __kthread_parkme+0x19e/0x250 [ 902.675530][ T31] ? __pfx_worker_thread+0x10/0x10 [ 902.680718][ T31] kthread+0x3c2/0x780 [ 902.686129][ T31] ? __pfx_kthread+0x10/0x10 [ 902.690930][ T31] ? __pfx_kthread+0x10/0x10 [ 902.718140][ T31] ? __pfx_kthread+0x10/0x10 [ 902.728042][ T31] ? __pfx_kthread+0x10/0x10 [ 902.733517][ T31] ? rcu_is_watching+0x12/0xc0 [ 902.738300][ T31] ? __pfx_kthread+0x10/0x10 [ 902.743057][ T31] ret_from_fork+0x45/0x80 [ 902.747500][ T31] ? __pfx_kthread+0x10/0x10 [ 902.752247][ T31] ret_from_fork_asm+0x1a/0x30 [ 902.757044][ T31] [ 902.760096][ T31] INFO: task syz.8.1996:13995 blocked for more than 144 seconds. [ 902.767945][ T31] Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 [ 902.775654][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 902.784664][ T31] task:syz.8.1996 state:D stack:26488 pid:13995 tgid:13995 ppid:6737 task_flags:0x400040 flags:0x00004004 [ 902.796710][ T31] Call Trace: [ 902.800082][ T31] [ 902.803037][ T31] __schedule+0x116f/0x5de0 [ 902.807643][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 902.812738][ T31] ? __pfx___schedule+0x10/0x10 [ 902.817642][ T31] ? find_held_lock+0x2b/0x80 [ 902.822454][ T31] ? schedule+0x2d7/0x3a0 [ 902.826807][ T31] schedule+0xe7/0x3a0 [ 902.830888][ T31] schedule_preempt_disabled+0x13/0x30 [ 902.836462][ T31] __mutex_lock+0x6c7/0xb90 [ 902.840977][ T31] ? rfkill_fop_release+0x45/0x310 [ 902.846165][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 902.851228][ T31] ? locks_remove_file+0x39e/0x5b0 [ 902.856426][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 902.862022][ T31] ? rfkill_fop_release+0x45/0x310 [ 902.867152][ T31] ? evm_file_release+0xd0/0x200 [ 902.872252][ T31] rfkill_fop_release+0x45/0x310 [ 902.877196][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 902.882749][ T31] __fput+0x3ff/0xb70 [ 902.886744][ T31] task_work_run+0x150/0x240 [ 902.891339][ T31] ? __pfx_task_work_run+0x10/0x10 [ 902.896512][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 902.902726][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 902.908372][ T31] do_syscall_64+0xda/0x260 [ 902.912965][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.918862][ T31] RIP: 0033:0x7fcdcbf8e969 [ 902.923293][ T31] RSP: 002b:00007ffd23871558 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 902.931795][ T31] RAX: 0000000000000000 RBX: 00007fcdcc1b7ba0 RCX: 00007fcdcbf8e969 [ 902.939771][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 902.947806][ T31] RBP: 00007fcdcc1b7ba0 R08: 0000000000000084 R09: 000000072387184f [ 902.955928][ T31] R10: 00007fcdcc1b7ac0 R11: 0000000000000246 R12: 00000000000b6ce8 [ 902.963998][ T31] R13: 00007ffd23871650 R14: ffffffffffffffff R15: 00007ffd23871670 [ 902.972103][ T31] [ 902.975182][ T31] INFO: task syz.8.1996:13999 blocked for more than 144 seconds. [ 902.986548][ T31] Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 [ 902.994276][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 903.003071][ T31] task:syz.8.1996 state:D stack:25800 pid:13999 tgid:13995 ppid:6737 task_flags:0x400040 flags:0x00004004 [ 903.015194][ T31] Call Trace: [ 903.018472][ T31] [ 903.021401][ T31] __schedule+0x116f/0x5de0 [ 903.025916][ T31] ? find_held_lock+0x2b/0x80 [ 903.030599][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 903.035688][ T31] ? __pfx___schedule+0x10/0x10 [ 903.040570][ T31] ? find_held_lock+0x2b/0x80 [ 903.045396][ T31] ? schedule+0x2d7/0x3a0 [ 903.049754][ T31] schedule+0xe7/0x3a0 [ 903.053962][ T31] schedule_timeout+0x257/0x290 [ 903.058818][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 903.064238][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 903.069488][ T31] __wait_for_common+0x2ff/0x4e0 [ 903.074546][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 903.079936][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 903.085519][ T31] ? __flush_work+0x4d0/0xcc0 [ 903.090227][ T31] __flush_work+0x7d7/0xcc0 [ 903.094823][ T31] ? __pfx___flush_work+0x10/0x10 [ 903.099895][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 903.105225][ T31] ? __pfx___might_resched+0x10/0x10 [ 903.110541][ T31] __cancel_work_sync+0x10c/0x130 [ 903.117264][ T31] rfkill_unregister+0x95/0x2c0 [ 903.122991][ T31] nfc_unregister_device+0x94/0x330 [ 903.128318][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 903.134211][ T31] virtual_ncidev_close+0x4b/0xa0 [ 903.139342][ T31] __fput+0x3ff/0xb70 [ 903.143426][ T31] task_work_run+0x150/0x240 [ 903.148042][ T31] ? __pfx_task_work_run+0x10/0x10 [ 903.153216][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 903.158933][ T31] do_syscall_64+0xda/0x260 [ 903.163536][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.169611][ T31] RIP: 0033:0x7fcdcbf8e969 [ 903.174105][ T31] RSP: 002b:00007fcdcce87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 903.182571][ T31] RAX: ffffffffffffffea RBX: 00007fcdcc1b6080 RCX: 00007fcdcbf8e969 [ 903.190635][ T31] RDX: 0000000000005400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 903.198888][ T31] RBP: 00007fcdcc010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 903.206905][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 903.214964][ T31] R13: 0000000000000000 R14: 00007fcdcc1b6080 R15: 00007ffd238713f8 [ 903.222960][ T31] [ 903.225999][ T31] [ 903.225999][ T31] Showing all locks held in the system: [ 903.236869][ T31] 1 lock held by khungtaskd/31: [ 903.241792][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 903.251978][ T31] 2 locks held by getty/5577: [ 903.256654][ T31] #0: ffff88814e5d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 903.266447][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 903.276653][ T31] 4 locks held by kworker/1:3/5814: [ 903.281855][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 903.292481][ T31] #1: ffffc9000455fd18 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 903.304349][ T31] #2: ffffffff905c1ce8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 903.314445][ T31] #3: ffff888026025100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 903.323583][ T31] 3 locks held by kworker/1:8/5872: [ 903.328782][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 903.339286][ T31] #1: ffffc9000484fd18 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 903.352331][ T31] #2: ffffffff905c1ce8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 903.363865][ T31] 4 locks held by kworker/u8:37/9391: [ 903.369241][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 903.379264][ T31] #1: ffff8880b8423c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 903.390725][ T31] #2: ffffffff9addcc88 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x135/0x3a0 [ 903.401369][ T31] #3: ffffffff9acdaee0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 903.411807][ T31] 1 lock held by syz.8.1996/13995: [ 903.416901][ T31] #0: ffffffff905c1ce8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x45/0x310 [ 903.427143][ T31] 1 lock held by syz.8.1996/13999: [ 903.432327][ T31] #0: ffff888026025100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 903.442115][ T31] 2 locks held by syz-executor/14199: [ 903.447490][ T31] #0: ffff8880291e9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 903.456995][ T31] #1: ffffffff905c1ce8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 903.466960][ T31] 2 locks held by syz-executor/14958: [ 903.472411][ T31] #0: ffff88802a141918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 903.481871][ T31] #1: ffffffff905c1ce8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 903.491904][ T31] 2 locks held by syz.5.2374/15423: [ 903.497126][ T31] #0: ffff888025f910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 903.507036][ T31] #1: ffffffff905c1ce8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 903.517614][ T31] 2 locks held by syz-executor/15531: [ 903.523024][ T31] #0: ffff88802b4eb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 903.532565][ T31] #1: ffffffff905c1ce8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 903.542536][ T31] 2 locks held by syz-executor/15566: [ 903.547916][ T31] #0: ffff888031063118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 903.557450][ T31] #1: ffffffff905c1ce8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 903.567442][ T31] [ 903.569765][ T31] ============================================= [ 903.569765][ T31] [ 903.578260][ T31] NMI backtrace for cpu 1 [ 903.578271][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 903.578285][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 903.578293][ T31] Call Trace: [ 903.578299][ T31] [ 903.578307][ T31] dump_stack_lvl+0x116/0x1f0 [ 903.578337][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 903.578358][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 903.578376][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 903.578394][ T31] watchdog+0xf70/0x12c0 [ 903.578409][ T31] ? __pfx_watchdog+0x10/0x10 [ 903.578419][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 903.578435][ T31] ? __kthread_parkme+0x19e/0x250 [ 903.578453][ T31] ? __pfx_watchdog+0x10/0x10 [ 903.578463][ T31] kthread+0x3c2/0x780 [ 903.578474][ T31] ? __pfx_kthread+0x10/0x10 [ 903.578484][ T31] ? __pfx_kthread+0x10/0x10 [ 903.578501][ T31] ? __pfx_kthread+0x10/0x10 [ 903.578518][ T31] ? __pfx_kthread+0x10/0x10 [ 903.578534][ T31] ? rcu_is_watching+0x12/0xc0 [ 903.578555][ T31] ? __pfx_kthread+0x10/0x10 [ 903.578572][ T31] ret_from_fork+0x45/0x80 [ 903.578588][ T31] ? __pfx_kthread+0x10/0x10 [ 903.578599][ T31] ret_from_fork_asm+0x1a/0x30 [ 903.578621][ T31] [ 903.578626][ T31] Sending NMI from CPU 1 to CPUs 0: [ 903.710898][ C0] NMI backtrace for cpu 0 [ 903.710913][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 903.710931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 903.710939][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 903.710962][ C0] Code: f5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c0 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 903.710975][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 903.710988][ C0] RAX: 00000000059af68f RBX: 0000000000000000 RCX: ffffffff8b6d3419 [ 903.710997][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe4615 RDI: ffffffff8bf4a2a0 [ 903.711006][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 903.711015][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 903.711024][ C0] R13: ffffffff8e097740 R14: ffffffff90852e10 R15: 0000000000000000 [ 903.711032][ C0] FS: 0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 903.711046][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 903.711056][ C0] CR2: 00007f0b5c180178 CR3: 0000000034d6f000 CR4: 00000000003526f0 [ 903.711064][ C0] Call Trace: [ 903.711070][ C0] [ 903.711076][ C0] default_idle+0x13/0x20 [ 903.711089][ C0] default_idle_call+0x6d/0xb0 [ 903.711101][ C0] do_idle+0x391/0x510 [ 903.711120][ C0] ? __pfx_do_idle+0x10/0x10 [ 903.711136][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 903.711157][ C0] cpu_startup_entry+0x4f/0x60 [ 903.711173][ C0] rest_init+0x16b/0x2b0 [ 903.711185][ C0] ? acpi_subsystem_init+0x133/0x180 [ 903.711204][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 903.711219][ C0] start_kernel+0x3e9/0x4d0 [ 903.711233][ C0] x86_64_start_reservations+0x18/0x30 [ 903.711246][ C0] x86_64_start_kernel+0xb0/0xc0 [ 903.711259][ C0] common_startup_64+0x13e/0x148 [ 903.711280][ C0] [ 903.711937][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 903.711951][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 903.711970][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 903.711980][ T31] Call Trace: [ 903.711986][ T31] [ 903.711993][ T31] dump_stack_lvl+0x3d/0x1f0 [ 903.712018][ T31] panic+0x71c/0x800 [ 903.712043][ T31] ? __pfx_panic+0x10/0x10 [ 903.712066][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 903.712086][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 903.712103][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 903.712120][ T31] ? watchdog+0xdda/0x12c0 [ 903.712137][ T31] ? watchdog+0xdcd/0x12c0 [ 903.712157][ T31] watchdog+0xdeb/0x12c0 [ 903.712178][ T31] ? __pfx_watchdog+0x10/0x10 [ 903.712192][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 903.712215][ T31] ? __kthread_parkme+0x19e/0x250 [ 903.712239][ T31] ? __pfx_watchdog+0x10/0x10 [ 903.712255][ T31] kthread+0x3c2/0x780 [ 903.712272][ T31] ? __pfx_kthread+0x10/0x10 [ 903.712286][ T31] ? __pfx_kthread+0x10/0x10 [ 903.712301][ T31] ? __pfx_kthread+0x10/0x10 [ 903.712315][ T31] ? __pfx_kthread+0x10/0x10 [ 903.712330][ T31] ? rcu_is_watching+0x12/0xc0 [ 903.712349][ T31] ? __pfx_kthread+0x10/0x10 [ 903.712366][ T31] ret_from_fork+0x45/0x80 [ 903.712381][ T31] ? __pfx_kthread+0x10/0x10 [ 903.712397][ T31] ret_from_fork_asm+0x1a/0x30 [ 903.712432][ T31] [ 904.049103][ T31] Kernel Offset: disabled [ 904.053418][ T31] Rebooting in 86400 seconds..