last executing test programs: 16m33.38361289s ago: executing program 0 (id=2319): setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) 16m32.886897523s ago: executing program 0 (id=2320): socket(0x1d, 0x2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r5, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x22000010) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 16m31.748381532s ago: executing program 0 (id=2324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1178, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1030, 0xfb, 0x0, 0x1, [@nested={0x101d, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028aa284f8f626392a21d31e5e06fe98065e0246d46b7fe927a881c18c04", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0x1c, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x1178}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001002bbd7000000000080a0020"], 0x2c}}, 0x0) 16m30.58204001s ago: executing program 0 (id=2326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) recvmmsg(0xffffffffffffffff, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f00000036c0)=""/220, 0xdc}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003980)=""/179, 0xb3}], 0x5}, 0x6}], 0x1, 0x140, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x200000000000005b, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x34, 0x4, @thr={&(0x7f0000000080)="2475ec57ec4acf77bafcbd5c", &(0x7f0000000540)="1d3252d6edb3ac1553cbea57180c148f73fc0e12cb42745632b2c3ce544dae2512a476f4ef773617d0f5ba361f3f0d9ba295b60456a14a3d4c48c69f7cf8ec3fd643dc3ac3692876df3d2b9d2b9bcddf5f01467b7b6001f41dcc974dc8bc28813f27a0ae43a18f50fa4e727822badc833436a7500f4134df47e21b946cf96e39d431fa1623b4c0d406be113eb546887960ac86e5f7bc9c314e9b864add3a2ec7702ef4a74558f1a6d174ef0cbd97ffcca3a21231834530b767794082b3cf547a338662da4fbeef"}}, &(0x7f0000000480)=0x0) timer_delete(r3) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x105, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x44010) 16m30.400294855s ago: executing program 0 (id=2328): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000003c0), 0x0, r4) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000040)={0xc09f, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) accept$inet(r6, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r5, 0x59967000) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 16m27.580027476s ago: executing program 0 (id=2336): r0 = syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r0], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000021c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000022c0)=0xe8) r9 = geteuid() mount$9p_rdma(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x40, &(0x7f0000002300)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@msize={'msize', 0x3d, 0x343e}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@measure}, {@euid_lt={'euid<', r8}}, {@pcr={'pcr', 0x3d, 0x38}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '%'}}, {@obj_user={'obj_user', 0x3d, '/dev/sequencer\x00'}}, {@appraise}, {@uid_eq={'uid', 0x3d, r9}}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[@ANYBLOB="180000000114010b0025bd7000fedbdf2508080100020000"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x181740, 0x0) 16m12.45996899s ago: executing program 32 (id=2336): r0 = syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r0], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000021c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000022c0)=0xe8) r9 = geteuid() mount$9p_rdma(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x40, &(0x7f0000002300)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@msize={'msize', 0x3d, 0x343e}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@measure}, {@euid_lt={'euid<', r8}}, {@pcr={'pcr', 0x3d, 0x38}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '%'}}, {@obj_user={'obj_user', 0x3d, '/dev/sequencer\x00'}}, {@appraise}, {@uid_eq={'uid', 0x3d, r9}}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[@ANYBLOB="180000000114010b0025bd7000fedbdf2508080100020000"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x181740, 0x0) 16.03466063s ago: executing program 5 (id=5417): io_setup(0x4, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f00000000c0)="ad7c5e924132c48cf4109a87", 0xc, 0xf, 0x0, 0x1}, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8008, &(0x7f0000000180)={[{@stats}]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) io_destroy(r0) 14.516206793s ago: executing program 5 (id=5419): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, &(0x7f0000000bc0)) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x80c0) sendmsg$nl_route_sched(r2, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc0000000, 0x1, 0x32315559, 0x3, 0x1, 0x8, 0x9, 0x6, 0x0, 0x1, 0x1, 0x3}}) 9.886223584s ago: executing program 3 (id=5432): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010429bd70000000100000000000", @ANYRES32=0x0, @ANYBLOB="2b0300000000002000128008000300677470001400028008000100e94c96de99969b591d6a925e6706f4d29240273ed5d55a2cb18884f4d9fab4f37b47e55c67f6dbc83ac16550", @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008804}, 0x20040890) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.279494837s ago: executing program 3 (id=5434): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) read(r2, &(0x7f0000000300)=""/239, 0xef) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000280)=0x3, 0x200000, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.260734988s ago: executing program 5 (id=5435): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt_acct\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9011, 0xffffffffffffffff, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000001800), 0x0, 0x8000) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000004540)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000004780)=""/156, 0x9c}], 0x3, &(0x7f0000000600)=""/160, 0xa0}, 0x4}, {{&(0x7f00000006c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000740)=""/197, 0xc5}, {&(0x7f0000000840)=""/180, 0xb4}], 0x2, &(0x7f0000000940)=""/104, 0x68}, 0x6}, {{&(0x7f0000000440)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/148, 0x94}, {&(0x7f0000000b00)=""/220, 0xdc}, {&(0x7f0000000c00)=""/148, 0x94}], 0x3, &(0x7f0000000d00)=""/81, 0x51}, 0x7}, {{&(0x7f0000000d80)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/216, 0xd8}, {&(0x7f0000000f00)=""/12, 0xc}], 0x2}, 0x9}, {{&(0x7f0000000f80)=@tipc=@name, 0x80, &(0x7f0000001240)=[{&(0x7f0000001000)=""/92, 0x5c}, {&(0x7f0000001080)=""/211, 0xd3}, {&(0x7f0000001180)=""/168, 0xa8}], 0x3, &(0x7f0000001280)=""/190, 0xbe}, 0x6c7}, {{&(0x7f0000001340)=@tipc=@id, 0x80, &(0x7f0000003900)=[{&(0x7f00000013c0)=""/231, 0xe7}, {&(0x7f00000014c0)=""/205, 0xcd}, {&(0x7f00000015c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/115, 0x73}, {&(0x7f0000001680)=""/201, 0xc9}, {&(0x7f0000001840)=""/143, 0x8f}, {&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x9, &(0x7f00000039c0)=""/223, 0xdf}, 0xd4f}, {{&(0x7f0000003ac0)=@isdn, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)}, {&(0x7f0000003c80)=""/235, 0xeb}], 0x3, &(0x7f0000003dc0)=""/200, 0xc8}, 0x72f}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003ec0)=""/220, 0x57}, {&(0x7f0000003fc0)=""/120, 0x78}, {&(0x7f0000004040)=""/180, 0xb4}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/124, 0x7c}, {&(0x7f0000004180)=""/171, 0xab}, {&(0x7f0000004240)=""/239, 0xef}], 0x7, &(0x7f0000005ec0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000043c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004440)=""/34, 0x22}], 0x1, &(0x7f00000044c0)=""/75, 0x4b}, 0x8}], 0x9, 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) statx(r0, &(0x7f0000004880)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) ptrace$poke(0x5, 0x0, 0x0, 0x7ffffffe) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0), 0x1) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x280) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x4, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) 8.969387425s ago: executing program 5 (id=5437): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'sit0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x18}}], 0x1, 0x884) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000007c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r5, 0x47f, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r4, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x800001, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) 8.560916763s ago: executing program 3 (id=5439): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r6 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000200)=0x5, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbde, &(0x7f0000000500)={0x0, 0xfc47, 0x40, 0xffffffff, 0xd6}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 7.822217116s ago: executing program 1 (id=5440): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700008028004d9c7a00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000181200000000000000000000decccf8519373bd3b53d4c5b00f392a8b80f107110263acb86e875425252be6b1caa68a1784fac53231f60ef1bff31424117745546d904a5520502bcd06ebb4492cdcd1f43540000000000007097a004000000ce15d46e03343f9f8a7758f65eb4188d581674072bdfcf16adf1cfbf0000008efb17278f9db8fd48b3b528e3f037376ac1dffd77260802534ccb25d797704d9e23f8214f1a280d272f10f2b7232aeccde3624b61ad4f8bf0986e58743ca1a86d52e3975767a848464f5b881dac8ea9082e59c1af73fc61ffbe705b21de1b4805a841072720029420ff70f41d8cbc5feb71dd97a8b1a17d10c09e676d109402128b9426ffc67d5466eb75af258c8de46437057981b618129d9049ccca61efc0816da5", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x288, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x8000, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x3, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) 7.370123317s ago: executing program 5 (id=5441): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000040)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0x18, 0x6, "53039ac9da66"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r2, &(0x7f0000000540)='O-', &(0x7f0000000640)=""/26}, 0x20) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)="2e000300", 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000faffff0905000000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01010000000000000000070000000900020073797a31000000000900010d73797a30000000002800038024000080080003400000000218000b8014000180090001006d6574610000000004000280140000001000010000000000000000000084000a"], 0xd8}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES8=r8, @ANYRESDEC=r7], 0x0) 6.799242879s ago: executing program 1 (id=5443): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x802) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r7}}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000000c0)={0x0}) r9 = socket$alg(0x26, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x3, r9, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000200)={r8, 0x3, r1, 0x400}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r1, @ANYRES32=r10, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'sit0\x00', @link_local}) 6.189015398s ago: executing program 2 (id=5444): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) process_vm_writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/110, 0x6e}], 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000900)=""/250, 0xfa}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000840)=""/53, 0x35}], 0x7, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000b80), 0x80800) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000bc0)=0x2, &(0x7f0000000c00)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) close(r4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0xfffffffc, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000b40)=[0xffffffffffffffff, r5, 0xffffffffffffffff, r3, r0], 0x5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000740)="38eef39a9470e520a675d696d62d357d2dff6aa91ce585589f5a86b334887eccd0cf6d8e735499c5da5a4d563ad1b35f80fa0b64a2aff75617b3b1c35b8d3141773af29a42fdf17084264e7834faf8d112fffc49"}) 6.028257991s ago: executing program 2 (id=5445): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, &(0x7f0000000bc0)) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x80c0) sendmsg$nl_route_sched(r2, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc0000000, 0x1, 0x32315559, 0x3, 0x1, 0x8, 0x9, 0x6, 0x0, 0x1, 0x1, 0x3}}) 5.722323323s ago: executing program 1 (id=5446): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x1, 0x42002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000480)={0x3, [[0xfffff821, 0x7ff, 0x0, 0x8000, 0x1, 0x4, 0xa4, 0x8], [0x1, 0x7, 0x9, 0xdac, 0x3, 0xe, 0x3, 0x1], [0x80000001, 0x6ff, 0xa, 0x9, 0xb, 0x7, 0x2, 0x1f9a]], '\x00', [{0x6, 0x3ff, 0x1, 0x1}, {0x9ce, 0x4, 0x1, 0x1, 0x1}, {0x7f, 0x5, 0x1, 0x0, 0x1}, {0x5, 0x200, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x3ff, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x431a, 0x0, 0x1}, {0x23cd, 0xff1, 0x0, 0x0, 0x1, 0x1}, {0xfc2, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x60000000, 0x7, 0x1}], '\x00', 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 5.601986987s ago: executing program 4 (id=5447): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x1, 0x42002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000480)={0x3, [[0xfffff821, 0x7ff, 0x0, 0x8000, 0x1, 0x4, 0xa4, 0x8], [0x1, 0x7, 0x9, 0xdac, 0x3, 0xe, 0x3, 0x1], [0x80000001, 0x6ff, 0xa, 0x9, 0xb, 0x7, 0x2, 0x1f9a]], '\x00', [{0x6, 0x3ff, 0x1, 0x1}, {0x9ce, 0x4, 0x1, 0x1, 0x1}, {0x7f, 0x5, 0x1, 0x0, 0x1}, {0x5, 0x200, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x3ff, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x431a, 0x0, 0x1}, {0x23cd, 0xff1, 0x0, 0x0, 0x1, 0x1}, {0xfc2, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x60000000, 0x7, 0x1}], '\x00', 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 4.737595697s ago: executing program 4 (id=5448): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) read(r2, &(0x7f0000000300)=""/239, 0xef) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000280)=0x3, 0x200000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.616940173s ago: executing program 1 (id=5449): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x80000081, 0xffffffff}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) r1 = getpid() write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = add_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000180), &(0x7f0000000100), 0xfffffffffffffc33, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000014002b", @ANYRESDEC=r3, @ANYRESOCT=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000a, 0x10010, r3, 0xbb014000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000001780)=ANY=[@ANYRESDEC=r1]) r6 = io_uring_setup(0x5ae4, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x60440, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f00000002c0)={[{@none}], [{@fowner_eq}, {@appraise}]}) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'pcmda12\x00', [0x1, 0x5, 0x3, 0x4, 0x5, 0xcc9, 0x40000f, 0x7, 0xa, 0xe8aa, 0x2, 0xbe89, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a44a, 0x3, 0x40000006, 0x99, 0xcaa7, 0x0, 0x20001e77, 0x7, 0xe69, 0x3f, 0xfffffffe, 0x1, 0x0, 0xfffffff8, 0x4]}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x11, r7, 0x8cbab000) r8 = epoll_create1(0x0) dup3(r8, r6, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.499239879s ago: executing program 1 (id=5450): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) gettid() sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r1, 0x0, 0xffe0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000080)={"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"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x3, 0x0, 0x7, 0x0}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = eventfd2(0x1, 0x80001) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x0, r7}) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 4.271386908s ago: executing program 3 (id=5451): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'sit0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x18}}], 0x1, 0x884) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000007c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r5, 0x47f, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r4, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x800001, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) 3.972189594s ago: executing program 4 (id=5452): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xa20000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x40000000, '\x00', @value64=0x2}}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x8, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb090f, {0x10000, 0x6fd8e84f}, 0x3, 0xed}}) socket(0x10, 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x0) 3.324609254s ago: executing program 2 (id=5453): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x404400c}, 0x40010) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000180)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 3.307620782s ago: executing program 4 (id=5454): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x6, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) 2.104424216s ago: executing program 3 (id=5455): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', @broadcast}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4c, 0x0, 0x0, 0x6, &(0x7f0000000000), 0x24, 0x0, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r7 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f00000008c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x8, 0x6, 0x0, 0x5, 0x94, 0x6, 0xff, 0xc, 0x9, 0x8, 0x3, 0x6, 0xb}, 0xe) preadv(r9, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) timer_gettime(r8, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) 2.049902936s ago: executing program 2 (id=5456): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) read(r2, &(0x7f0000000300)=""/239, 0xef) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.9781091s ago: executing program 5 (id=5457): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = syz_open_dev$audion(0x0, 0x3, 0x400340) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0xff, 0x3}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r5, &(0x7f0000000380)=[{&(0x7f0000001600)=""/239, 0xef}], 0x1, 0x5, 0x101, 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x0, &(0x7f0000000340)}) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x808500, 0x0) sendto$packet(r7, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=""/229}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="060000000700ad9beedc0f775399486d0c4b212594c2633031bf0c492ca548334cbe422fedb1e0cd985564ed65cc40c592864c22cf61b587ad53451976258651cf6da805fabcaa204804e12e5a517a03c67922a4611e0bc89d8b01b1faf05740f65aeaf9c1e4ebc0b6555133eef9e62a87497f0a91632f83bd6ceca2c3461c0f2eb268e0e10a889587386598d913f736c9ae94a343edcf88fd166de05e66f13f29bd381c28af1f0738d791a7bac352e77665cbd42ee8"]) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)=0xffff0018) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x7fffffffffffffff]}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 1.570233541s ago: executing program 4 (id=5458): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1d9}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1100) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0xe01, 0x2, 0x1}, 0x18, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r7, 0x5) landlock_restrict_self(r8, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x7}) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 1.263442373s ago: executing program 4 (id=5459): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x10}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xcf) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)="7b9280c67423c9b9e50c999d604b03441181a3e7afae51afcf5753f23e8bb5a6407eedf86aeee526b1bd0bcc80ecab40a92d5ea9a635d39f39396f7115920465cff87ae87a8e37196a6aece1f48c4f417be9d0a750ddc406000615617b59050c5243aee7ccc41ebfc5521fa2992af0cbe6c81f1d71b9484370608e4c5de3e79ac3c4fe2bc6e295631e7058ee1ebffa9bf5673e79fe90d6d831861da5cd041ec7debe6e5a4100c76c87be4476305ddc1f135b7390c6520a7f5f9d1e20beec6f8f8469f7c8593d0f64a3", 0xc9, r2) semctl$GETALL(0x0, 0x0, 0xd, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 1.158126021s ago: executing program 2 (id=5460): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x77e, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x40}}, 0x8080) socket$kcm(0x29, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) syz_io_uring_setup(0x6a91, &(0x7f0000000200)={0x0, 0xe2fb, 0x10, 0x3, 0x5b, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r8, r5, &(0x7f0000000580)=@IORING_OP_OPENAT2={0x1c, 0x48, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x20000, 0x94, 0x2}, &(0x7f0000000680)='./file0\x00', 0x18, 0x0, 0x12345}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 851.391819ms ago: executing program 1 (id=5461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x14ab, &(0x7f000000b800)=ANY=[@ANYBLOB="b931b2d41475aaaaaaaaaa0086dd6f8207ed14752f01fe80000000000000000000000000000afe8000000000000000000000000000aa5e00060065000000332f000000000000c910fe880000000000000000000000000001c204000000030401058085234d8b919a399c2380369ebe6dbf764ccc846763c8d89978619b65717378eef4e9c441020741b1c141a441b7dce3118f67b143be1e7668ad1cbdceecf30c4bc8be47dfd2e579a55294d5f7363283c4e223cad4df41bd054e80d3732204fd95be330ac7cea38e20ccc92ffc9284320638c70a8066b0e00b5f86af000bd065545d2d9b399200c2040000007f03b6ef3db48095922f1abd0ec3428056f29408375291662078e958f2a44207c995ca64c3ad504e1a407347d90fd9c2c959ef4fd312129ae5fb24d6713ed97f3be8c858ecc77fd3aec28ea0630834c0261860ea50ab6e99ee9d6267ab7d1071d3aebd62772ffbb602cce20bdb13dcd80d08407df2011cfb50d9ef01a27a561629963a56873fc35cb2bfeb36d9136221dd7ac9c7ee8d0cad64a61e084d2e18c5a520e3f5705247335a84b198eebb88347c6482e9d14cc6aed80401fb040100c910200100000000000000000000000000020407000000000000c91000000000000000000000000000000000010a00000000000000000000c91000000000000000000000000000000000050200030401020001000000000000002902000000000000c910fe8000000000000000000000000000bb0502000200003b100408fd008000fc000000000000000000000000000001fc0000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fc000000000000000000000000000001ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000ffff000000003302004000000000fe8000000000000000000000000000aa8402040104601000fe88000000000000000000000000000133060000000000000730000000000afbef06020000000000000000000000000000006e090000000000000100000000000000ac0000000000000005020008000000000801640000000420880b00220001caa8368e6fab1a95877e22ceff1965f0855a78ccba52dac02b38a8c70ef55bbe6712040008007fff5f540710ff14f3b9d9be0d48f10a38b2a03d1b1febb298bd157f753b6903b421597c3fdbb9e01eb5497b3621f74bd26a8aca0413ad9cb66dfae2c0a329eba75e1795b0bd95a0db2ed292b354fa0ea9cbc2ccf10e1154eef6cb1bf4f5aa1633f46bbb2811c14dce47ce04fb93e58b282698a381996116cb5778724a65ca9cba8b3b5e42324c2a5181e620e2ec06fe71e75647a79ed2f3382746be2a353a3cafa2f75fc5f82aab9850eee9e26336fcfa19fd09b8cdae148127aaa74d79a155f27e5df301d60c0086dd000370241c7b597f3ba58770fc17de0b11684fe91f01863444ddd097839729d822eafc58d4beaf307a0bc73faae5c4896b7ccfbd52e3e89150861a72c96b39faab84a35b933d24cb5198a24a5cb959d78c44efdc81823c174b676abf8636d58412e5b7b9a2d3111d6d5cf8ae0d723292361a7acd9bb7266ef06242ec6c55cf673b43ff875e2d1373bfb3a611103662a538e16889ffa77f37b4f0d6293dd03ffd8a4c665af090432aa07fb8fb72e312de899b790a653567f30cd3f572970cf27d4bdc3b153c2f0ebea74a3849486861863331efd7c987f2e1b12d6f856ab007811d0abf3b0e7a5c274f91bebf43c39a82bf9dd72291ab569cb9ceed4e14c907dd68ba9e3404394cc1095f25a5f0d3dac53f8824b12d263ebd10bad30f4f1852030cd0364d4c193e5cf518de76e6203636d4d03ed3dbe1d7c105ebaf41ec55eef175d4ced409ab1437fd0026ec4ae08d03a2e2131206aed3ab4a7466a263c2aade310511a92f5b42684ff32e79b4e2f43d979a6eaebafa760d9f3ce0f7933607f7964537ae9d5f167a76006156e0252f8d74843409bf11ce508fde9f58aace4be21b744a6c3e2000fb778faab748f219ba33ac44b22d5b1b0e2fb42c54b1e0ddf59f2dc465b2c44cfca4c970954ec6df85309fd649be08f2dbb0b55c8c383e347d7b28db050bbef2ad0ac2eebd54b17f0c7cb1ef4b63341300a9e8f3d48b9a3c0dcc256773dc1ce6b4dfec1a17a095b027bf55c19da6eb909469a73119dd171a98f075c26161d01e9d8208e47ea79f063be56f07324766174714c2c7f2f80ecade834e7193c65a3fcbc2dbfdce10af298f58b7c4609cb2b604739f89d92045d52b9713072f8e602d0e50d1e563ba42cdbb4780ee30aab68f8746208bb210ddba172794f2436d6a2bf119667c8add58c0737365028a9286f1670190722bc11920da1117dfc847e3dc20e93228fb1203a5d8270a51cbee7b384b63e24e30ed1d772ca0ea66e6853e79886a27623ac7e472140f1afb5f1cd8333d5fe6b6ddeb1d2d1bc830263577d27bb28f56c76cc29be36d5ee4b2daad8bf5a79ee1eb2c8d93ae0958e20be0dba75fb47f61e466b79d79c5a8462fcda8430ff390d45eb2249213fb04fb6afdccb5a938dea1f179813f9e4dc9df4c8ce953b1cfcbf28e4f2faf202446a5aa15ada48d66d9d2820bb592908a7b5a70033f1cf7f899b02a1298188d9149f6ecc99ae973bf63984579adfa0a14b3bcc43456cc1d3dc923e1347c0c45d98c7dce3b4ae812859f249672d347138ee86667ce25452b30dcc9a868dfcc493548423a0b35a6beee67277cbd0b4f1dc3bd242ae6761a8f269550d48cbebce1d7dd38b3812731e3873f925b0312e25b0fc60e9920e0fc4c18c54b1ff571cfdb095947c899bf3352a93dc13d97031aaaa29ffd39e64645230b912eaf713b0e7dfee1a850f0fbae876cb69c95393bf6b68f68acb69546959219f36cace192f540b3bd0169ac790318449bdb442905bf9059ee3a2e29b8b6bc1975a5e5584adc01bc91baafe300aebb9dd635f00e4ac0a4374fcda70da6f1a05db0e3cd4c1f26d0d6e5b4c8caa8483f4ce70a9392b52b7ddd6795b22291c792fa8a761d2604746aa046aea288d483482a4993b016a16130264867178e809e2597dc59fa2d296410ee0cda97b918095ba2ec0ca3d6bdecab318ef0019c02e07bb5d6c454b946a329dff87ab38ece8b782957cc695e37b6b82aa8ca446ce0cdf983a3b952068a0cee657f42d5fd4e31424f6e5bd15a1fb19b533ab0ecfeb123f5bcb97ec580c923660c3dba2ac274e1e6a40833743e6b33faea4f8579865196d3eecd1c831a77b47f20b7cae77e7ab9a9a233eeccc9bac532a09a73de54c9a71ee175c210bcfc817120b0b5a7f1c49b231afd278092e33f839f9e7de63d77afb81380e216ccb6aa74249833335faa1fb748a3dfb176902f1961ab4467ec5dbb444447510760475e635b7f590f34612f145cd9d6020779b6433592d5fdd137f5a78ecff4a95dbb2fc80af9ca72cc211128a1f14d5d3949215da99e36ec2fd1a59aa598d8d63dbf31ab0ecad36aae970cf52f719bf9aa8564e1f203d9af2f9b136404a62607b3474a3c574f3e3d17b3f45ce1e90a88774cb63dca2f27aab5c998678a91a8670701dda0027bb76df74ecee6b2e1e4643b9b584afb5c1246e87e56b8c4dcbcb49b6f4fba397caa888b69aca699fd663d6317c4cd456cd7c0584d55c203eafc888cfc0c6f7061d70ae16f7449bddeaea857021f8c034f6026e200429a05c34e187b406aacbae836b006e4c5926eb0151b52c26c39dcd14fc97af43d39abb54fc1436cd1e3d66214f1e0ef7500df1f8c7b0d20d8b85196ae82c7ea1d498a02bf2f4ce37b73d5f042b8fd80f3927ec4c002f31d5f6617d7a1d718bec16ed984bf997c5f1af8435e6601947811f281af2c6b8b693d0e13a47cf6fb7529077fa58fc1fd1ff00427a0a66284b2e43dae97563ca915787184bf66cdbdb5d98b393be338b1db5ca449a5c6e0c3be253a5397347f25f3ac0f2ef37c5470d7ca84bd76359dabdfc438437510a11474f67f1090451beb5228796204c117695963304a534f6dc870052a4c8742d40f8a8fa4315fbb57a73d9860a9204dd6bc046430033ca32f717a682ccabd7a229bc4e7e6a338378d83ae3a54fb3f61bd019cb7b35f8a33309306428df0a7b8cd43349ee06d9a82187b099f717d4a4069bb880e5675a13048778f92f869063d9f47630d3847b28251128c661b1152d77f2fad38061360da8cb89d9284ff4b0b008238760a12b836362aac797ba387c5535e50bc5539d3b78cb2eacc988e6cb3b0572b8a86e156a8963bb4622696fc9d779a795a720da240b4f7d8dd826a4f3132eecfde7a7c86981d81d33906428092f6b16959cad22c6d723f569fbbd9025d2aeb7ccdf9f5586fe0230fc0b63c1d25403c27d8fa263697f962358e80c8a141d8cb5db5451955dbc6b97eadd0597332f79ea7f21a36dac6c35885dd9adc618e44248aea1611e7a1decbcac46389dc0362a0f27cabc35fecd2fdd36974d1a6c8ed26ae4351b0c6c7974757d387f9c868111a99f7a1ca69220e1588780fd2555521d82fd1cb352449874a971b9547c92d209f89fd13fb96cafd927c3920044803dd63f43fa7b7287b2d4f24d76f554e1586f5c07121c0617a79a2fb904fddb878a642d4519c75c64fc5ac8aa31d2e3cef7a9a75751488a085f479b7273816d9b59bf78d0cd937cda434d2573ff55a0c2649f1b03db7ff3c20157d9bcb7c64a981276fc25bdb79fe97f9db7c65b35f55f859a015844d9e841a6dff1313e856e27fa9f3206587927d73400fdba6133f2e6eff8ea4e8ee80fd8d8da21622f7752054f5b5c3e246b16a5aebb605940c8e58b5fe1cef0ea88c47854cbe8f0308d9997d18d697728c3b097ad825254dcc7992be31468ade8da4ff338f074c81200e3b9c779caa3d290186c1c94cade922301f2b11263d60d408d854bb02b3c3e652c1ecc9e48670a04b33234eaccdd135606506057a1ba89e32ea580f3391b2c8170d1c58bb94a1debb427af583416d0e991e22342e502bc63da50ec6543f830c246bdb37dea8aebdc60af29781e0d2398aed58e44830941f39125a5dd264dc3e41660ca98167bb507035734ac2f6176f032afce0782b1895ae318b4ae3a815f31f13064f852a9b65a3471b5521623aaae5f3591a234e937329d3316b19ed5d116370615dce6d1f6574191b0e60db1c65770817055f0f8db4721fdd994256c16e0eec83a07beae80400fc27a95c7e453f25fedaba40af9298c3d303dd0eb4a5166ebb6b898efbcff8e280c6ed0eb41dda9340323a1e8ec47304c74a1a4f2a48c584bf64509c105372bca9b71f86c7164cc256248dbb603234ff380520211541a2dc29532cb3bd6d5964fa81a0660718ab907f1f36f1b2366b48dd51907efc513f63ef3ffb64001c60eb872d595e70d4cad6528c7bc1dbbca95391088414bb01d6818dcbbcd988d74b48b53fa982a9d4318d56ed0269f2887bb1ebaf15465246f5277cd03fb4c9c78d5bfdf638d587c5432f0f8ea1c5fa3f2306293c950c499a50849b8e51a82f27cb41cd0704c358e2b81d89b9520d0c251ea2942f98aa2c57800ff92f86c8bbea07b30a19b815a80921c4074523b5ff3787891a6a27bd6f679b22a4a7cddba5372416371412b9b5c7e445dcbbf92e77e950f66f0d690330ab92fbe736e8fe00d476de5eb3001fe436d61d39bd813fabb9e0b942f675ae8acff0e63f6ffb242ded6d3e7a112b456fe2bb349a5b99b7924b1259988a88ede82826e62cf6bbe02fdc37f209a79d3d671f825f8e006538c4d525383f43300c2256278cc31b7002327b07dc76dfb451e5f0623c879245d882260a36a1c4733a3471eb3fa9aea8970ad143be2ce03257b360e01349b1ff90e09005336ac44b775894eaaf0b476c4973b7062ef8c1bd75df82243edc80d7823d4f61dd9b2bd9689f97231f2a333bbac85c965415def18fc19b5bab0cdaa8b2e05098383f54fd602b9b2934ca57004e5065dbcea4708c89f71a4d8f7cbfca1c6f1960f747a32eff17c72b55a6398a674edc5e6a117e6d442096239b12ed95f78bb54795bbf8f656e05245c2a1d9396b27afb9dde1eb52f3f3c9f4eec0faafabb7c6b14141581fdfea8550779f24ea95868a2e921f86983d0ac3bb6719671549a5a3e0ff3c23f6c8862ca341c4df9c768b3691ceef5ecaf8236f187eb050d7d034667b40e29601ca9387cc8b8fb4460346db8b04b7412b7b53e0016a5edfa05bcd761a2010bc5f2ea9f3c3cf524415ffad407b8d61c323bb4c226b3d3b860947061d0b97367dd57876b604b20999595f598997161c44ad833dd1247a0c2d9d2e42440e81042b2544d5b7c2d87b4b8f71796eac962f782984266ecb39c26b1cc58e746c040a397dd523489ee81ecd67fa433a5a2eff4c6686e2cfe4b40ef947978d6d7ef299a929999ca0a51cca98b650e2936951af740e9e6001164d08c58e39a2ae38d44708a8c25b8fec99968ed555e2dbdce9565411d4a6cfca2d329952617fd6809e9f8889c8e89dbea39d0265161e1b813fb23d43dafe5c4adcff451e472f6bf0d4c5640d54c7135658edac7404bea2a5f6510ddc70ac4fbc66e6296bd94e5834248e402e13a37ac72e611ac0d037056923c7adfac64e2b5352cfb87cd9d4d279bbd191d0451173ae2e58ab893bc30dfa8277eacfbb69d8f28b454f72dc8664bf39db907fe2f42811ce29b4c4a8ff86023b623682d8a4b5ca0c897bdc6f027fa1175b7aef8118111ed6802eb5907d94a365c5c7ae5d5848877b68f54fa54aa417f559d8b5061e06ee0fe849b410f323c194d18b39eb35f84bb1f7724a96a17acba9a6acd5393a8936e0a4d213df9f7d7cdd45d391a0dda81f685961aa446e42d3248c8453289bd1247167bc01a03edd40921c0dcda95e0c38d19132faf1cc65b13d37a994232d441febb538b046f7e948d1bf1758011ebc0216529c572bca70e4e64f71ecc7f5fcc65b8bd0bff2647cea54aa267d38d75fe1e096776366731804a547be7580f3f16d18326c2f081066a1691a9b89f3b52af15f7e2f7cbea23f4edc1878b56343356482408b52b8b71268767a070bd2c2f6936fadc910921e19a612f8c1652ccc68851c519e7b89b07d0c02da7e353ba4844e5a5d8976bbad882cd9e29b4025135cfb9115c254a92ee2bb343a075cf2d84280fb3d8577f65402a5c5bff6080088be00000001190311fb010000000000c193080022eb000000042506695d020000008000000027700f110800655800000004b6e28a9974dd3ece6c5d50b45e74003a66ce27f051060b82de0bf3343b604735a0eaf5e961b2ff9c4aacab65a111ec36f7b6a91bae4c8924f5896e9a4897883d6ec0f288b45820bb54d5ce78505c2a39dd94abc447af530000000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207641a, 0x8000, 0x20}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="b0000000000000004800000000000000020000000000000000000000000000000100000001000000ea70ffffffffffff000100000700000003000000000000000700000000000000f7fffffffffffffff9ffbfffffffffff010000000000000000000000000000000700000000000000030000000020000003000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0800000009000000000000000400000000000000000000200100000001000000ff00002e0000000000000000"], 0x0, 0x0, 0x0}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002f80)=ANY=[@ANYBLOB="b805000000000000", @ANYRES64=r9, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000a0000007000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000500000000000080830b000000c0000001000080", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32=r10, @ANYRES32=r1, @ANYBLOB="050000000300000047b2cf51a0657531dc6396b52076b4de000000000300000000000000020000002c000000000000000200000000000000010000000000000001040000000000000c877f827d5b2435fac42410d1720c030500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000002108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000a70aa3c4b156a9fe06e840e0889edb0ded1b97c4bae9501be911a9b0022d777c573e07fc42cf74c46c045a43d9f5e643a6656d761151490dc6dc422701511436f770474ec52001fe6ff7f93285", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000070000006c0f0000000000800040000080000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff06000000004000003eca4c4b", @ANYRES32=0xee00, @ANYRES32=r11, @ANYBLOB="01000000e262000000000000020000000200000001010000000000000000000003000000ad00000000000000"], 0x5b8) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r13 = accept$packet(r4, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) r14 = openat$userio(0xffffffffffffff9c, &(0x7f00000007c0), 0x12000, 0x0) r15 = fspick(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x1) sendmsg$unix(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f114814a9f8092451af2640d695e2e985cc0e837a1c9392d8610f95b64612707fa3eca8bb7d582cf09a104883607f8947fa87154b55f04252ed2c98553e9093c1bf7360edb", 0x45}, {&(0x7f0000000380)="8a200d9d531aa5e979424b748195e9b6ec5c19004cb5dc2c96b8994286a5815e62bf5db97ae22345740d7a8bf37aeeec942f48ecbcc430a41dcd9bdccb715d5ee03f2cf1e3431a40ddc42f23582f4a7c9bce81cbf18f429b2e9b90bc61a0de97c1b98d4a3877dc21d093bb13e435fa9fe70260df31c569f90fe52db30fb0e26a695ccc7e4537ad350b6dd168bcc1316b65fcd28b99411f57531a3b24c189ea321efcd9a19f12f7f5cebacf8f1d5595d0b873515d389429c2546fa99ffae9d69b59ecd9f6df579ba7188b0564ddbf60d9785b01c9f150feadd1483db9a408ec47f0657d", 0xe3}, {&(0x7f0000000480)="a81a14e01d1b48a2c78804d329dcf0d58417dfe7bba2d0954eb943f1b9ada2f2b5fbcc3f0689d1b8f051cfc0d18c3c01a5743b4771c2993ac45e94f3930895bc520018693d823fbf31b266dcdab0c6493762f872f954253cf2d2", 0x5a}, {&(0x7f0000000200)}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000000500)="0ab6d4d3fe1c8f9dd79aa99b279e2f02d9a5f3835bc3375e2e7e144a01e58bcb11168e1401b71af37bdbdce1f9106ab47a200262fa150b3cb4537ecb8e893aeb3b2d4d0588f412f241c4c7eab7dd11daac74bd65a329d2a054c1cd5de53f", 0x5e}, {&(0x7f0000000280)="b1aed99caa180621b0d643d2ff4bd8b2", 0x10}, {&(0x7f0000000580)="b5a6724276ff9d9b8c17a9ce8047f5acb90ad8934104a7a42b6606af37fc413ac1aa6063122d3aea140d3a50518ecc2851082ad633881a40e7ed74436adeef82016db6fae2fb585b4fc5057406d5d824c2ad8582f0c931f0947544eb3052edea43f595f64ee2a94c3ca4b04c7ddcf87f6dadc6d74baaab", 0x77}], 0x9, &(0x7f0000002ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000f84f6c60fcdbcae5be8e89e165bb3291b5f57e701c09773797aade4d720e6693b1dded5ae7a40e97ab48bdd2fa7e27280e0e0922d47b621ffeab442e8411d7bcdf5e785a271b6b9dc91efc40e11d33e2f20d2d6aba6cedd40d609b2d842d36737ba5c538edc104d689b6fd9453791d9e7a71a1b230d783a467791784231b791499df628928cc", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r11, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r13, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r14, @ANYRES32=r15], 0x50, 0x40000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r17, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 300.218822ms ago: executing program 2 (id=5462): ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x0, r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904"], 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=5463): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @win={{0x4, 0x6, 0x803, 0x5}, 0x6, 0x0, &(0x7f00000005c0)={{0x10, 0x4, 0x10, 0x9}, &(0x7f0000000580)={{0x316f, 0x3, 0x6, 0x3}, &(0x7f0000000540)={{0x824, 0x7038, 0x2, 0x5}}}}, 0x573, 0x0, 0x91}}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3f, 0x822f01) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) fcntl$setstatus(r1, 0x4, 0x42400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4a, 0x20000) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0x2f6f, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_dev$audion(&(0x7f00000000c0), 0xfa, 0x101000) io_uring_enter(r5, 0x47f6, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): evice [ 1620.344858][T24557] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1620.600612][T15958] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1620.750124][ T5892] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1620.769864][T17798] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1620.793672][T15958] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1620.802766][T15958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.810948][T15958] usb 4-1: Product: syz [ 1620.815119][T15958] usb 4-1: Manufacturer: syz [ 1620.819703][T15958] usb 4-1: SerialNumber: syz [ 1620.827524][T15958] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1620.845848][ T918] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1620.911930][ T5892] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1620.921427][T17798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.927341][ T5892] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1620.937670][T17798] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1620.944276][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1620.957752][T17798] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1620.961269][ T5892] usb 6-1: Product: syz [ 1620.973602][T17798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.974485][ T5892] usb 6-1: Manufacturer: syz [ 1620.987111][ T5892] usb 6-1: SerialNumber: syz [ 1620.995598][T17798] usb 3-1: config 0 descriptor?? [ 1621.002757][T17798] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1621.009359][T17798] dvb-usb: bulk message failed: -22 (3/0) [ 1621.017374][T17798] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1621.026243][T17798] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1621.033380][T17798] usb 3-1: media controller created [ 1621.039833][T17798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.051432][T17798] dvb-usb: bulk message failed: -22 (6/0) [ 1621.057199][T17798] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1621.068115][T17798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input86 [ 1621.080348][T17798] dvb-usb: schedule remote query interval to 150 msecs. [ 1621.087277][T17798] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1621.202519][ T5892] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1621.225746][ T5892] usb 3-1: USB disconnect, device number 100 [ 1621.240823][ T5892] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1621.257192][T17798] usb 4-1: USB disconnect, device number 82 [ 1621.275307][T21064] usb 6-1: USB disconnect, device number 58 [ 1621.282863][T21064] usblp1: removed [ 1621.570804][T13082] usb 5-1: USB disconnect, device number 93 [ 1621.863286][ T918] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1621.882705][ T918] ath9k_htc: Failed to initialize the device [ 1622.060424][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4756'. [ 1622.069413][T17798] usb 4-1: ath9k_htc: USB layer deinitialized [ 1622.079912][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4756'. [ 1622.563409][T13333] rtsx_usb 2-1:6.158: probe with driver rtsx_usb failed with error -71 [ 1622.578430][T13333] usb 2-1: USB disconnect, device number 83 [ 1623.108908][ T30] audit: type=1400 audit(2000000682.090:1682): avc: denied { write } for pid=24593 comm="syz.3.4758" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1623.490144][T13333] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1623.550840][ T30] audit: type=1326 audit(2000000682.500:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1623.707040][T24606] netlink: 'syz.2.4761': attribute type 1 has an invalid length. [ 1623.870575][T24610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1624.219400][T24606] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1624.266633][ T30] audit: type=1326 audit(2000000682.510:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.349890][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4763'. [ 1624.373861][ T30] audit: type=1326 audit(2000000682.510:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.422050][T24616] netlink: 'syz.5.4763': attribute type 10 has an invalid length. [ 1624.429839][T13333] usb 2-1: Using ep0 maxpacket: 16 [ 1624.436626][T13333] usb 2-1: config 6 has an invalid interface number: 133 but max is 1 [ 1624.445096][T13333] usb 2-1: config 6 has an invalid interface number: 114 but max is 1 [ 1624.453417][ T30] audit: type=1326 audit(2000000682.520:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.477034][T13333] usb 2-1: config 6 has no interface number 0 [ 1624.483228][T13333] usb 2-1: config 6 has no interface number 1 [ 1624.490239][T13333] usb 2-1: config 6 interface 133 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1624.501239][ T30] audit: type=1326 audit(2000000682.540:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.530089][T13333] usb 2-1: config 6 interface 133 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 1624.539752][ T30] audit: type=1326 audit(2000000682.540:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.542672][T13333] usb 2-1: config 6 interface 133 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1624.574715][T13333] usb 2-1: config 6 interface 133 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1624.588956][T13333] usb 2-1: config 6 interface 133 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1624.599706][T13333] usb 2-1: config 6 interface 114 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1624.610950][T24616] veth1_macvtap: left promiscuous mode [ 1624.628031][T13333] usb 2-1: config 6 interface 114 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1624.638602][T13333] usb 2-1: config 6 interface 114 altsetting 4 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1624.693617][T24621] loop6: detected capacity change from 0 to 512 [ 1624.703439][T24621] buffer_io_error: 11 callbacks suppressed [ 1624.703452][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1624.774263][ T30] audit: type=1326 audit(2000000682.520:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.797939][ T30] audit: type=1326 audit(2000000682.540:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.824736][ T30] audit: type=1326 audit(2000000682.540:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.853316][ T30] audit: type=1326 audit(2000000682.540:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.876763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.882955][T13333] usb 2-1: config 6 interface 114 altsetting 4 endpoint 0x87 has an invalid bInterval 129, changing to 7 [ 1624.882984][T13333] usb 2-1: config 6 interface 114 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1624.883002][T13333] usb 2-1: config 6 interface 114 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1624.907173][T24623] netlink: 'syz.3.4765': attribute type 10 has an invalid length. [ 1624.915874][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1624.915997][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1624.940608][T13333] usb 2-1: config 6 interface 133 has no altsetting 0 [ 1624.947422][T13333] usb 2-1: config 6 interface 114 has no altsetting 0 [ 1624.949280][ T30] audit: type=1326 audit(2000000682.540:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ac98eb69 code=0x7ffc0000 [ 1624.955088][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1624.977769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1625.035043][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1625.043440][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1625.067631][T24623] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1625.132543][T24630] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 1625.142192][T24630] tipc: Enabled bearer , priority 10 [ 1625.151325][T24628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=24628 comm=syz.2.4766 [ 1625.300965][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1625.312471][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1625.481897][T24621] ldm_validate_partition_table(): Disk read failed. [ 1625.488592][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1625.501086][T24621] Buffer I/O error on dev loop6, logical block 0, async page read [ 1625.509134][T24621] Dev loop6: unable to read RDB block 0 [ 1625.516816][T24621] loop6: unable to read partition table [ 1625.524435][T24621] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 1625.544420][T24622] ldm_validate_partition_table(): Disk read failed. [ 1625.723589][T24622] Dev loop6: unable to read RDB block 0 [ 1625.735628][T24622] loop6: unable to read partition table [ 1625.744447][T24622] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 1626.157169][T13333] usb 2-1: string descriptor 0 read error: -71 [ 1626.163561][T13333] usb 2-1: New USB device found, idVendor=128d, idProduct=0001, bcdDevice=9f.70 [ 1626.172801][T13333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.183872][T13333] usb 2-1: can't set config #6, error -71 [ 1626.194156][T13333] usb 2-1: USB disconnect, device number 84 [ 1626.200498][T13082] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1626.299913][T21064] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1626.329863][T17798] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1626.351798][T13082] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1626.361046][T13082] usb 4-1: config 6 has an invalid interface number: 158 but max is 0 [ 1626.369869][T13082] usb 4-1: config 6 has no interface number 0 [ 1626.380437][T13082] usb 4-1: config 6 interface 158 has no altsetting 0 [ 1626.390190][T13082] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 1626.400467][T13082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.460542][T13082] usb 4-1: Product: syz [ 1626.465010][T13082] usb 4-1: Manufacturer: syz [ 1626.469702][T13082] usb 4-1: SerialNumber: syz [ 1626.482276][T17798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.492686][T17798] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1626.502411][T21064] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1626.512275][T21064] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1626.524000][T21064] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1626.537295][T17798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.550086][T17798] usb 6-1: config 0 descriptor?? [ 1626.557936][T21064] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1626.567748][T21064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1626.577598][T17798] pwc: Askey VC010 type 2 USB webcam detected. [ 1626.584085][T21064] usb 3-1: Product: syz [ 1626.588325][T21064] usb 3-1: Manufacturer: syz [ 1626.593476][T21064] usb 3-1: SerialNumber: syz [ 1626.810089][T21064] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1626.973688][T17798] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1626.982409][T17798] pwc: recv_control_msg error -32 req 02 val 2700 [ 1626.989557][T17798] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1626.996598][T17798] pwc: recv_control_msg error -32 req 04 val 1000 [ 1627.003951][T17798] pwc: recv_control_msg error -32 req 04 val 1300 [ 1627.014548][T17798] pwc: recv_control_msg error -32 req 04 val 1400 [ 1627.046106][T17798] pwc: recv_control_msg error -32 req 02 val 2000 [ 1627.060624][T17798] pwc: recv_control_msg error -32 req 02 val 2100 [ 1627.236563][T13333] usb 3-1: USB disconnect, device number 101 [ 1627.250323][T13333] usblp0: removed [ 1627.290413][T17798] pwc: recv_control_msg error -71 req 02 val 2500 [ 1627.297599][T17798] pwc: recv_control_msg error -71 req 02 val 2400 [ 1627.307433][T17798] pwc: recv_control_msg error -71 req 02 val 2600 [ 1627.320518][T17798] pwc: recv_control_msg error -71 req 02 val 2900 [ 1627.331080][T17798] pwc: recv_control_msg error -71 req 02 val 2800 [ 1627.387398][T17798] pwc: recv_control_msg error -71 req 04 val 1100 [ 1627.403239][T17798] pwc: recv_control_msg error -71 req 04 val 1200 [ 1627.688230][T17798] pwc: Registered as video103. [ 1627.694993][T17798] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input87 [ 1627.708996][T17798] usb 6-1: USB disconnect, device number 59 [ 1628.734688][T24687] bond0: entered promiscuous mode [ 1628.740701][T24687] bond_slave_0: entered promiscuous mode [ 1628.747420][T24687] bond_slave_1: entered promiscuous mode [ 1628.756109][T24687] bond0: left promiscuous mode [ 1628.760919][T24687] bond_slave_0: left promiscuous mode [ 1628.766495][T24687] bond_slave_1: left promiscuous mode [ 1628.780850][T24688] netlink: 'syz.2.4782': attribute type 5 has an invalid length. [ 1628.825280][T24688] ip6erspan0: entered promiscuous mode [ 1629.104166][T13082] rtsx_usb 4-1:6.158: probe with driver rtsx_usb failed with error -71 [ 1629.115875][T13082] usb 4-1: USB disconnect, device number 83 [ 1629.919944][ T918] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1630.517389][ T918] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1630.629471][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.648954][ T918] usb 2-1: config 0 descriptor?? [ 1630.879438][T24708] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1630.887089][T24708] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1630.896283][T24708] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1631.190043][T13333] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1631.395759][ T918] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1631.428504][T13333] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1631.471370][T13333] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1631.482384][T13333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1631.510030][T13333] usb 6-1: Product: syz [ 1631.523470][T13333] usb 6-1: Manufacturer: syz [ 1631.528205][T13333] usb 6-1: SerialNumber: syz [ 1631.669246][ T918] usb 2-1: USB disconnect, device number 85 [ 1631.790540][T13333] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1631.860230][T13333] usb 6-1: USB disconnect, device number 60 [ 1631.879350][T13333] usblp0: removed [ 1632.549913][T13333] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1632.759849][T13333] usb 3-1: device descriptor read/64, error -71 [ 1633.173309][T14324] Bluetooth: hci4: command 0x0c1a tx timeout [ 1633.179387][T14324] Bluetooth: hci6: command 0x0c1a tx timeout [ 1633.179439][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 1633.439870][T13333] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1633.582400][T13333] usb 3-1: device descriptor read/64, error -71 [ 1633.700409][T13333] usb usb3-port1: attempt power cycle [ 1633.897216][T24754] netlink: 'syz.1.4804': attribute type 1 has an invalid length. [ 1634.094249][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 1634.242369][T24754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1634.429924][T13333] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1634.532611][T24759] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1634.780966][T13333] usb 3-1: device descriptor read/8, error -71 [ 1635.899974][T24774] dlm: Unknown command passed to DLM device : 166 [ 1635.899974][T24774] [ 1636.113815][T24779] netlink: 'syz.1.4810': attribute type 10 has an invalid length. [ 1636.141476][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1636.141487][ T30] audit: type=1400 audit(2000000695.130:1730): avc: denied { ioctl } for pid=24776 comm="syz.2.4809" path="socket:[88234]" dev="sockfs" ino=88234 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1636.232232][T24779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4810'. [ 1636.244609][T24779] team0: entered promiscuous mode [ 1636.249993][T24779] team_slave_0: entered promiscuous mode [ 1636.258846][T24779] team_slave_1: entered promiscuous mode [ 1636.268910][T24779] team0: entered allmulticast mode [ 1636.274445][T24779] team_slave_0: entered allmulticast mode [ 1636.280504][T24779] team_slave_1: entered allmulticast mode [ 1636.295116][T24779] bridge0: port 3(team0) entered blocking state [ 1636.302822][T24779] bridge0: port 3(team0) entered disabled state [ 1636.331545][T24779] bridge0: port 3(team0) entered blocking state [ 1636.338359][T24779] bridge0: port 3(team0) entered forwarding state [ 1636.685632][ T8117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.701335][ T8117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.389394][T24806] netlink: 'syz.4.4818': attribute type 1 has an invalid length. [ 1637.859151][T24806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1638.023457][T24805] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1638.346956][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1642.288158][ T30] audit: type=1800 audit(2000000700.850:1731): pid=24846 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4830" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1643.802331][T24859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1644.023690][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4833'. [ 1644.349654][T24873] ubi31: detaching mtd0 [ 1644.444536][T24873] ubi31: mtd0 is detached [ 1644.874618][T24880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4838'. [ 1645.385748][T24884] binder: 24883:24884 unknown command 0 [ 1645.392518][T24884] binder: 24883:24884 ioctl c0306201 200000000080 returned -22 [ 1645.413575][T24884] binder: 24883:24884 ioctl c0306201 200000000280 returned -11 [ 1645.423124][ T30] audit: type=1400 audit(2000000704.400:1732): avc: denied { call } for pid=24883 comm="syz.1.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1645.503217][T24884] binder: 24883:24884 ioctl ca289435 200000000740 returned -22 [ 1646.090385][T24894] netlink: 37 bytes leftover after parsing attributes in process `syz.2.4844'. [ 1646.299953][T21064] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1646.571108][T24898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4845'. [ 1646.629867][T21064] usb 6-1: Using ep0 maxpacket: 8 [ 1646.650143][ T30] audit: type=1400 audit(2000000705.630:1733): avc: denied { connect } for pid=24906 comm="syz.3.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1646.691781][T21064] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1646.870520][T21064] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1647.023257][T21064] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1647.069479][T21064] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1647.091628][T21064] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1647.128023][T21064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.415307][T17798] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1647.435346][T21064] usb 6-1: GET_CAPABILITIES returned 0 [ 1647.441255][T21064] usbtmc 6-1:16.0: can't read capabilities [ 1647.692877][T17798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1647.707632][T17798] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1647.735619][T17798] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1647.768268][T17798] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1647.796930][T17798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1647.937015][T17798] usb 4-1: Product: syz [ 1647.937035][T17798] usb 4-1: Manufacturer: syz [ 1647.937050][T17798] usb 4-1: SerialNumber: syz [ 1648.467751][T17798] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1648.803516][T17798] usb 4-1: USB disconnect, device number 84 [ 1648.812117][T17798] usblp1: removed [ 1649.501895][T17798] usb 6-1: USB disconnect, device number 61 [ 1650.415640][T24944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4859'. [ 1650.434169][T24944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4859'. [ 1650.489995][ T6597] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1650.497731][T17798] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1650.500923][T22825] Bluetooth: hci4: command 0x0c1a tx timeout [ 1650.630014][T17798] usb 4-1: device descriptor read/64, error -71 [ 1650.672779][ T6597] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.700001][ T6597] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1650.712994][ T6597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.733363][ T6597] usb 3-1: config 0 descriptor?? [ 1650.741636][ T6597] pwc: Askey VC010 type 2 USB webcam detected. [ 1650.759834][ T918] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1650.883298][T17798] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1650.924636][ T918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.954439][ T918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1650.964778][ T918] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1650.974464][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.005422][ T918] usb 2-1: config 0 descriptor?? [ 1651.020089][T17798] usb 4-1: device descriptor read/64, error -71 [ 1651.028643][ T918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1651.039829][ T918] dvb-usb: bulk message failed: -22 (3/0) [ 1651.113957][ T918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1651.130452][ T918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1651.153151][ T918] usb 2-1: media controller created [ 1651.173838][ T918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1651.197748][ T6597] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1651.198345][ T918] dvb-usb: bulk message failed: -22 (6/0) [ 1651.204949][T17798] usb usb4-port1: attempt power cycle [ 1651.222203][ T918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1651.222227][ T30] audit: type=1400 audit(2000000710.210:1734): avc: denied { bind } for pid=24947 comm="syz.5.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1651.222290][ T6597] pwc: recv_control_msg error -32 req 02 val 2700 [ 1651.270179][ T6597] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1651.279891][ T6597] pwc: recv_control_msg error -32 req 04 val 1000 [ 1651.280927][ T918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input89 [ 1651.297934][ T6597] pwc: recv_control_msg error -32 req 04 val 1300 [ 1651.305074][T24946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.315996][ T6597] pwc: recv_control_msg error -32 req 04 val 1400 [ 1651.317576][ T918] dvb-usb: schedule remote query interval to 150 msecs. [ 1651.331696][ T6597] pwc: recv_control_msg error -32 req 02 val 2000 [ 1651.333321][T24946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.346277][ T918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1651.349862][ T6597] pwc: recv_control_msg error -32 req 02 val 2100 [ 1651.426999][T13082] usb 2-1: USB disconnect, device number 86 [ 1651.445887][T13082] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1651.571421][ T6597] pwc: recv_control_msg error -71 req 02 val 2500 [ 1651.578116][ T6597] pwc: recv_control_msg error -71 req 02 val 2400 [ 1651.584811][T17798] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1651.593171][ T6597] pwc: recv_control_msg error -71 req 02 val 2600 [ 1651.600590][ T6597] pwc: recv_control_msg error -71 req 02 val 2900 [ 1651.607382][ T6597] pwc: recv_control_msg error -71 req 02 val 2800 [ 1651.614951][ T6597] pwc: recv_control_msg error -71 req 04 val 1100 [ 1651.621996][T17798] usb 4-1: device descriptor read/8, error -71 [ 1651.628334][ T6597] pwc: recv_control_msg error -71 req 04 val 1200 [ 1651.637490][ T6597] pwc: Registered as video103. [ 1651.648450][ T6597] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input90 [ 1651.660650][ T6597] usb 3-1: USB disconnect, device number 106 [ 1651.751727][ T30] audit: type=1800 audit(2000000710.730:1735): pid=24954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4863" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1651.869926][T17798] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1651.890888][T17798] usb 4-1: device descriptor read/8, error -71 [ 1652.000187][T17798] usb usb4-port1: unable to enumerate USB device [ 1652.115738][T24959] vlan2: entered promiscuous mode [ 1652.123050][T24959] vlan2: entered allmulticast mode [ 1652.237878][T24966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1652.339915][T17798] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1652.526110][T17798] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1652.578896][T17798] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1652.687242][T17798] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1652.714008][T17798] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1652.714085][T24980] netlink: 37 bytes leftover after parsing attributes in process `syz.2.4873'. [ 1652.728822][T17798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1653.690950][T17798] usb 6-1: Product: syz [ 1653.695130][T17798] usb 6-1: Manufacturer: syz [ 1653.699713][T17798] usb 6-1: SerialNumber: syz [ 1654.268468][T17798] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1654.633122][T17798] usb 6-1: USB disconnect, device number 62 [ 1654.759399][T17798] usblp0: removed [ 1654.782124][ T30] audit: type=1326 audit(2000000713.760:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24970 comm="syz.1.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b3b8eb69 code=0x7fc00000 [ 1655.099949][T25000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1655.129116][T25000] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1655.159057][T25000] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1656.638323][T25020] netlink: set zone limit has 4 unknown bytes [ 1657.147192][ T5850] Bluetooth: hci6: command 0x0c1a tx timeout [ 1657.153337][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 1657.243466][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 1657.513452][T25028] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1657.519959][T25028] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1657.547211][T25028] vhci_hcd vhci_hcd.0: Device attached [ 1657.624421][T25032] vhci_hcd: connection closed [ 1657.626081][ T49] vhci_hcd: stop threads [ 1657.653456][ T49] vhci_hcd: release socket [ 1657.657975][ T49] vhci_hcd: disconnect device [ 1657.720107][T15958] vhci_hcd: vhci_device speed not set [ 1658.031583][T13333] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1658.314277][T13333] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1658.336251][T13333] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1658.346213][T13333] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1658.536761][T13333] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1658.561167][T13333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1658.573007][T13333] usb 3-1: Product: syz [ 1659.011420][T13333] usb 3-1: Manufacturer: syz [ 1659.016216][T13333] usb 3-1: SerialNumber: syz [ 1659.441133][T13333] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1659.485437][T25057] netlink: 'syz.1.4894': attribute type 1 has an invalid length. [ 1659.705643][T25057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1659.763871][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'. [ 1659.955155][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4895'. [ 1659.978368][T25060] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1660.164917][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4896'. [ 1660.173966][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4896'. [ 1660.190097][T13082] usb 3-1: USB disconnect, device number 107 [ 1660.365791][T13082] usblp0: removed [ 1660.477460][ T30] audit: type=1400 audit(2000000719.460:1737): avc: denied { ioctl } for pid=25071 comm="syz.1.4898" path="socket:[88708]" dev="sockfs" ino=88708 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1660.527523][T25074] kvm: user requested TSC rate below hardware speed [ 1663.091976][T25100] netlink: 'syz.4.4906': attribute type 1 has an invalid length. [ 1663.267389][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1663.731291][T25100] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1663.902145][T25111] netlink: 'syz.2.4908': attribute type 1 has an invalid length. [ 1664.091834][T25116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4908'. [ 1664.626246][T25111] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1665.384263][T25126] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 1665.430158][T13082] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1665.444740][T25130] mkiss: ax0: crc mode is auto. [ 1665.532580][T25132] FAULT_INJECTION: forcing a failure. [ 1665.532580][T25132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.545947][T25132] CPU: 1 UID: 0 PID: 25132 Comm: syz.4.4914 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1665.545964][T25132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1665.545971][T25132] Call Trace: [ 1665.545975][T25132] [ 1665.545980][T25132] dump_stack_lvl+0x16c/0x1f0 [ 1665.545999][T25132] should_fail_ex+0x512/0x640 [ 1665.546012][T25132] _copy_to_user+0x32/0xd0 [ 1665.546025][T25132] simple_read_from_buffer+0xcb/0x170 [ 1665.546037][T25132] proc_fail_nth_read+0x197/0x240 [ 1665.546049][T25132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1665.546062][T25132] ? rw_verify_area+0xcf/0x6c0 [ 1665.546078][T25132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1665.546089][T25132] vfs_read+0x1e4/0xc60 [ 1665.546101][T25132] ? __pfx___mutex_lock+0x10/0x10 [ 1665.546118][T25132] ? __pfx_vfs_read+0x10/0x10 [ 1665.546131][T25132] ? __fget_files+0x20e/0x3c0 [ 1665.546147][T25132] ksys_read+0x12a/0x250 [ 1665.546158][T25132] ? __pfx_ksys_read+0x10/0x10 [ 1665.546172][T25132] do_syscall_64+0xcd/0x4c0 [ 1665.546189][T25132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.546199][T25132] RIP: 0033:0x7f5a16b8d57c [ 1665.546208][T25132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1665.546219][T25132] RSP: 002b:00007f5a179f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1665.546229][T25132] RAX: ffffffffffffffda RBX: 00007f5a16db5fa0 RCX: 00007f5a16b8d57c [ 1665.546235][T25132] RDX: 000000000000000f RSI: 00007f5a179f80a0 RDI: 0000000000000003 [ 1665.546242][T25132] RBP: 00007f5a179f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1665.546247][T25132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.546254][T25132] R13: 0000000000000000 R14: 00007f5a16db5fa0 R15: 00007ffc35925518 [ 1665.546267][T25132] [ 1665.630065][ T918] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1665.631143][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.743497][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.849475][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.876143][T13082] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.890541][T13082] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1665.899685][T13082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.907745][T13082] usb 2-1: Product: syz [ 1665.911918][T13082] usb 2-1: Manufacturer: syz [ 1665.916511][T13082] usb 2-1: SerialNumber: syz [ 1666.090882][ T918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1666.113912][ T918] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1666.206550][ T918] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1666.273292][ T918] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1666.295708][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1666.322169][T25138] netlink: 'syz.4.4916': attribute type 1 has an invalid length. [ 1666.352023][ T918] usb 3-1: Product: syz [ 1666.367569][ T918] usb 3-1: Manufacturer: syz [ 1666.379006][ T918] usb 3-1: SerialNumber: syz [ 1666.461442][T25138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1666.618067][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4916'. [ 1666.772747][ T918] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1666.831289][T25143] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1667.088706][T15958] usb 3-1: USB disconnect, device number 108 [ 1667.107949][T13082] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1667.114432][T13082] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1667.172474][T15958] usblp0: removed [ 1667.238352][T13082] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1667.803411][T13082] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 1667.817784][T13082] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1667.832961][T13082] usb 2-1: USB disconnect, device number 87 [ 1667.840950][T13082] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1668.407031][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.903933][T25167] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1670.910441][T25167] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1670.930276][T25167] vhci_hcd vhci_hcd.0: Device attached [ 1671.099399][T25173] vhci_hcd: connection closed [ 1671.099538][T24307] vhci_hcd: stop threads [ 1671.108696][T24307] vhci_hcd: release socket [ 1671.113262][T24307] vhci_hcd: disconnect device [ 1671.121219][T15958] vhci_hcd: vhci_device speed not set [ 1671.440104][T13082] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1671.642059][T13082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1671.652631][T13082] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1671.663630][T13082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1671.674166][T13082] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1671.686887][T13082] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1671.708489][T13082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.717184][T13082] usb 6-1: Product: syz [ 1671.721840][T13082] usb 6-1: Manufacturer: syz [ 1671.726446][T13082] usb 6-1: SerialNumber: syz [ 1671.735987][T13082] usb 6-1: config 0 descriptor?? [ 1671.745298][T13082] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1671.770317][T17798] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1671.931250][T17798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1671.951185][T17798] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1672.454364][T17798] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1672.506966][T17798] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1672.525064][T17798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1672.533498][T17798] usb 4-1: Product: syz [ 1672.537740][T17798] usb 4-1: Manufacturer: syz [ 1672.688283][T17798] usb 4-1: SerialNumber: syz [ 1673.013052][T17798] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1673.559562][T25212] netlink: 'syz.1.4935': attribute type 12 has an invalid length. [ 1673.567713][ T30] audit: type=1800 audit(2000000732.490:1738): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4934" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1673.569291][T17798] usb 4-1: USB disconnect, device number 89 [ 1673.588305][T25212] netlink: 'syz.1.4935': attribute type 29 has an invalid length. [ 1673.622613][T25212] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4935'. [ 1673.644453][T25212] netlink: 'syz.1.4935': attribute type 3 has an invalid length. [ 1673.647766][T17798] usblp0: removed [ 1673.654753][T25212] netlink: 'syz.1.4935': attribute type 2 has an invalid length. [ 1673.664260][T25212] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4935'. [ 1673.789133][ T30] audit: type=1400 audit(2000000732.770:1739): avc: denied { listen } for pid=25216 comm="syz.2.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1673.816405][T25217] delete_channel: no stack [ 1673.931704][T15958] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1674.191009][T15958] usb 2-1: Using ep0 maxpacket: 8 [ 1674.222338][T15958] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1674.234212][T15958] usb 2-1: config 0 has no interface number 0 [ 1674.240379][T15958] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1674.254431][T13082] scsi host1: usb-storage 6-1:0.0 [ 1674.254454][T15958] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1674.533184][T13082] usb 6-1: USB disconnect, device number 63 [ 1674.539615][T15958] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1674.563867][T15958] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1674.703051][T15958] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1674.712511][T15958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.721142][T15958] usb 2-1: Product: syz [ 1674.733191][T15958] usb 2-1: Manufacturer: syz [ 1674.738232][T15958] usb 2-1: SerialNumber: syz [ 1674.750852][T15958] usb 2-1: config 0 descriptor?? [ 1674.762686][T25230] i2c i2c-0: Invalid block write size 34 [ 1674.821333][T25228] netlink: 'syz.5.4939': attribute type 1 has an invalid length. [ 1674.986046][T25234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4939'. [ 1675.083461][T15958] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1675.146531][T25228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1675.449313][T15958] usb 2-1: USB disconnect, device number 88 [ 1675.465744][T25233] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1675.500398][ T30] audit: type=1800 audit(2000000734.480:1740): pid=25242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4942" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1675.969596][T25251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4943'. [ 1677.191838][T25265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4947'. [ 1677.200879][T25265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4947'. [ 1677.282892][T13082] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1677.444274][T25269] binder: 25268:25269 ioctl 5600 200000000700 returned -22 [ 1677.576878][T13082] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1677.599632][T13082] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1678.098117][T13082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1678.106711][T13082] usb 3-1: Product: syz [ 1678.111205][T13082] usb 3-1: Manufacturer: syz [ 1678.116013][T13082] usb 3-1: SerialNumber: syz [ 1678.209988][T13333] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1678.573731][T13082] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1678.609931][T13333] usb 5-1: device descriptor read/64, error -71 [ 1678.679502][T15958] usb 3-1: USB disconnect, device number 109 [ 1678.785337][T15958] usblp0: removed [ 1678.859960][T13333] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1679.093700][ T30] audit: type=1800 audit(2000000738.080:1741): pid=25270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4949" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1679.199943][T13333] usb 5-1: device descriptor read/64, error -71 [ 1679.380433][T13333] usb usb5-port1: attempt power cycle [ 1679.505354][T25293] netlink: 'syz.3.4955': attribute type 1 has an invalid length. [ 1679.831708][T25299] syz.2.4956 (25299): /proc/25297/oom_adj is deprecated, please use /proc/25297/oom_score_adj instead. [ 1679.865249][T13333] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1679.970069][T13333] usb 5-1: device descriptor read/8, error -71 [ 1680.110365][T25293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1680.239819][T25293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4955'. [ 1680.497559][ T30] audit: type=1400 audit(2000000738.890:1742): avc: denied { getopt } for pid=25297 comm="syz.2.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1680.601758][T25295] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1681.013247][T25313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4960'. [ 1681.022261][T17798] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1681.212331][T17798] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1681.229438][T17798] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1681.239338][T17798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1681.254986][T17798] usb 3-1: Product: syz [ 1681.259280][T17798] usb 3-1: Manufacturer: syz [ 1681.264587][T17798] usb 3-1: SerialNumber: syz [ 1682.251937][T17798] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1682.712537][T17798] usb 3-1: USB disconnect, device number 110 [ 1682.720294][T17798] usblp0: removed [ 1683.390094][T25358] netlink: 'syz.4.4971': attribute type 10 has an invalid length. [ 1683.399405][T25358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4971'. [ 1683.416875][T25355] netlink: 'syz.2.4972': attribute type 10 has an invalid length. [ 1683.426538][T25355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4972'. [ 1683.435875][T25358] team0: entered promiscuous mode [ 1683.448128][T25358] team_slave_0: entered promiscuous mode [ 1683.462247][T25358] team_slave_1: entered promiscuous mode [ 1683.469021][T25358] team0: entered allmulticast mode [ 1683.475086][T25358] team_slave_0: entered allmulticast mode [ 1683.481022][T25358] team_slave_1: entered allmulticast mode [ 1683.494282][T25358] bridge0: port 3(team0) entered blocking state [ 1683.502601][T25358] bridge0: port 3(team0) entered disabled state [ 1683.528478][T25358] bridge0: port 3(team0) entered blocking state [ 1683.534960][T25358] bridge0: port 3(team0) entered forwarding state [ 1683.758581][T25355] team0: entered promiscuous mode [ 1683.763815][T25355] team_slave_0: entered promiscuous mode [ 1683.770756][T25355] team_slave_1: entered promiscuous mode [ 1683.777555][T25355] team0: entered allmulticast mode [ 1683.782796][T25355] team_slave_0: entered allmulticast mode [ 1683.788545][T25355] team_slave_1: entered allmulticast mode [ 1683.802594][T25355] bridge0: port 3(team0) entered blocking state [ 1683.809273][T25355] bridge0: port 3(team0) entered disabled state [ 1683.834604][T25355] bridge0: port 3(team0) entered blocking state [ 1683.841150][T25355] bridge0: port 3(team0) entered forwarding state [ 1686.063792][T25350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1686.228847][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 1686.280114][T25350] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1686.286274][T25350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1687.692680][T25382] netlink: 'syz.4.4978': attribute type 10 has an invalid length. [ 1687.709134][T25380] syzkaller0: entered promiscuous mode [ 1687.715403][T25380] syzkaller0: entered allmulticast mode [ 1687.721781][T25382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4978'. [ 1688.121759][ T30] audit: type=1400 audit(2000000747.110:1743): avc: denied { remount } for pid=25387 comm="syz.3.4980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1688.339853][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 1688.345977][T22825] Bluetooth: hci6: command 0x0c1a tx timeout [ 1689.065363][ T30] audit: type=1400 audit(2000000747.180:1744): avc: denied { override_creds } for pid=25387 comm="syz.3.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1690.450466][ T30] audit: type=1400 audit(2000000749.430:1745): avc: denied { ioctl } for pid=25412 comm="syz.4.4987" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1693.898835][T25436] netlink: 'syz.3.4993': attribute type 10 has an invalid length. [ 1693.906853][T25436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4993'. [ 1695.777037][T25421] netlink: 'syz.4.4989': attribute type 7 has an invalid length. [ 1695.864275][T25436] team0: entered promiscuous mode [ 1695.869313][T25436] team_slave_0: entered promiscuous mode [ 1695.941320][T25436] team_slave_1: entered promiscuous mode [ 1695.954773][T25436] team0: entered allmulticast mode [ 1695.966434][T25436] team_slave_0: entered allmulticast mode [ 1695.986419][T25436] team_slave_1: entered allmulticast mode [ 1695.997029][T25436] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1696.279904][T17798] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1696.423864][ T30] audit: type=1800 audit(2000000755.410:1746): pid=25452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4998" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1696.951694][T17798] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1698.632763][T17798] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1698.648049][T17798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1698.668654][T17798] usb 3-1: Product: syz [ 1698.679248][T17798] usb 3-1: Manufacturer: syz [ 1698.689353][T17798] usb 3-1: SerialNumber: syz [ 1699.333421][T17798] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1699.349997][T17798] usb 3-1: USB disconnect, device number 111 [ 1699.364474][T17798] usblp0: removed [ 1699.416419][T25466] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1699.423007][T25466] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1699.435669][T25466] vhci_hcd vhci_hcd.0: Device attached [ 1699.722547][T13333] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 1699.834034][T25469] vhci_hcd: connection reset by peer [ 1699.846079][ T8117] vhci_hcd: stop threads [ 1699.854962][ T8117] vhci_hcd: release socket [ 1699.912851][ T8117] vhci_hcd: disconnect device [ 1699.964310][T25478] fuse: Bad value for 'fd' [ 1700.719080][T25490] netlink: 'syz.1.5008': attribute type 1 has an invalid length. [ 1700.905430][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5008'. [ 1701.461139][T25490] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1702.176038][T25502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1702.195707][T25502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1702.626971][T25509] netlink: 'syz.2.5012': attribute type 1 has an invalid length. [ 1702.793093][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5012'. [ 1703.221257][T25509] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1703.540173][T21064] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1703.941000][T15958] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1704.126204][T21064] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1704.692568][T21064] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1704.708098][T21064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1704.740862][T15958] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1704.753518][T15958] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1704.756389][T21064] usb 2-1: Product: syz [ 1704.766181][T15958] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1704.768513][T21064] usb 2-1: Manufacturer: syz [ 1704.783365][T21064] usb 2-1: SerialNumber: syz [ 1704.787726][T15958] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1704.858914][T15958] usb 5-1: Product: syz [ 1704.863398][T15958] usb 5-1: Manufacturer: syz [ 1704.873862][T15958] usb 5-1: SerialNumber: syz [ 1704.881306][T15958] usb 5-1: config 0 descriptor?? [ 1704.886998][T25534] netlink: 'syz.3.5018': attribute type 7 has an invalid length. [ 1704.930672][T13333] vhci_hcd: vhci_device speed not set [ 1704.985235][T15958] usb 5-1: selecting invalid altsetting 0 [ 1705.226128][T21064] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1705.267642][T25539] netlink: 'syz.2.5019': attribute type 7 has an invalid length. [ 1706.887774][T13333] usb 2-1: USB disconnect, device number 89 [ 1706.896302][T13333] usblp0: removed [ 1707.684666][T25570] FAULT_INJECTION: forcing a failure. [ 1707.684666][T25570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1707.709873][T25570] CPU: 1 UID: 0 PID: 25570 Comm: syz.1.5026 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1707.709900][T25570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1707.709911][T25570] Call Trace: [ 1707.709917][T25570] [ 1707.709924][T25570] dump_stack_lvl+0x16c/0x1f0 [ 1707.709956][T25570] should_fail_ex+0x512/0x640 [ 1707.709976][T25570] should_fail_alloc_page+0xe7/0x130 [ 1707.709999][T25570] prepare_alloc_pages+0x3c2/0x610 [ 1707.710027][T25570] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1707.710044][T25570] ? stack_depot_save_flags+0x29/0x9c0 [ 1707.710079][T25570] ? __lock_acquire+0x62e/0x1ce0 [ 1707.710109][T25570] ? __vmf_anon_prepare+0x11c/0x240 [ 1707.710129][T25570] ? do_pte_missing+0x10bd/0x3ba0 [ 1707.710152][T25570] ? __handle_mm_fault+0x152a/0x2a50 [ 1707.710177][T25570] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1707.710196][T25570] ? __lock_acquire+0x62e/0x1ce0 [ 1707.710227][T25570] ? __lock_acquire+0xb97/0x1ce0 [ 1707.710256][T25570] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1707.710277][T25570] ? policy_nodemask+0xea/0x4e0 [ 1707.710300][T25570] alloc_pages_mpol+0x1fb/0x550 [ 1707.710320][T25570] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1707.710341][T25570] ? __anon_vma_prepare+0x2db/0x5e0 [ 1707.710372][T25570] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1707.710395][T25570] vma_alloc_folio_noprof+0xed/0x1e0 [ 1707.710420][T25570] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1707.710442][T25570] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1707.710476][T25570] do_pte_missing+0x2230/0x3ba0 [ 1707.710507][T25570] ? __pmd_alloc+0x3fb/0x930 [ 1707.710532][T25570] __handle_mm_fault+0x152a/0x2a50 [ 1707.710562][T25570] ? mt_find+0x3ef/0xa30 [ 1707.710580][T25570] ? __pfx___handle_mm_fault+0x10/0x10 [ 1707.710603][T25570] ? __pfx_mt_find+0x10/0x10 [ 1707.710633][T25570] ? find_vma+0xbf/0x140 [ 1707.710652][T25570] ? __pfx_find_vma+0x10/0x10 [ 1707.710674][T25570] handle_mm_fault+0x589/0xd10 [ 1707.710701][T25570] ? trace_raw_output_exceptions+0x121/0x150 [ 1707.710731][T25570] do_user_addr_fault+0x7a6/0x1370 [ 1707.710751][T25570] ? rcu_is_watching+0x12/0xc0 [ 1707.710776][T25570] exc_page_fault+0x5c/0xb0 [ 1707.710801][T25570] asm_exc_page_fault+0x26/0x30 [ 1707.710819][T25570] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1707.710840][T25570] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1707.710856][T25570] RSP: 0018:ffffc900044bfe48 EFLAGS: 00050216 [ 1707.710870][T25570] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000020 [ 1707.710881][T25570] RDX: fffff52000897fd9 RSI: ffffc900044bfea8 RDI: 0000200000000000 [ 1707.710892][T25570] RBP: 0000200000000000 R08: 0000000000000000 R09: fffff52000897fd8 [ 1707.710903][T25570] R10: ffffc900044bfec7 R11: 0000000000000000 R12: ffffc900044bfea8 [ 1707.710914][T25570] R13: 0000200000000020 R14: 00007ffffffff000 R15: 0000000000000000 [ 1707.710942][T25570] _copy_to_user+0xbb/0xd0 [ 1707.710965][T25570] __x64_sys_times+0xce/0x180 [ 1707.710991][T25570] ? __pfx___x64_sys_times+0x10/0x10 [ 1707.711014][T25570] ? __pfx_ksys_write+0x10/0x10 [ 1707.711036][T25570] ? rcu_is_watching+0x12/0xc0 [ 1707.711061][T25570] ? do_syscall_64+0x91/0x4c0 [ 1707.711089][T25570] do_syscall_64+0xcd/0x4c0 [ 1707.711116][T25570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.711133][T25570] RIP: 0033:0x7f28b3b8eb69 [ 1707.711146][T25570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1707.711162][T25570] RSP: 002b:00007f28b4984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000064 [ 1707.711176][T25570] RAX: ffffffffffffffda RBX: 00007f28b3db5fa0 RCX: 00007f28b3b8eb69 [ 1707.711187][T25570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1707.711197][T25570] RBP: 00007f28b4984090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.711207][T25570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.711217][T25570] R13: 0000000000000001 R14: 00007f28b3db5fa0 R15: 00007ffcf8d51a08 [ 1707.711241][T25570] [ 1708.182878][T15958] usb 5-1: USB disconnect, device number 98 [ 1709.840111][T15958] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1709.924507][T25590] netlink: 'syz.3.5031': attribute type 7 has an invalid length. [ 1710.056401][T15958] usb 5-1: Using ep0 maxpacket: 8 [ 1710.323427][T15958] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1710.352692][T15958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.406321][T15958] usb 5-1: config 0 descriptor?? [ 1711.406613][T25603] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1711.413236][T25603] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1711.533292][T25603] vhci_hcd vhci_hcd.0: Device attached [ 1711.812383][T25610] vhci_hcd: connection closed [ 1711.812765][ T1092] vhci_hcd: stop threads [ 1711.832684][ T1092] vhci_hcd: release socket [ 1711.837377][ T1092] vhci_hcd: disconnect device [ 1711.869835][ T918] vhci_hcd: vhci_device speed not set [ 1712.018948][T25601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5036'. [ 1712.028063][T25601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5036'. [ 1712.942614][T25625] netlink: 'syz.1.5040': attribute type 1 has an invalid length. [ 1712.953137][T15958] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1713.008704][T15958] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1713.101338][T15958] usb 5-1: USB disconnect, device number 99 [ 1713.203424][T25625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1713.312389][T25629] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1713.479923][ T918] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1713.704262][ T918] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1713.726658][ T918] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1713.741050][T25637] netlink: 'syz.3.5044': attribute type 7 has an invalid length. [ 1713.751728][T25641] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1713.771702][T25641] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 1713.783890][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1713.798132][ T918] usb 3-1: Product: syz [ 1713.805651][ T918] usb 3-1: Manufacturer: syz [ 1713.819871][ T918] usb 3-1: SerialNumber: syz [ 1713.926046][T25644] netlink: 'syz.3.5046': attribute type 11 has an invalid length. [ 1714.665683][ T918] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1714.852566][T25650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5045'. [ 1714.861729][T25650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5045'. [ 1716.916606][T15958] IPVS: starting estimator thread 0... [ 1717.029924][T25647] IPVS: using max 61 ests per chain, 146400 per kthread [ 1717.068368][T15958] usb 3-1: USB disconnect, device number 112 [ 1717.350961][T15958] usblp0: removed [ 1718.900555][T25690] netlink: 'syz.1.5055': attribute type 1 has an invalid length. [ 1719.695978][T25690] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1719.994082][T25698] netlink: 'syz.4.5059': attribute type 1 has an invalid length. [ 1720.179260][T25701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5059'. [ 1720.862718][T25698] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1720.863495][ T30] audit: type=1400 audit(2000000779.840:1747): avc: denied { setattr } for pid=25707 comm="syz.3.5061" name="NETLINK" dev="sockfs" ino=91831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1721.628808][ T30] audit: type=1400 audit(2000000780.610:1748): avc: denied { write } for pid=25705 comm="syz.5.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1721.849888][ T6597] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1722.039036][ T6597] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1722.128241][T25678] openvswitch: netlink: IP tunnel dst address not specified [ 1722.136061][T25722] wireguard0: entered promiscuous mode [ 1722.145587][ T6597] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1722.241212][T25722] wireguard0: entered allmulticast mode [ 1722.249018][ T6597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1722.278039][ T6597] usb 2-1: Product: syz [ 1722.284579][ T6597] usb 2-1: Manufacturer: syz [ 1722.519376][ T6597] usb 2-1: SerialNumber: syz [ 1722.941071][ T6597] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1723.672954][T24563] usb 2-1: USB disconnect, device number 90 [ 1723.750366][T24563] usblp0: removed [ 1724.832529][ T30] audit: type=1400 audit(2000000783.820:1749): avc: denied { write } for pid=918 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91046 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1726.456824][T25779] netlink: 'syz.5.5078': attribute type 10 has an invalid length. [ 1726.464731][T25779] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5078'. [ 1726.473722][T25779] team0: entered promiscuous mode [ 1726.478765][T25779] team_slave_0: entered promiscuous mode [ 1726.484617][T25779] team_slave_1: entered promiscuous mode [ 1726.491898][T25779] team0: entered allmulticast mode [ 1726.511573][T25779] team_slave_1: entered allmulticast mode [ 1726.530292][T25779] bridge0: port 3(team0) entered blocking state [ 1726.542816][T25779] bridge0: port 3(team0) entered disabled state [ 1726.556986][T25779] bridge0: port 3(team0) entered blocking state [ 1726.563295][T25779] bridge0: port 3(team0) entered forwarding state [ 1727.293091][T25787] netlink: 'syz.4.5081': attribute type 10 has an invalid length. [ 1727.319000][T25787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5081'. [ 1727.486708][T25791] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1727.494939][T25791] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1727.501842][T25791] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1728.028417][ T30] audit: type=1400 audit(2000000787.010:1750): avc: denied { ioctl } for pid=25800 comm="syz.4.5084" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1728.190115][T15958] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1728.361570][T15958] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1728.394399][T15958] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1728.403676][T15958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1728.437103][T15958] usb 6-1: Product: syz [ 1728.447000][T15958] usb 6-1: Manufacturer: syz [ 1728.459923][T15958] usb 6-1: SerialNumber: syz [ 1728.619848][ T6597] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1728.727304][T15958] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1728.842391][ T6597] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.901535][ T6597] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1728.946183][ T6597] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1728.977716][T15958] usb 6-1: USB disconnect, device number 64 [ 1728.992818][T15958] usblp0: removed [ 1729.020296][ T6597] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1729.109095][ T6597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.539930][T22825] Bluetooth: hci6: command 0x0c1a tx timeout [ 1729.545940][T22825] Bluetooth: hci3: command 0x0c1a tx timeout [ 1729.551963][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 1729.565070][ T6597] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1729.590638][ T6597] usb 5-1: invalid MIDI out EP 0 [ 1729.863824][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.552439][ T6597] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1731.621707][ T6597] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1731.817568][ T6597] usb 3-1: Using ep0 maxpacket: 16 [ 1731.860049][ T6597] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1731.935952][ T6597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1732.079208][ T6597] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1732.217789][ T6597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.277404][ T6597] usb 3-1: Product: syz [ 1732.316621][ T6597] usb 3-1: Manufacturer: syz [ 1732.330166][T13082] usb 5-1: USB disconnect, device number 100 [ 1732.371662][T25802] delete_channel: no stack [ 1732.378177][ T6597] usb 3-1: SerialNumber: syz [ 1732.530501][T25838] netlink: 'syz.1.5092': attribute type 1 has an invalid length. [ 1732.673554][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5092'. [ 1732.962460][T25838] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1733.010554][ T6597] usb 3-1: config 0 descriptor?? [ 1733.168590][ T6597] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1733.186291][ T6597] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1733.638552][T25854] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1733.645167][T25854] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1733.698359][T25854] vhci_hcd vhci_hcd.0: Device attached [ 1733.796721][T25855] vhci_hcd: connection closed [ 1733.796943][T22780] vhci_hcd: stop threads [ 1733.822924][T22780] vhci_hcd: release socket [ 1733.836875][T22780] vhci_hcd: disconnect device [ 1733.930003][T13082] vhci_hcd: vhci_device speed not set [ 1733.999973][T24563] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1734.102925][T25859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.114621][T25859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.310096][T24563] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1734.330310][T25862] fuse: Bad value for 'fd' [ 1734.333667][T24563] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1734.355365][T24563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1734.377059][T24563] usb 2-1: Product: syz [ 1734.390775][T24563] usb 2-1: Manufacturer: syz [ 1734.395847][T24563] usb 2-1: SerialNumber: syz [ 1734.409948][ T30] audit: type=1400 audit(2000000793.390:1751): avc: denied { ioctl } for pid=25825 comm="syz.2.5090" path="socket:[92088]" dev="sockfs" ino=92088 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1734.438720][ T6597] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1734.453295][ T6597] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1734.464432][ T6597] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1734.476194][ T6597] em28xx 3-1:0.0: No AC97 audio processor [ 1734.651564][ T6597] usb 3-1: USB disconnect, device number 113 [ 1734.673131][ T6597] em28xx 3-1:0.0: Disconnecting em28xx [ 1734.678470][T24563] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 91 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1734.684364][ T6597] em28xx 3-1:0.0: Freeing device [ 1735.181918][T24563] usb 2-1: USB disconnect, device number 91 [ 1735.203294][T24563] usblp0: removed [ 1735.639835][ T6597] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1736.085603][T15958] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1736.152805][ T6597] usb 6-1: device descriptor read/64, error -71 [ 1736.372357][T15958] usb 5-1: Using ep0 maxpacket: 16 [ 1736.380859][T15958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.391287][T15958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1736.402262][T15958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1736.412323][T15958] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1736.426363][T15958] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1736.444096][T15958] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1736.496579][ T6597] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1736.632981][T25883] netlink: 'syz.1.5103': attribute type 1 has an invalid length. [ 1736.724940][T25883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1737.092288][ T6597] usb 6-1: device descriptor read/64, error -71 [ 1737.206905][T15958] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1737.214958][T15958] usb 5-1: Manufacturer: syz [ 1737.317730][T15958] usb 5-1: config 0 descriptor?? [ 1737.387873][ T6597] usb usb6-port1: attempt power cycle [ 1737.570023][T25895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5104'. [ 1737.651401][T25895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5104'. [ 1737.672021][T25883] bond5: (slave veth11): Enslaving as an active interface with a down link [ 1737.785267][T25888] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5104'. [ 1737.829822][T15958] rc_core: IR keymap rc-hauppauge not found [ 1737.839963][T15958] Registered IR keymap rc-empty [ 1737.844933][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1737.963156][ T6597] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1737.981146][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1737.990634][ T6597] usb 6-1: device descriptor read/8, error -71 [ 1738.021148][T15958] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1738.032984][T25892] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1738.039073][T25892] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1738.049174][T15958] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input91 [ 1738.072297][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1738.090075][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1738.098073][T25892] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1738.113617][T25905] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 1738.124606][T25905] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 1738.133928][T25905] block nbd1: NBD_DISCONNECT [ 1738.138785][T25905] block nbd1: Send disconnect failed -32 [ 1738.146321][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1738.162467][T25906] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5106'. [ 1738.229852][ T6597] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1738.933024][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1739.700062][ T6597] usb 6-1: device descriptor read/8, error -71 [ 1739.732250][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1739.759937][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1739.774088][T25910] mkiss: ax0: crc mode is auto. [ 1739.822131][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1739.822334][ T6597] usb usb6-port1: unable to enumerate USB device [ 1739.844472][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1739.879916][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1739.971746][T15958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1740.002889][T15958] mceusb 5-1:0.0: Registered Є with mce emulator interface version 1 [ 1740.040809][T15958] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1740.103127][T14324] Bluetooth: hci4: command 0x0c1a tx timeout [ 1740.103141][T22825] Bluetooth: hci6: command 0x0c1a tx timeout [ 1740.103173][T22825] Bluetooth: hci3: command 0x0c1a tx timeout [ 1740.310334][T25913] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1740.316946][T25913] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1740.328993][T25913] vhci_hcd vhci_hcd.0: Device attached [ 1740.337430][T25915] vhci_hcd: connection closed [ 1740.337734][ T12] vhci_hcd: stop threads [ 1740.351013][ T12] vhci_hcd: release socket [ 1740.355531][ T12] vhci_hcd: disconnect device [ 1740.450168][T21064] usb 5-1: USB disconnect, device number 101 [ 1741.160259][T25925] netlink: 'syz.4.5111': attribute type 1 has an invalid length. [ 1741.829860][T25925] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1741.895367][T25932] netlink: 'syz.2.5112': attribute type 10 has an invalid length. [ 1741.926882][T25932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5112'. [ 1743.431867][T21064] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1743.565880][T25953] fuse: Bad value for 'user_id' [ 1743.591543][T25953] fuse: Bad value for 'user_id' [ 1743.637607][T25950] netlink: 'syz.5.5118': attribute type 1 has an invalid length. [ 1743.661975][T21064] usb 2-1: Using ep0 maxpacket: 16 [ 1743.701748][T21064] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1743.715997][T21064] usb 2-1: config 1 has no interface number 0 [ 1743.734483][T21064] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1743.830896][T25950] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1743.972018][T25950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5118'. [ 1744.062360][T21064] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1744.271016][T21064] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1744.366962][T25959] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1744.423734][T21064] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1744.456574][T21064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.465050][T21064] usb 2-1: Product: syz [ 1744.469989][T21064] usb 2-1: Manufacturer: syz [ 1744.476812][T21064] usb 2-1: SerialNumber: syz [ 1744.745469][T25945] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1744.768254][T25945] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1744.783649][T25967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1744.790246][T25967] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1744.799490][T25967] vhci_hcd vhci_hcd.0: Device attached [ 1745.040087][T13082] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 1745.302599][T25969] vhci_hcd: connection reset by peer [ 1745.322531][ T8117] vhci_hcd: stop threads [ 1745.329263][ T8117] vhci_hcd: release socket [ 1745.338265][ T8117] vhci_hcd: disconnect device [ 1745.838339][T25985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1746.451889][T25977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1746.477670][T25977] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1746.499978][T25977] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1746.650056][T21064] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 1746.679984][T21064] usb 2-1: USB disconnect, device number 92 [ 1746.841313][T25995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1747.460895][T22825] Bluetooth: hci3: command 0x0c1a tx timeout [ 1748.392758][T26020] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5130'. [ 1748.500075][T22825] Bluetooth: hci6: command 0x0c1a tx timeout [ 1748.619873][T22825] Bluetooth: hci4: command 0x0c1a tx timeout [ 1748.937680][T26029] dvmrp0: entered allmulticast mode [ 1750.564637][T13082] vhci_hcd: vhci_device speed not set [ 1751.426193][T26054] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5144'. [ 1751.533306][T26054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5144'. [ 1751.981998][T26074] wlan0 speed is unknown, defaulting to 1000 [ 1752.019058][T26068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1752.025361][T26068] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1752.031509][T26068] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1753.090711][T26092] netlink: 'syz.1.5154': attribute type 1 has an invalid length. [ 1753.274474][T26095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5154'. [ 1753.821491][T26092] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1753.874492][T26089] netlink: 'syz.2.5153': attribute type 1 has an invalid length. [ 1754.049503][T26101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5153'. [ 1754.322248][T26089] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1754.357981][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 1754.372479][ T5850] Bluetooth: hci6: command 0x0c1a tx timeout [ 1754.378446][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 1754.544112][T26073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5150'. [ 1754.953042][T26114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5157'. [ 1755.016197][T26112] netlink: 'syz.5.5155': attribute type 1 has an invalid length. [ 1755.156042][T26120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5155'. [ 1755.279896][T21064] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1755.316118][T26112] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1755.600293][T21064] usb 5-1: Using ep0 maxpacket: 32 [ 1755.628489][T21064] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1755.646279][T21064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.665849][T21064] usb 5-1: config 0 descriptor?? [ 1755.683923][T26119] bond7: (slave veth11): Enslaving as an active interface with a down link [ 1755.708398][T21064] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1756.319842][T21064] gspca_nw80x: reg_w err -110 [ 1756.324620][T21064] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 1756.340914][T26117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.450780][T26117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.459020][T26117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.516836][T26117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.525957][T26117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.565792][T26117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.576907][T26117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.587100][T26117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.597137][T26117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.605989][T26117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.737409][ T30] audit: type=1400 audit(2000000815.720:1752): avc: denied { connect } for pid=26140 comm="syz.5.5162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1756.794820][T26145] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5163'. [ 1757.001145][T26148] tipc: Enabling of bearer rejected, failed to enable media [ 1757.094120][T21064] usb 5-1: USB disconnect, device number 102 [ 1758.368018][ T30] audit: type=1400 audit(2000000817.350:1753): avc: denied { ioctl } for pid=26170 comm="syz.2.5171" path="socket:[94739]" dev="sockfs" ino=94739 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1758.658030][ T6597] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1759.171774][ T6597] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1759.180576][ T6597] usb 4-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 1759.224456][T26172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1759.230645][ T6597] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1759.240449][ T6597] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32259, setting to 1024 [ 1759.301860][ T6597] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1759.313626][T26172] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1759.322357][T26172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1759.331230][ T6597] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1759.340475][ T6597] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1759.348546][ T6597] usb 4-1: Product: syz [ 1759.352908][ T6597] usb 4-1: Manufacturer: syz [ 1759.359302][T26174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1759.373397][ T6597] cdc_wdm 4-1:1.0: skipping garbage [ 1759.378710][ T6597] cdc_wdm 4-1:1.0: skipping garbage [ 1759.407524][T26183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1759.492826][ T6597] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1759.545970][T26190] netlink: 37 bytes leftover after parsing attributes in process `syz.4.5175'. [ 1759.581293][ T5892] usb 4-1: USB disconnect, device number 90 [ 1759.679994][T25861] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1759.831809][T25861] usb 3-1: Using ep0 maxpacket: 32 [ 1759.838642][T25861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.916785][T25861] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1759.940170][T25861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.950278][T25861] usb 3-1: Product: syz [ 1759.954416][T25861] usb 3-1: Manufacturer: syz [ 1759.959040][T25861] usb 3-1: SerialNumber: syz [ 1759.980762][T25861] usb 3-1: config 0 descriptor?? [ 1760.141534][T25861] cdc_ether 3-1:0.0: skipping garbage [ 1760.147034][T25861] usb 3-1: bad CDC descriptors [ 1760.194275][T25861] usb 3-1: unsupported MDLM descriptors [ 1760.395466][T24563] usb 3-1: USB disconnect, device number 114 [ 1760.553941][T26199] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5177'. [ 1760.955495][T26201] netlink: 'syz.2.5178': attribute type 7 has an invalid length. [ 1761.033311][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1761.042950][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1761.078143][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1761.087498][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1761.097027][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1761.106076][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1761.115258][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1761.219815][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 1761.381354][T14324] Bluetooth: hci6: command 0x0c1a tx timeout [ 1761.381364][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 1761.563585][ T30] audit: type=1400 audit(2000000820.550:1754): avc: denied { mount } for pid=26208 comm="syz.3.5181" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1761.585659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1761.826486][T26217] __nla_validate_parse: 123 callbacks suppressed [ 1761.826498][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5184'. [ 1763.508217][T14324] Bluetooth: hci4: command 0x0c1a tx timeout [ 1763.527329][T26235] netlink: 'syz.1.5189': attribute type 7 has an invalid length. [ 1765.122601][T26248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5193'. [ 1765.227740][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5193'. [ 1765.417925][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5196'. [ 1765.459338][T26262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5196'. [ 1767.435505][T15958] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1767.583700][T26277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1767.828008][T15958] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1767.892733][T15958] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1767.911311][T26277] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1767.918395][T26277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1767.942087][T26297] netlink: 'syz.1.5206': attribute type 1 has an invalid length. [ 1768.177089][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5206'. [ 1768.466812][T26297] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1768.490634][T15958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1768.520051][T15958] usb 6-1: Product: syz [ 1768.525884][T15958] usb 6-1: Manufacturer: syz [ 1768.530638][T15958] usb 6-1: SerialNumber: syz [ 1768.768486][T15958] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1768.793167][T26305] netlink: 'syz.2.5207': attribute type 10 has an invalid length. [ 1768.806048][T26305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5207'. [ 1769.622568][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 1769.942498][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 1769.942510][T14324] Bluetooth: hci6: command 0x0c1a tx timeout [ 1770.240029][T25861] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1770.430622][ T30] audit: type=1800 audit(2000000829.420:1755): pid=26315 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5210" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1770.444538][T26317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1770.468001][T26317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1770.483097][T25861] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1770.507995][T25861] usb 4-1: New USB device found, idVendor=3669, idProduct=dcbd, bcdDevice=d4.64 [ 1770.522135][T25861] usb 4-1: New USB device strings: Mfr=249, Product=154, SerialNumber=0 [ 1770.532065][T25861] usb 4-1: Product: syz [ 1770.537855][T25861] usb 4-1: Manufacturer: syz [ 1770.561662][T25861] usb 4-1: config 0 descriptor?? [ 1770.576202][T25861] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1770.635880][T15958] usb 6-1: USB disconnect, device number 69 [ 1770.649145][T15958] usblp0: removed [ 1770.685804][T26326] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1771.075083][T26334] 9pnet_fd: Insufficient options for proto=fd [ 1771.149891][T15958] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1771.329888][ T6597] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1771.489875][ T6597] usb 5-1: Using ep0 maxpacket: 32 [ 1771.576168][ T6597] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1771.604387][ T6597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.658195][T26341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.674597][ T6597] usb 5-1: Product: syz [ 1771.694895][ T6597] usb 5-1: Manufacturer: syz [ 1771.708579][T26341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.727816][ T6597] usb 5-1: SerialNumber: syz [ 1771.865616][T15958] usb 6-1: device descriptor read/64, error -71 [ 1771.879345][T26341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.889261][T26341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.102612][T26345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5218'. [ 1772.112771][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5218'. [ 1772.180938][ T6597] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 1772.189555][ T6597] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1772.205810][ T6597] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1772.220171][ T6597] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1772.239972][T15958] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1772.388842][ T6597] usb 5-1: USB disconnect, device number 103 [ 1772.397920][ T6597] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1772.416145][ T6597] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1772.448370][ T6597] visor 5-1:1.0: device disconnected [ 1772.510031][T15958] usb 6-1: device descriptor read/64, error -71 [ 1772.558997][T26352] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5221'. [ 1773.039806][T15958] usb usb6-port1: attempt power cycle [ 1773.080549][T24563] usb 4-1: USB disconnect, device number 91 [ 1773.158387][T26356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5222'. [ 1773.819817][T15958] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1773.892849][T15958] usb 6-1: device descriptor read/8, error -71 [ 1774.572518][T26365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5225'. [ 1774.723049][T26365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5225'. [ 1776.349360][ T30] audit: type=1800 audit(2000000835.330:1756): pid=26395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5231" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1778.426264][T26403] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5235'. [ 1778.463200][T26403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5235'. [ 1778.880899][T26435] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1778.935415][T26438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5245'. [ 1779.016356][ T30] audit: type=1800 audit(2000000838.000:1757): pid=26436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5244" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1781.678853][T26464] fuse: Bad value for 'fd' [ 1782.039972][ T6597] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1782.607011][ T6597] usb 3-1: Using ep0 maxpacket: 16 [ 1782.691961][ T6597] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1783.021790][ T6597] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.041171][ T6597] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1783.053376][ T6597] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1783.083293][ T6597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.099620][ T6597] usb 3-1: Product: syz [ 1783.109357][ T6597] usb 3-1: Manufacturer: syz [ 1783.114036][ T6597] usb 3-1: SerialNumber: syz [ 1784.143291][T26504] fuse: Bad value for 'fd' [ 1784.277477][T26502] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5266'. [ 1784.401128][ T6597] usb 3-1: 0:2 : does not exist [ 1784.413652][T26513] netlink: 'syz.4.5271': attribute type 7 has an invalid length. [ 1784.985140][T26516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5272'. [ 1785.031188][T26516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5272'. [ 1785.102825][ T30] audit: type=1400 audit(2000000844.080:1758): avc: denied { execute } for pid=26465 comm="syz.2.5254" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1785.126536][ C1] vkms_vblank_simulate: vblank timer overrun [ 1785.160045][T24563] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1785.174943][ T6597] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1785.214326][ T6597] usb 3-1: USB disconnect, device number 115 [ 1785.303350][T26532] tipc: Enabling of bearer rejected, failed to enable media [ 1785.429931][T24563] usb 5-1: Using ep0 maxpacket: 16 [ 1785.442481][T24563] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.456624][T24563] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1785.975688][T24563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.005355][T24563] usb 5-1: config 0 descriptor?? [ 1786.139069][T26541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5279'. [ 1786.149059][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5279'. [ 1786.457634][T26543] fuse: Invalid rootmode [ 1786.940081][T24563] usbhid 5-1:0.0: can't add hid device: -71 [ 1786.946185][T24563] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1786.957414][T24563] usb 5-1: USB disconnect, device number 104 [ 1787.118734][T26554] netlink: 'syz.2.5284': attribute type 10 has an invalid length. [ 1787.127992][T26554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5284'. [ 1787.801091][T26562] netlink: 'syz.4.5286': attribute type 10 has an invalid length. [ 1787.809300][T26562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5286'. [ 1789.770369][T26584] syz.1.5291 (26584): drop_caches: 2 [ 1790.022907][ T30] audit: type=1800 audit(2000000848.710:1759): pid=26585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5291" name="bus" dev="overlay" ino=2583 res=0 errno=0 [ 1790.896316][T26576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5290'. [ 1790.905510][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5290'. [ 1791.275136][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.886212][T26607] tipc: Enabling of bearer rejected, failed to enable media [ 1793.179971][T24563] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1793.659957][T24563] usb 2-1: Using ep0 maxpacket: 8 [ 1794.129414][T24563] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1794.138093][T24563] usb 2-1: config 0 has no interface number 0 [ 1794.144267][T24563] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1794.233827][T24563] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1794.308407][T24563] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1794.461128][T24563] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1794.532856][T24563] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1794.556924][T24563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.581787][T24563] usb 2-1: Product: syz [ 1794.597705][T24563] usb 2-1: Manufacturer: syz [ 1794.613061][T24563] usb 2-1: SerialNumber: syz [ 1794.634147][T24563] usb 2-1: config 0 descriptor?? [ 1795.355894][T26621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.364639][T26621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.482209][T24563] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1795.718888][ T30] audit: type=1400 audit(2000000854.700:1760): avc: denied { accept } for pid=26638 comm="syz.2.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1795.967196][T14324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1795.979669][T14324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1795.989503][T14324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1795.999096][T14324] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1796.035049][T14324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1796.299950][T26648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5308'. [ 1796.312082][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5308'. [ 1796.625685][T24563] usb 2-1: USB disconnect, device number 93 [ 1796.743414][T24307] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.757702][T26647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5309'. [ 1796.804853][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5309'. [ 1796.835336][T26659] netlink: 'syz.3.5311': attribute type 7 has an invalid length. [ 1796.859719][T26642] wlan0 speed is unknown, defaulting to 1000 [ 1796.989384][T24307] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.211928][T26670] netlink: 'syz.3.5314': attribute type 1 has an invalid length. [ 1797.330072][T26674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5314'. [ 1797.415231][T24307] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.795546][T24307] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.179984][ T5850] Bluetooth: hci2: command tx timeout [ 1798.187561][T26670] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1799.015912][T24307] bridge0: port 3(team0) entered disabled state [ 1799.043578][T24307] bridge_slave_1: left allmulticast mode [ 1799.049237][T24307] bridge_slave_1: left promiscuous mode [ 1799.101893][T24307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.270597][T24307] bridge_slave_0: left allmulticast mode [ 1799.566142][T26687] Set syz0 is full, maxelem 0 reached [ 1799.586057][T24307] bridge_slave_0: left promiscuous mode [ 1799.601595][T24307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.913424][T26697] FAULT_INJECTION: forcing a failure. [ 1799.913424][T26697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.944449][T26697] CPU: 1 UID: 0 PID: 26697 Comm: syz.4.5319 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1799.944476][T26697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1799.944486][T26697] Call Trace: [ 1799.944492][T26697] [ 1799.944499][T26697] dump_stack_lvl+0x16c/0x1f0 [ 1799.944528][T26697] should_fail_ex+0x512/0x640 [ 1799.944549][T26697] _copy_from_user+0x2e/0xd0 [ 1799.944570][T26697] copy_msghdr_from_user+0x98/0x160 [ 1799.944595][T26697] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1799.944632][T26697] ___sys_sendmsg+0xfe/0x1d0 [ 1799.944658][T26697] ? __pfx____sys_sendmsg+0x10/0x10 [ 1799.944704][T26697] ? __mutex_unlock_slowpath+0x100/0x800 [ 1799.944742][T26697] __sys_sendmsg+0x16d/0x220 [ 1799.944764][T26697] ? __pfx___sys_sendmsg+0x10/0x10 [ 1799.944802][T26697] do_syscall_64+0xcd/0x4c0 [ 1799.944830][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.944849][T26697] RIP: 0033:0x7f5a16b8eb69 [ 1799.944863][T26697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1799.944879][T26697] RSP: 002b:00007f5a179f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.944896][T26697] RAX: ffffffffffffffda RBX: 00007f5a16db5fa0 RCX: 00007f5a16b8eb69 [ 1799.944907][T26697] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000003 [ 1799.944917][T26697] RBP: 00007f5a179f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.944927][T26697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.944937][T26697] R13: 0000000000000000 R14: 00007f5a16db5fa0 R15: 00007ffc35925518 [ 1799.944960][T26697] [ 1800.271449][ T5850] Bluetooth: hci2: command tx timeout [ 1801.146235][T26715] netlink: 'syz.4.5325': attribute type 10 has an invalid length. [ 1801.156705][T26715] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5325'. [ 1801.228937][T24307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.238167][T24307] bond_slave_0: left promiscuous mode [ 1801.252069][T24307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.267972][T24307] bond_slave_1: left promiscuous mode [ 1801.278613][T24307] bond0 (unregistering): Released all slaves [ 1801.315407][T24307] bond1 (unregistering): Released all slaves [ 1801.617292][T24307] bond2 (unregistering): Released all slaves [ 1801.720218][T24307] bond3 (unregistering): (slave veth3): Releasing active interface [ 1801.729102][T24307] bond3 (unregistering): Released all slaves [ 1801.836213][T24307] bond4 (unregistering): (slave veth5): Releasing active interface [ 1801.845280][T24307] bond4 (unregistering): Released all slaves [ 1801.941069][T24307] bond5 (unregistering): (slave veth7): Releasing active interface [ 1801.950174][T24307] bond5 (unregistering): Released all slaves [ 1802.044829][T24307] bond6 (unregistering): (slave veth9): Releasing active interface [ 1802.053845][T24307] bond6 (unregistering): Released all slaves [ 1802.144887][T24307] bond7 (unregistering): (slave veth11): Releasing active interface [ 1802.155529][T24307] bond7 (unregistering): Released all slaves [ 1802.174299][T26713] tipc: Enabling of bearer rejected, failed to enable media [ 1802.236171][T26642] chnl_net:caif_netlink_parms(): no params data found [ 1802.315752][T24307] tipc: Left network mode [ 1802.339977][ T5850] Bluetooth: hci2: command tx timeout [ 1802.381374][T26723] overlayfs: conflicting lowerdir path [ 1802.506813][T26728] fuse: Bad value for 'fd' [ 1803.412015][T26642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.421141][T26642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.428958][T26642] bridge_slave_0: entered allmulticast mode [ 1803.442925][T26642] bridge_slave_0: entered promiscuous mode [ 1803.479472][T26642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.496069][T26642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.506011][T26642] bridge_slave_1: entered allmulticast mode [ 1803.516122][T26642] bridge_slave_1: entered promiscuous mode [ 1803.577444][T26642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1803.593700][T26642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.288105][ T6597] wlan0 speed is unknown, defaulting to 1000 [ 1804.313469][ T6597] infiniband syz2: ib_query_port failed (-19) [ 1804.421807][ T5850] Bluetooth: hci2: command tx timeout [ 1804.459405][T26642] team0: Port device team_slave_0 added [ 1804.471549][T26642] team0: Port device team_slave_1 added [ 1804.835644][T26642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.990568][T26642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.432844][T26642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.453498][T24307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1805.467847][T24307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1805.627535][T24307] veth0_macvtap: left allmulticast mode [ 1805.633316][T24307] veth0_macvtap: left promiscuous mode [ 1805.642308][T24307] veth1_vlan: left promiscuous mode [ 1805.647548][T24307] veth0_vlan: left promiscuous mode [ 1806.087907][T26776] fuse: Bad value for 'fd' [ 1806.282468][T24307] team_slave_1 (unregistering): left promiscuous mode [ 1806.289446][T24307] team_slave_1 (unregistering): left allmulticast mode [ 1806.297222][T24307] team0 (unregistering): Port device team_slave_1 removed [ 1806.329282][T24307] team_slave_0 (unregistering): left promiscuous mode [ 1806.337009][T24307] team0 (unregistering): Port device team_slave_0 removed [ 1806.745850][T26763] tipc: Enabling of bearer rejected, failed to enable media [ 1806.756845][T26642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1806.764966][T26642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1806.794548][T26642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1806.852201][T26768] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1806.866975][T26768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1806.878915][T26768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1806.885114][T26768] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1806.910822][T26768] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1806.918693][T26642] hsr_slave_0: entered promiscuous mode [ 1806.935164][T26642] hsr_slave_1: entered promiscuous mode [ 1806.946224][T26642] debugfs: 'hsr0' already exists in 'hsr' [ 1806.953285][T26642] Cannot create hsr debugfs directory [ 1807.609842][T15958] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1807.841130][T15958] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1807.856024][T15958] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1807.866064][T15958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1808.364027][T15958] usb 4-1: Product: syz [ 1808.371904][T15958] usb 4-1: Manufacturer: syz [ 1808.376504][T15958] usb 4-1: SerialNumber: syz [ 1808.421345][T15958] usb 4-1: can't set config #1, error -71 [ 1808.429212][T15958] usb 4-1: USB disconnect, device number 92 [ 1808.849305][T26799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5346'. [ 1808.859649][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5346'. [ 1808.900350][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 1808.906561][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 1808.906717][T14324] Bluetooth: hci6: command 0x0c1a tx timeout [ 1809.548367][T26642] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1809.688359][T26642] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1809.740269][T26810] tipc: Enabling of bearer rejected, failed to enable media [ 1809.749697][T26642] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1809.910553][T26642] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1810.041758][T26827] syz.2.5353: attempt to access beyond end of device [ 1810.041758][T26827] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1810.403874][T26831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1810.979809][T22825] Bluetooth: hci2: command 0x0c1a tx timeout [ 1811.105939][T26642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.151595][T26642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.201577][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.208655][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.263863][T26642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1811.287004][T26642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1811.566506][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.573607][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.277704][T26642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1813.060208][T14324] Bluetooth: hci2: command 0x0c1a tx timeout [ 1813.089335][T26859] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1813.297894][T26877] netlink: 'syz.3.5366': attribute type 7 has an invalid length. [ 1814.529836][T24563] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1814.669853][T24563] usb 3-1: device descriptor read/64, error -71 [ 1814.761763][T26642] veth0_vlan: entered promiscuous mode [ 1814.772059][T26642] veth1_vlan: entered promiscuous mode [ 1814.804954][T26642] veth0_macvtap: entered promiscuous mode [ 1814.816648][T26642] veth1_macvtap: entered promiscuous mode [ 1814.837376][T26642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1814.853871][T26642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.868966][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.878918][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.918510][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.927442][T24563] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1814.964196][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.989797][ T918] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1815.011127][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.025322][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.054466][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.065234][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.080679][T24563] usb 3-1: device descriptor read/64, error -71 [ 1815.140051][T14324] Bluetooth: hci2: command 0x0c1a tx timeout [ 1815.211429][T24563] usb usb3-port1: attempt power cycle [ 1815.231762][ T918] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1815.242112][ T918] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1815.254698][ T918] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1815.266750][ T918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1815.707468][ T918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1815.812014][ T918] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1815.823609][ T918] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1815.833162][ T918] usb 4-1: Product: syz [ 1815.837517][ T918] usb 4-1: Manufacturer: syz [ 1815.855755][ T918] cdc_wdm 4-1:1.0: skipping garbage [ 1815.863529][ T918] cdc_wdm 4-1:1.0: skipping garbage [ 1815.896841][ T918] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1815.928879][ T918] cdc_wdm 4-1:1.0: Unknown control protocol [ 1816.006443][T24563] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1816.030374][T24563] usb 3-1: device descriptor read/8, error -71 [ 1816.237476][T26908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5373'. [ 1816.247319][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5373'. [ 1816.324412][ T6597] usb 4-1: USB disconnect, device number 93 [ 1816.469830][T24563] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1816.504376][T26913] netlink: 'syz.1.5374': attribute type 10 has an invalid length. [ 1816.518364][T26913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5374'. [ 1816.528138][T24563] usb 3-1: device descriptor read/8, error -71 [ 1816.869880][T24563] usb usb3-port1: unable to enumerate USB device [ 1816.874811][T26915] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 1816.882796][T26915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1816.895708][T26915] vhci_hcd vhci_hcd.0: Device attached [ 1816.907380][T26917] vhci_hcd: connection closed [ 1816.907607][ T1092] vhci_hcd: stop threads [ 1816.926776][ T1092] vhci_hcd: release socket [ 1816.934694][ T1092] vhci_hcd: disconnect device [ 1817.221194][T14324] Bluetooth: hci2: command 0x0c1a tx timeout [ 1818.790156][T26936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5380'. [ 1819.067264][T26942] syz.5.5382: attempt to access beyond end of device [ 1819.067264][T26942] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1819.869461][T26949] syzkaller1: entered promiscuous mode [ 1819.869510][T26945] netlink: 'syz.2.5384': attribute type 10 has an invalid length. [ 1819.875343][T26949] syzkaller1: entered allmulticast mode [ 1819.924025][T26945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1820.328845][T26953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5386'. [ 1820.338274][T26953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5386'. [ 1820.707620][T26961] netlink: 'syz.4.5388': attribute type 10 has an invalid length. [ 1820.729644][T26961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5388'. [ 1820.782228][T26967] fuse: Bad value for 'fd' [ 1820.873921][T26971] fuse: Bad value for 'fd' [ 1821.810670][T26956] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1821.821558][T26975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5393'. [ 1821.842338][T26971] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 1821.853791][T26956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1821.869613][T26956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1821.878512][T26980] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5393'. [ 1822.748628][T22825] Bluetooth: hci6: command 0x0c1a tx timeout [ 1822.849835][ T6597] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1822.957312][T26992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5397'. [ 1823.008830][ T6597] usb 3-1: config 3 has an invalid interface number: 212 but max is 0 [ 1823.023806][ T6597] usb 3-1: config 3 has no interface number 0 [ 1823.233018][ T6597] usb 3-1: config 3 interface 212 has no altsetting 0 [ 1823.394556][ T6597] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d93, bcdDevice= 3.e7 [ 1823.439388][ T6597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.480098][ T6597] usb 3-1: Product: syz [ 1823.503335][ T6597] usb 3-1: Manufacturer: syz [ 1823.513947][ T6597] usb 3-1: SerialNumber: syz [ 1823.823050][T24563] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1823.939865][T22825] Bluetooth: hci2: command 0x0c1a tx timeout [ 1823.939868][T14324] Bluetooth: hci4: command 0x0c1a tx timeout [ 1824.004477][T24563] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 1824.017232][T24563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.040502][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1824.079829][T21064] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1824.255748][T24563] pegasus 2-1:254.0: probe with driver pegasus failed with error -71 [ 1824.272884][T24563] usb 2-1: USB disconnect, device number 94 [ 1824.750596][T21064] usb 4-1: Using ep0 maxpacket: 8 [ 1824.759320][T21064] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1824.768780][T21064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.776891][T21064] usb 4-1: Product: syz [ 1824.781221][T21064] usb 4-1: Manufacturer: syz [ 1824.785857][T21064] usb 4-1: SerialNumber: syz [ 1824.792599][T21064] usb 4-1: config 0 descriptor?? [ 1824.799457][T21064] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1825.526750][ T6597] usb 3-1: USB disconnect, device number 120 [ 1825.560230][ T30] audit: type=1400 audit(2000000884.540:1761): avc: denied { read } for pid=27023 comm="syz.2.5407" laddr=fe80::11 lport=20 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1825.589014][T27024] input: syz1 as /devices/virtual/input/input97 [ 1826.889786][ T918] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1827.145573][ T918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.170878][ T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.183349][ T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.193658][ T918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1827.209598][ T918] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1827.219392][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.219781][T21064] gspca_sq930x: reg_w 0105 0f00 failed -110 [ 1827.231985][ T918] usb 3-1: config 0 descriptor?? [ 1828.250493][T21064] gspca_sq930x: Sensor ov9630 not yet treated [ 1828.433156][T27053] syz.5.5414: attempt to access beyond end of device [ 1828.433156][T27053] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1828.453863][T21064] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 1828.505195][ T918] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 1828.514002][T21064] usb 4-1: USB disconnect, device number 94 [ 1828.662984][ T918] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0022/input/input98 [ 1828.832810][T27062] fuse: Bad value for 'fd' [ 1829.140805][ T918] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1829.501447][ T6597] usb 3-1: USB disconnect, device number 121 [ 1830.019390][T27057] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1830.044980][T27057] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1830.054789][T27057] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1830.226920][T27073] netlink: 'syz.5.5419': attribute type 10 has an invalid length. [ 1830.234876][T27073] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5419'. [ 1830.249889][T27073] team0: entered promiscuous mode [ 1830.254929][T27073] team_slave_0: entered promiscuous mode [ 1830.460475][T27073] team_slave_1: entered promiscuous mode [ 1830.466279][T27073] team0: entered allmulticast mode [ 1830.480006][T27073] team_slave_0: entered allmulticast mode [ 1830.608056][T27073] team_slave_1: entered allmulticast mode [ 1830.638171][T27073] bridge0: port 3(team0) entered blocking state [ 1830.649603][T27073] bridge0: port 3(team0) entered disabled state [ 1830.999854][T22825] Bluetooth: hci6: command 0x0c1a tx timeout [ 1831.249472][T27073] bridge0: port 3(team0) entered blocking state [ 1831.255796][T27073] bridge0: port 3(team0) entered forwarding state [ 1831.279978][T27078] netlink: 'syz.2.5421': attribute type 7 has an invalid length. [ 1832.130212][T22825] Bluetooth: hci2: command 0x0c1a tx timeout [ 1832.130771][T14324] Bluetooth: hci4: command 0x0c1a tx timeout [ 1832.400909][T27091] netlink: 'syz.2.5424': attribute type 10 has an invalid length. [ 1832.435241][T27091] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5424'. [ 1832.861392][T15958] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1833.112081][T15958] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1833.143882][T15958] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1833.443248][T15958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1833.461197][T15958] usb 5-1: Product: syz [ 1833.469617][T15958] usb 5-1: Manufacturer: syz [ 1833.479520][T15958] usb 5-1: SerialNumber: syz [ 1833.670818][T27105] openvswitch: netlink: IP tunnel TTL not specified. [ 1833.847426][T15958] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1834.146560][T15958] usb 5-1: USB disconnect, device number 105 [ 1834.153937][T15958] usblp0: removed [ 1834.342120][T27114] tipc: Enabling of bearer rejected, failed to enable media [ 1835.311303][T27123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5432'. [ 1835.335893][T22825] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1836.158718][T27146] netlink: 'syz.2.5438': attribute type 1 has an invalid length. [ 1836.866978][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5438'. [ 1836.872822][T27146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1838.098307][T27167] tipc: Enabling of bearer rejected, failed to enable media [ 1838.632109][T27177] netlink: 'syz.2.5444': attribute type 7 has an invalid length. [ 1838.708961][T27179] netlink: 'syz.2.5445': attribute type 10 has an invalid length. [ 1838.717135][T27179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5445'. [ 1838.861956][T27135] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1838.887278][T27135] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1838.940495][T27135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1839.312562][ T6597] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1839.639924][T22825] Bluetooth: hci6: command 0x0c1a tx timeout [ 1839.854087][ T6597] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1839.865304][ T6597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.876842][ T6597] usb 6-1: Product: syz [ 1839.944844][ T6597] usb 6-1: Manufacturer: syz [ 1839.950157][ T6597] usb 6-1: SerialNumber: syz [ 1839.976968][ T6597] usb 6-1: config 0 descriptor?? [ 1840.559328][T27191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5448'. [ 1840.571482][T27191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5448'. [ 1840.667055][ T30] audit: type=1326 audit(2000000899.650:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.5450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28b3b8eb69 code=0x0 [ 1840.959856][T22825] Bluetooth: hci4: command 0x0c1a tx timeout [ 1840.979839][T22825] Bluetooth: hci2: command 0x0c1a tx timeout [ 1841.351897][ T6597] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1841.881440][T27215] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5454'. [ 1841.904833][T27159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.916749][T27159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.043701][ T6597] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1842.053862][ T6597] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1842.066592][ T6597] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1842.092897][ T6597] usb 6-1: USB disconnect, device number 74 [ 1843.074503][T27225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1843.083639][T27225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1843.624068][T27245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5460'. [ 1843.656195][T27246] geneve2: entered promiscuous mode [ 1844.031405][T27251] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1844.660670][T27256] [ 1844.662535][ T30] audit: type=1400 audit(2000000903.640:1763): avc: denied { append } for pid=27255 comm="syz.3.5463" name="event3" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1844.663042][T27256] ===================================================== [ 1844.663051][T27256] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1844.700692][T27256] 6.16.0-syzkaller-11699-g7e161a991ea7 #0 Not tainted [ 1844.707423][T27256] ----------------------------------------------------- [ 1844.714324][T27256] syz.3.5463/27256 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1844.722018][T27256] ffff88807c472600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 1844.730701][T27256] [ 1844.730701][T27256] and this task is already holding: [ 1844.738035][T27256] ffff88802b7db230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 1844.747668][T27256] which would create a new lock dependency: [ 1844.753526][T27256] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1844.761422][T27256] [ 1844.761422][T27256] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1844.770842][T27256] (&dev->event_lock#2){..-.}-{3:3} [ 1844.770864][T27256] [ 1844.770864][T27256] ... which became SOFTIRQ-irq-safe at: [ 1844.783702][T27256] lock_acquire+0x179/0x350 [ 1844.788278][T27256] _raw_spin_lock_irqsave+0x3a/0x60 [ 1844.793540][T27256] input_inject_event+0x9f/0x3b0 [ 1844.798543][T27256] led_set_brightness+0x217/0x290 [ 1844.803628][T27256] led_trigger_event+0xda/0x270 [ 1844.808545][T27256] kbd_bh+0x21b/0x300 [ 1844.812588][T27256] tasklet_action_common+0x281/0x400 [ 1844.817939][T27256] handle_softirqs+0x219/0x8e0 [ 1844.822767][T27256] run_ksoftirqd+0x3a/0x60 [ 1844.827249][T27256] smpboot_thread_fn+0x3f4/0xae0 [ 1844.832251][T27256] kthread+0x3c2/0x780 [ 1844.836381][T27256] ret_from_fork+0x5d7/0x6f0 [ 1844.841032][T27256] ret_from_fork_asm+0x1a/0x30 [ 1844.845865][T27256] [ 1844.845865][T27256] to a SOFTIRQ-irq-unsafe lock: [ 1844.852851][T27256] (tasklist_lock){.+.+}-{3:3} [ 1844.852869][T27256] [ 1844.852869][T27256] ... which became SOFTIRQ-irq-unsafe at: [ 1844.865449][T27256] ... [ 1844.865454][T27256] lock_acquire+0x179/0x350 [ 1844.872580][T27256] _raw_read_lock+0x5f/0x70 [ 1844.877148][T27256] __do_wait+0x105/0x890 [ 1844.881452][T27256] do_wait+0x21e/0x5a0 [ 1844.885580][T27256] kernel_wait+0x9f/0x160 [ 1844.889968][T27256] call_usermodehelper_exec_work+0xf1/0x170 [ 1844.895926][T27256] process_one_work+0x9cf/0x1b70 [ 1844.900927][T27256] worker_thread+0x6c8/0xf10 [ 1844.905581][T27256] kthread+0x3c2/0x780 [ 1844.909712][T27256] ret_from_fork+0x5d7/0x6f0 [ 1844.914366][T27256] ret_from_fork_asm+0x1a/0x30 [ 1844.919193][T27256] [ 1844.919193][T27256] other info that might help us debug this: [ 1844.919193][T27256] [ 1844.929393][T27256] Chain exists of: [ 1844.929393][T27256] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1844.929393][T27256] [ 1844.942315][T27256] Possible interrupt unsafe locking scenario: [ 1844.942315][T27256] [ 1844.950605][T27256] CPU0 CPU1 [ 1844.955942][T27256] ---- ---- [ 1844.961279][T27256] lock(tasklist_lock); [ 1844.965496][T27256] local_irq_disable(); [ 1844.972221][T27256] lock(&dev->event_lock#2); [ 1844.979393][T27256] lock(&new->fa_lock); [ 1844.986127][T27256] [ 1844.989554][T27256] lock(&dev->event_lock#2); [ 1844.994383][T27256] [ 1844.994383][T27256] *** DEADLOCK *** [ 1844.994383][T27256] [ 1845.002497][T27256] 6 locks held by syz.3.5463/27256: [ 1845.007664][T27256] #0: ffff88802b7dd118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 1845.016773][T27256] #1: ffff88802b7db230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 1845.026840][T27256] #2: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 1845.036469][T27256] #3: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 1845.046014][T27256] #4: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x32/0xa30 [ 1845.056091][T27256] #5: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 1845.065116][T27256] [ 1845.065116][T27256] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1845.075496][T27256] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1845.081045][T27256] IN-SOFTIRQ-W at: [ 1845.085004][T27256] lock_acquire+0x179/0x350 [ 1845.091147][T27256] _raw_spin_lock_irqsave+0x3a/0x60 [ 1845.097978][T27256] input_inject_event+0x9f/0x3b0 [ 1845.104546][T27256] led_set_brightness+0x217/0x290 [ 1845.111197][T27256] led_trigger_event+0xda/0x270 [ 1845.117676][T27256] kbd_bh+0x21b/0x300 [ 1845.123281][T27256] tasklet_action_common+0x281/0x400 [ 1845.130196][T27256] handle_softirqs+0x219/0x8e0 [ 1845.136589][T27256] run_ksoftirqd+0x3a/0x60 [ 1845.142632][T27256] smpboot_thread_fn+0x3f4/0xae0 [ 1845.149200][T27256] kthread+0x3c2/0x780 [ 1845.154894][T27256] ret_from_fork+0x5d7/0x6f0 [ 1845.161109][T27256] ret_from_fork_asm+0x1a/0x30 [ 1845.167501][T27256] INITIAL USE at: [ 1845.171367][T27256] lock_acquire+0x179/0x350 [ 1845.177415][T27256] _raw_spin_lock_irqsave+0x3a/0x60 [ 1845.184154][T27256] input_inject_event+0x9f/0x3b0 [ 1845.190633][T27256] led_set_brightness+0x217/0x290 [ 1845.197194][T27256] kbd_led_trigger_activate+0xcb/0x110 [ 1845.204199][T27256] led_trigger_set+0x59a/0xc50 [ 1845.210502][T27256] led_trigger_set_default+0x1e0/0x2e0 [ 1845.217503][T27256] led_classdev_register_ext+0x7b8/0xa10 [ 1845.224672][T27256] input_leds_connect+0x552/0x8e0 [ 1845.231242][T27256] input_attach_handler.isra.0+0x184/0x260 [ 1845.238587][T27256] input_register_device+0xab9/0x1180 [ 1845.245495][T27256] atkbd_connect+0x5f8/0xa40 [ 1845.251626][T27256] serio_driver_probe+0x7f/0xd0 [ 1845.258013][T27256] really_probe+0x241/0xa90 [ 1845.264066][T27256] __driver_probe_device+0x1de/0x440 [ 1845.270896][T27256] driver_probe_device+0x4c/0x1b0 [ 1845.277463][T27256] __driver_attach+0x283/0x580 [ 1845.283771][T27256] bus_for_each_dev+0x13e/0x1d0 [ 1845.290162][T27256] serio_handle_event+0x335/0xc30 [ 1845.296722][T27256] process_one_work+0x9cf/0x1b70 [ 1845.303200][T27256] worker_thread+0x6c8/0xf10 [ 1845.309329][T27256] kthread+0x3c2/0x780 [ 1845.314939][T27256] ret_from_fork+0x5d7/0x6f0 [ 1845.321067][T27256] ret_from_fork_asm+0x1a/0x30 [ 1845.327375][T27256] } [ 1845.329848][T27256] ... key at: [] __key.7+0x0/0x40 [ 1845.336937][T27256] [ 1845.336937][T27256] the dependencies between the lock to be acquired [ 1845.336943][T27256] and SOFTIRQ-irq-unsafe lock: [ 1845.350404][T27256] -> (tasklist_lock){.+.+}-{3:3} { [ 1845.355674][T27256] HARDIRQ-ON-R at: [ 1845.359799][T27256] lock_acquire+0x179/0x350 [ 1845.366282][T27256] _raw_read_lock+0x5f/0x70 [ 1845.372774][T27256] __do_wait+0x105/0x890 [ 1845.378988][T27256] do_wait+0x21e/0x5a0 [ 1845.385025][T27256] kernel_wait+0x9f/0x160 [ 1845.391329][T27256] call_usermodehelper_exec_work+0xf1/0x170 [ 1845.399196][T27256] process_one_work+0x9cf/0x1b70 [ 1845.406106][T27256] worker_thread+0x6c8/0xf10 [ 1845.412670][T27256] kthread+0x3c2/0x780 [ 1845.418710][T27256] ret_from_fork+0x5d7/0x6f0 [ 1845.425273][T27256] ret_from_fork_asm+0x1a/0x30 [ 1845.432015][T27256] SOFTIRQ-ON-R at: [ 1845.436146][T27256] lock_acquire+0x179/0x350 [ 1845.442629][T27256] _raw_read_lock+0x5f/0x70 [ 1845.449106][T27256] __do_wait+0x105/0x890 [ 1845.455318][T27256] do_wait+0x21e/0x5a0 [ 1845.461357][T27256] kernel_wait+0x9f/0x160 [ 1845.467656][T27256] call_usermodehelper_exec_work+0xf1/0x170 [ 1845.475524][T27256] process_one_work+0x9cf/0x1b70 [ 1845.482433][T27256] worker_thread+0x6c8/0xf10 [ 1845.488994][T27256] kthread+0x3c2/0x780 [ 1845.495033][T27256] ret_from_fork+0x5d7/0x6f0 [ 1845.501598][T27256] ret_from_fork_asm+0x1a/0x30 [ 1845.508336][T27256] INITIAL USE at: [ 1845.512378][T27256] lock_acquire+0x179/0x350 [ 1845.518775][T27256] _raw_write_lock_irq+0x36/0x50 [ 1845.525604][T27256] copy_process+0x4caf/0x7690 [ 1845.532171][T27256] kernel_clone+0xfc/0x930 [ 1845.538477][T27256] user_mode_thread+0xc7/0x110 [ 1845.545131][T27256] rest_init+0x23/0x2b0 [ 1845.551173][T27256] start_kernel+0x3ee/0x4d0 [ 1845.557562][T27256] x86_64_start_reservations+0x18/0x30 [ 1845.564906][T27256] x86_64_start_kernel+0x130/0x190 [ 1845.571901][T27256] common_startup_64+0x13e/0x148 [ 1845.578726][T27256] INITIAL READ USE at: [ 1845.583200][T27256] lock_acquire+0x179/0x350 [ 1845.590029][T27256] _raw_read_lock+0x5f/0x70 [ 1845.596857][T27256] __do_wait+0x105/0x890 [ 1845.603416][T27256] do_wait+0x21e/0x5a0 [ 1845.609806][T27256] kernel_wait+0x9f/0x160 [ 1845.616467][T27256] call_usermodehelper_exec_work+0xf1/0x170 [ 1845.624700][T27256] process_one_work+0x9cf/0x1b70 [ 1845.631973][T27256] worker_thread+0x6c8/0xf10 [ 1845.638888][T27256] kthread+0x3c2/0x780 [ 1845.645278][T27256] ret_from_fork+0x5d7/0x6f0 [ 1845.652188][T27256] ret_from_fork_asm+0x1a/0x30 [ 1845.659274][T27256] } [ 1845.661920][T27256] ... key at: [] tasklist_lock+0x18/0x40 [ 1845.669798][T27256] ... acquired at: [ 1845.673747][T27256] _raw_read_lock+0x5f/0x70 [ 1845.678403][T27256] send_sigio+0xb8/0x3e0 [ 1845.682800][T27256] kill_fasync+0x214/0x510 [ 1845.687368][T27256] lease_break_callback+0x23/0x30 [ 1845.692548][T27256] __break_lease+0x674/0x1810 [ 1845.697372][T27256] vfs_truncate+0x4d3/0x6e0 [ 1845.702026][T27256] __x64_sys_truncate+0x172/0x1e0 [ 1845.707202][T27256] do_syscall_64+0xcd/0x4c0 [ 1845.711858][T27256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.717899][T27256] [ 1845.720198][T27256] -> (&f_owner->lock){....}-{3:3} { [ 1845.725473][T27256] INITIAL USE at: [ 1845.729427][T27256] lock_acquire+0x179/0x350 [ 1845.735647][T27256] _raw_write_lock_irq+0x36/0x50 [ 1845.742301][T27256] __f_setown+0x61/0x3c0 [ 1845.748260][T27256] generic_setlease+0xeef/0x1300 [ 1845.754908][T27256] kernel_setlease+0x106/0x140 [ 1845.761385][T27256] vfs_setlease+0x258/0x2d0 [ 1845.767598][T27256] fcntl_setlease+0x3ed/0x5a0 [ 1845.773986][T27256] do_fcntl+0x751/0x15a0 [ 1845.779945][T27256] __x64_sys_fcntl+0x163/0x200 [ 1845.786423][T27256] do_syscall_64+0xcd/0x4c0 [ 1845.792645][T27256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.800249][T27256] INITIAL READ USE at: [ 1845.804636][T27256] lock_acquire+0x179/0x350 [ 1845.811296][T27256] _raw_read_lock_irq+0x67/0x80 [ 1845.818313][T27256] f_getown+0x57/0x300 [ 1845.824534][T27256] sock_ioctl+0x1f2/0x6b0 [ 1845.831013][T27256] __x64_sys_ioctl+0x18b/0x210 [ 1845.837937][T27256] do_syscall_64+0xcd/0x4c0 [ 1845.844599][T27256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.852645][T27256] } [ 1845.855208][T27256] ... key at: [] __key.1+0x0/0x40 [ 1845.862383][T27256] ... acquired at: [ 1845.866244][T27256] _raw_read_lock_irqsave+0x74/0x90 [ 1845.871598][T27256] send_sigio+0x31/0x3e0 [ 1845.875995][T27256] kill_fasync+0x214/0x510 [ 1845.880562][T27256] lease_break_callback+0x23/0x30 [ 1845.885739][T27256] __break_lease+0x674/0x1810 [ 1845.890563][T27256] vfs_truncate+0x4d3/0x6e0 [ 1845.895213][T27256] __x64_sys_truncate+0x172/0x1e0 [ 1845.900386][T27256] do_syscall_64+0xcd/0x4c0 [ 1845.905043][T27256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.911083][T27256] [ 1845.913382][T27256] -> (&new->fa_lock){....}-{3:3} { [ 1845.918480][T27256] INITIAL USE at: [ 1845.922347][T27256] lock_acquire+0x179/0x350 [ 1845.928398][T27256] _raw_write_lock_irq+0x36/0x50 [ 1845.934876][T27256] fasync_remove_entry+0xb2/0x1e0 [ 1845.941443][T27256] fasync_helper+0xaf/0xd0 [ 1845.947419][T27256] lease_modify+0x232/0x500 [ 1845.953458][T27256] locks_remove_file+0x29e/0x5c0 [ 1845.959948][T27256] __fput+0x351/0xb70 [ 1845.965472][T27256] task_work_run+0x14d/0x240 [ 1845.971602][T27256] do_exit+0x86f/0x2bf0 [ 1845.977303][T27256] do_group_exit+0xd3/0x2a0 [ 1845.983350][T27256] get_signal+0x2673/0x26d0 [ 1845.989395][T27256] arch_do_signal_or_restart+0x8f/0x7d0 [ 1845.996481][T27256] exit_to_user_mode_loop+0x84/0x110 [ 1846.003314][T27256] do_syscall_64+0x3f6/0x4c0 [ 1846.009463][T27256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.016909][T27256] INITIAL READ USE at: [ 1846.021220][T27256] lock_acquire+0x179/0x350 [ 1846.027709][T27256] _raw_read_lock_irqsave+0x74/0x90 [ 1846.034885][T27256] kill_fasync+0x138/0x510 [ 1846.041283][T27256] lease_break_callback+0x23/0x30 [ 1846.048295][T27256] __break_lease+0x674/0x1810 [ 1846.054946][T27256] vfs_truncate+0x4d3/0x6e0 [ 1846.061425][T27256] __x64_sys_truncate+0x172/0x1e0 [ 1846.068424][T27256] do_syscall_64+0xcd/0x4c0 [ 1846.074913][T27256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.082783][T27256] } [ 1846.085260][T27256] ... key at: [] __key.0+0x0/0x40 [ 1846.092351][T27256] ... acquired at: [ 1846.096128][T27256] lock_acquire+0x179/0x350 [ 1846.100789][T27256] _raw_read_lock_irqsave+0x74/0x90 [ 1846.106143][T27256] kill_fasync+0x138/0x510 [ 1846.110719][T27256] mousedev_notify_readers+0x6d8/0xa30 [ 1846.116327][T27256] mousedev_event+0x84e/0x1490 [ 1846.121241][T27256] input_handle_events_default+0x119/0x1b0 [ 1846.127214][T27256] input_pass_values+0x74e/0x880 [ 1846.132302][T27256] input_handle_event+0xf00/0x14d0 [ 1846.137566][T27256] input_inject_event+0x1e8/0x3b0 [ 1846.142742][T27256] evdev_write+0x457/0x750 [ 1846.147308][T27256] vfs_write+0x29d/0x1150 [ 1846.151785][T27256] ksys_write+0x1f8/0x250 [ 1846.156262][T27256] do_syscall_64+0xcd/0x4c0 [ 1846.160921][T27256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.166964][T27256] [ 1846.169263][T27256] [ 1846.169263][T27256] stack backtrace: [ 1846.175129][T27256] CPU: 1 UID: 0 PID: 27256 Comm: syz.3.5463 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1846.175148][T27256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1846.175157][T27256] Call Trace: [ 1846.175162][T27256] [ 1846.175168][T27256] dump_stack_lvl+0x116/0x1f0 [ 1846.175189][T27256] check_irq_usage+0x7dc/0x920 [ 1846.175212][T27256] ? check_path.constprop.0+0x24/0x50 [ 1846.175233][T27256] ? __lock_acquire+0x12bc/0x1ce0 [ 1846.175252][T27256] __lock_acquire+0x12bc/0x1ce0 [ 1846.175275][T27256] lock_acquire+0x179/0x350 [ 1846.175295][T27256] ? kill_fasync+0x138/0x510 [ 1846.175316][T27256] _raw_read_lock_irqsave+0x74/0x90 [ 1846.175335][T27256] ? kill_fasync+0x138/0x510 [ 1846.175352][T27256] kill_fasync+0x138/0x510 [ 1846.175371][T27256] mousedev_notify_readers+0x6d8/0xa30 [ 1846.175391][T27256] mousedev_event+0x84e/0x1490 [ 1846.175403][T27256] ? __pfx_mousedev_event+0x10/0x10 [ 1846.175414][T27256] ? lock_acquire+0x179/0x350 [ 1846.175435][T27256] input_handle_events_default+0x119/0x1b0 [ 1846.175458][T27256] input_pass_values+0x74e/0x880 [ 1846.175474][T27256] input_handle_event+0xf00/0x14d0 [ 1846.175488][T27256] ? _copy_from_user+0x59/0xd0 [ 1846.175505][T27256] input_inject_event+0x1e8/0x3b0 [ 1846.175521][T27256] evdev_write+0x457/0x750 [ 1846.175537][T27256] ? __pfx_evdev_write+0x10/0x10 [ 1846.175552][T27256] ? bpf_lsm_file_permission+0x9/0x10 [ 1846.175570][T27256] ? security_file_permission+0x71/0x210 [ 1846.175589][T27256] ? rw_verify_area+0xcf/0x6c0 [ 1846.175609][T27256] ? __pfx_evdev_write+0x10/0x10 [ 1846.175623][T27256] vfs_write+0x29d/0x1150 [ 1846.175638][T27256] ? __pfx_vfs_write+0x10/0x10 [ 1846.175650][T27256] ? find_held_lock+0x2b/0x80 [ 1846.175666][T27256] ? __fget_files+0x204/0x3c0 [ 1846.175682][T27256] ? __fget_files+0x20e/0x3c0 [ 1846.175699][T27256] ksys_write+0x1f8/0x250 [ 1846.175712][T27256] ? __pfx_ksys_write+0x10/0x10 [ 1846.175727][T27256] do_syscall_64+0xcd/0x4c0 [ 1846.175748][T27256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.175761][T27256] RIP: 0033:0x7fbcbc38eb69 [ 1846.175772][T27256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1846.175785][T27256] RSP: 002b:00007fbcbd135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1846.175799][T27256] RAX: ffffffffffffffda RBX: 00007fbcbc5b5fa0 RCX: 00007fbcbc38eb69 [ 1846.175808][T27256] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000003 [ 1846.175816][T27256] RBP: 00007fbcbc411df1 R08: 0000000000000000 R09: 0000000000000000 [ 1846.175824][T27256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1846.175832][T27256] R13: 0000000000000000 R14: 00007fbcbc5b5fa0 R15: 00007ffe429fa038 [ 1846.175845][T27256] [ 1846.249775][T27240] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1846.251478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1846.457428][T22825] Bluetooth: hci6: command 0x0c1a tx timeout [ 1846.472189][T27240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1846.478541][T27240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1848.499911][T14324] Bluetooth: hci4: command 0x0c1a tx timeout [ 1848.500589][T22825] Bluetooth: hci2: command 0x0c1a tx timeout [ 1852.660953][ T1298] ieee802154 phy1 wpan1: encryption failed: -22