last executing test programs: 7m10.976022854s ago: executing program 4 (id=94): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x1ff}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20e00, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0xff) 7m10.922612929s ago: executing program 4 (id=95): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(r0) ptrace$getregset(0x4204, r1, 0x3, &(0x7f0000000480)={&(0x7f0000000380)=""/246, 0xf6}) r2 = syz_pidfd_open(r0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000c0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000008c0)={0x3, 0x6}) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001d000000000000008100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000208000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000f1cdedc3692e08a534c26d807b363eac68b84792d47bfa7a733e7d99fae9841fdd5dcb09356cc4e6905f6624d0cd8a4f3c4f258a41322a44e239c772c079574e2c559c2cb5eda8d9ae7b90e6191ec23125ed89890b19c3bb6379e4fcf053c49871493f790a741a49a4cf32668bdfab121e7db585d1bc029bd77b6948294fe162d3d23e8b99c5d3d9054538f5e470dbda2c6aed37471cf8b09a1e953ae0320311cb17"], &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, 0x0) 7m6.284013245s ago: executing program 4 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000680)=@newtaction={0x44, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x4000000, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x44}}, 0x0) 7m5.798378064s ago: executing program 4 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) 7m4.959976898s ago: executing program 4 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044891}, 0x4800) 7m4.199878512s ago: executing program 4 (id=115): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f00000002c0)=0xfff, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000080)) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x1, 0x7ff, 0x3}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EVIOCGMASK(r10, 0x5b04, 0x0) r11 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 7m3.325101369s ago: executing program 32 (id=115): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f00000002c0)=0xfff, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000080)) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000180)={0x1, 0x7ff, 0x3}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EVIOCGMASK(r10, 0x5b04, 0x0) r11 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 1m12.475200099s ago: executing program 0 (id=1245): pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) getgroups(0x1, &(0x7f00000029c0)=[0xffffffffffffffff]) r5 = accept4$llc(r3, &(0x7f0000002a00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000002a40)=0x10, 0x80000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001600)="e2a8200576b577db37cf86271f2b814fea6f84206d99c1775419dd7885015d669e5f987e389dc3318b69fb5006cede655b936a7340345c0cc9d54ddf705c1059f0be1fa1238cefdb679e2ab95b925dc76f8b77b658e3a58456af6cec88b080c5ce6f639665d20172f1f8ad8b17be2a4846d370cd89ff41b978d446c73003ea2418c3114d806d2304d0e3db2eb717c3d631d9e39d6fbeb915f5eac7379f040f97db81369c115942452fce5101ae100f102d29a00d3cda6534d79c3f8433068f7cc24cc22b3dc86acb42b588a6bac6b74ac962401a740960b87e3dbb133b8c50c4332bd9788f4166eeedd81c1b881c8e9642eef4140a1782a4929fb517e552f68e7bda3a14afd7e8ec96c75ccd353f3b9747be833a75f02679d7b707f965490437da7d44a3ddc00c1c9f75c1879fceacd4e8bc4bcdd15aeacbe0a33a79edec76be26f574155aa7737b39039dd3365ccd9895d65c6aee0212080e19cad9d8fef22848959785b3f9ae65cdfb730091a1deb23b66a1009f20fd9b1eb8ef60c6fd08929ff9fe750571babbafc5c6acfdd17eea0421da0b70eb33200a0753b13e6f9845c20510c8a1297fc658e3a381f327c03f85fe8b0fda89f64b3a372760811073cf888367c21ee2ae12d5f6776bf9961fdfb0c6cc2ff764384d9f5d742b2a104218d71d127d7f7617eac8d547c3dbc458fa11dfe3c4db1895b04f53a3a7a2050c326d8d89b7d108dec58bfe75c5e59a89ba2066f8249324319c9c810996ad2cedd965b70af316d85741c736ef5f7e01a4684b242f051ae7a77af539f367927758637a67da127e5e164d124bd19a5ac659399e22e5f6f9d0e90274435b4bccd967af41b5dbd32065de4ad89541ea055a4edc98ccb5041f7571027eab73f902ee087c11d4e4d99e635288051908f52fa5626426096c3ea9617e8490fda537090d2b6ea923c2fe985fc69bbe35c0af439b3607d039bc69ab46add676c5d02c3273ec8eafe995f1e1dcfbe744e8c23e1fac58baa2f851f1c15f9b26e71cbda86fe4bb37a2c1144c9d1a6909317b8b2b42eee673f1baba823b398b0cd48f0ce7c8eb5c337b487cf51d1e5ec47fa15451b7b1163a5c0d9bc592363cb662cb83a9cb75174b06e29236ecfef074522428c35c6477b63ba5d27efd7690d67f834a2aebcec5d894249dbf4680d5945312547c84200e9a526e7ce5290103a9edc862b7ed5154d514d93795cee1bd7fc9d111908a0871ae6ec4f051c346deb501df8ea7330a922859dc6f92c52b9210773f3313c8aec3f0395da1b634882e322c4092f5e2a56488599a1fc6e51cdcb7872ed1dc94d6a6c144058eb000aa68d5b5890f99ae36c37e9c67bf706259ab7bd1eac661ce102628f450ea3412de771a9f3448893c273ff8b3a06d57637b1a4becaec9ba79edcfc0587ccd8437d13b7410852cca9bda33a87902825cacbb00e4f07811000e882ae1320757577e146a98fca602d6612b819ebec4cfb9a8414912add9377d40ea54c712d211899b244c90d1c74f52d49f7c4fd44e2252f4146158abc74726ef44c8d7b878e878d7dc3125e8f6b9f78291537b28db264ded08c78fa8638d4851760b743c0cfdcabaff7e5901d267bebd77e2d66678b806291b88a6ebf03e0ca8d872dd4d89e18a7a6ca688496ba7c58a20113e57137020154ad6417efddaedbb3bdf02ab3e911897cf1e51fae3799eb6fc86e87720d9af16def4406af77315f4fc125b4b526cdfe5d45b2a2645e3c850d68c38fcd929889864677d33a829782f9f8c650120df17b9e100ab4892e6d2c8a55c78e41b7b65e4fe6dfaa9d1347065d1e203e2366b2da35a9276aac0a44373fb17d9cbc7f939337afbae80bfe52182bae523970fb591194467302e6a81a661fb22f689261fafa4042e7d0b5df29141ba126e098fd15e8b802135e8b7ae0f114c784420346d069736a1b0c73c4871a898cbaf89c4a1b9842abf295b2b0c59be69c21156ce43e9c9aa73d07e2996c422342e1e7c38f7b57cbaf1072a361b2adb6eb00601ea48280a5001f99a9ee82ce699bb64acd3f9992118f3c40ae1b5c83f1011f3dce2d45ffa544ee8220b7303a627aaf4ac67729df5f494f61ff99ea71f86256c38bbe5320b77e4d36a5a58ab7614c6c5969d8f5d11c79793bdc69d0b1e9427e50021e7c533969887da196e7aa96e66a17e72cc7b104cd32283b96be2a629507f6ba2a6ce864ed56361712273539a230b2ab5fc0b18ab949be2c9492249c1b299c40567190d348f54dff724fb9431bc7a7356aa5780df783f0238278d6c74638c708cec7d1a8b6512aef9b7bc983c2eaa4c778ceb1a01cf9d57c912aa9c2a378974597e49face3c6c0392a84c441330d5e36858de0e153a4597ce7c6a639f83036c9e8aebcade139cce715c0b6ea345687eea631f043b75e9f053956abd3915e440d321e6a2e8a89b279829073e4a844d00d9ad8e5f79ae50bb8aca307b88fe116c656d9cb87e9b7fe65d054680926372f519455f9fb1ff2e3e111fe3cc88521ed906bda4a7e708159198b45947fd96d32491397e9452e7936a53b724772f57dec15721e25a058c3e19f7ce5fdeb8849bd1d8818ca2e278fca845397249e0d31fe4533d94707f29c7430c4279c1d527b4b9a41c20fa0de0d7e6c5caeda0f0a9a095eebc8e55eed9221036a88d5f4e7846c2dcb98fd8ac0210d3523d2bb7af16f97145b1bf6515b04f5d3deb9564814ece992aea978d62fe6bd784380a486609b9fb0218fce23c9246a28a60bd25760e8d933efd166cec14fc547d816d57e6e8659decf0fa55a5ec3d2638c43e0288e99ea8e18ca510621203c733f1e870015cdb1b43c37638d24a2c7a524eed65aaa77b49641aea56aa85c5b50188e0b53099645c3d4250afa0ab9acc263d057c88edfff2d29fdfbd9bab13f64760f36958f173b5f8f034d3e33a099fde575e4c2223034534f417d7eefbac37b89fede50325bc57b70a8c0487b5e25601f0b08610a669bc74b04f5b0713e68de018600de9bb27d5a16950b69295baf0553f735b07912813616accdb29105ddb7c194eb6afcde4e869aa40ddad106481f5c690c6dabb40ae6d51c96bfab19319a65f3557171b12d30043f8cc1cb7dd63fc7fcc3b04e07d10a65998dc5b7b957eca18cc3289027e197fbb17a2d1fec2f50c3919a9859035dd2ad70afc2543440739e2616839115ef7272b87734dcf15956f8035fba1d63f437422d18b7318e1faf6bdb28ce9ae131ad44fe4c869475437120cf684fa99184ebf5d468b258a9ced6191fb3f926d2dd213b942c86537d3ab204e9f3deda6f24c63864fad8133f694690ed3e74b339068b3d0ad95726ee10a3dff1f8048761bd69c17a93e03b5f3f476e4bd39d82f806f7a185836631da47f4139605ea4bcdfb80f1ffda39d25000da879b7a3b2e553803543c4d167682a55aadbf8073b4b9fbc6af54d2356aab9a9bb670f7199faa093ec01c24894c1f49f5c1f200a7eccd4b6f0203d05acf49da32de920bde5a5766bcd35af86b67e8ccc2757781babcfc55bd30e93c3a4e1d1153338f1c9c07e027a8ee93d20ad75a081f2ce47e2b608ab88e2bfb8ea72b8a699ce79c99c055bd2425c70040e1ebaba6c5bb4e2289b76415117eabbd1dd659cd1b87f64dd6d6037043fbab3ec7863b0d4b29f94832930150f5fb9caa4da69fe079c08bfa199c9c2360fdabf22f7adae48e356747d8ec67cf4839d26581b3724e3921eb45019add25818edc74aea9d821a327c614526d821530f59d5f4e27713ebdf34a3b84f1772d7a944f2e1dea7c5de6506c6d9c6b62b87754c1ab2cd139fe2f498c1fc2df7a357c6f7f9d4d83901ba9a6cee201702b614443b5dc95b7b4fd5b7bc2d09c5a6a2752041d7d09b67e5f3e2a145284e0db8d7d69910d997145a09e5750d28e98fb82e0613ec41d40862c6dbc4fecc84002c70cc575537d1408e47e128265ffec9dcabcbda8bd5a1501ba2199bb4ce7d826c789cf44d608ab338848527e76b2b1990c00d2f8c8dcf9f5ba80bd229e96ea23e61dc49b7d82fbc6aeab71308cd9587283d3ae72c1773efff6e87d2046177d90d3658e166333ad9a8a50595e35d2ba1e15144686690a0706e36ef89a2aeea31fc92b55f78edd4868be3ab2dbbf3b254aa350c51213b2cb622343a7f72915f4163d55df9f17415d43c2eed38ed110c571fde5722e28c21ae1ddce113180a7248ce406e7035fd89cc2e779f57a5c74f9771302c9d72c1e700fa910e171ad1c6a55fb1951ee474f69b758d6c9a44f70ea28dee1b9a6b7841c26904e5de7d4873884b2223533743ec8db11e2dea3597c7249418728ea0e9f9c5dfea670132a52bd280cccc09e038c93ff3498b3a589973f3ee39ae4b7b03de177f5fdcfd43923bf07563cfa1f3316ea1b48fe0fd9be968711dcc4b1a69644dd03e5db9fef6bed6410f0afcf3d19fd01a89cde8506f09bc4a1c69a75df085edf5460459e7be7ed46df3f83bff3943f63c4227b55467100f21363b4d694cf150855a3e833fb1e424c8630aefd7f6fca42abdbf3dfa200c5a217773b01d1ce922c31c1f8561b57cd8894ba37c7e7bfec44591b0fa956332b845a0e72d35ba1f9b0ce760f4009dcc9f71ea808a02915438fbecd9c6b2d06ae8387c08f588ffc21cbb7ada9433730bae3929023b364d388ce0a55e9ca6daaa4017df12191d270f7dee474c8a1b0b4d997d39d854cf58fc64499a97a7940bf84bcd48a00ea4d97b9fae32d6ead062a7a72ccbc5d3bf251318382065d5e9252c21f31e7b77bce3c73ad1678f53deca20ea94e1e924a1513aa4dc171f85df5df488b2eddbe587c872efebbca3699d1eec8c29c3b85ef4bd7a38267acb2c4153ea98642d0127c88d09e352e54ef9df3dd5b24d83128404417badbb7011518b0d466b4c069ef11cef6aeca4994592415b98e66757d055165056c3cb6821b569bfe11eb9da8f0be30f1b6e327b81399d444d63b4d85647a6228fa527ef938eaff350214aa7f7d2ac3dbd0b5a2f265938432fac4c0eda02e7fc149658e9671282457f62ce1880251dc36ee7aabd8671b5b14df30f574e834f1bb1dcab66e6a32fe35ae50bae6676c6903ffd5fdaa9afc265d19dab7fdebef219d016153c9f702fc87049341ae65f3f3766d6813c0543533299b56d1642ceaeffd054ecef957a887691457ead5478c58a4b0084c77e21b88488c7087fbae4c5c091b1e33448ddc23792df7b627104daf89c92b88656c96fd38fda0ec7fda31bf9fcaa97e1c54b95c8a547d019cf2cee688f4cec1929104849e4887b570291c2bbbf8476728195014b18e202d1fe2d459c3e4c09cfc20974e8934e12b2168f45270658b05931d5a0ad546f99f025c093977315006572d33f941819845496cfc9a8e2e8c8196d2179459d5124bfbef71ed11fd8b2786fc9c8fe1d08ae7195ffa01c87b4795ab81cd5e7699294f684833d6fb6bdc30c5ae741fc82ccd08c3968071bc83ae939a05b802c4e0a1ab47466beb4358b91efd0d2e33a77aa7337551cad78c3477bdfd9ac1efe72b0957f305ff6be7cbe9b387ab185d5100f7e570223d0c2ef949a1c6e122cb1d0560fa98d5ebe406040e4b91f194069debeaa40363029ed10d4b21e5c40ee9bf583f9893eb987e233cd122734a416b5b23a28b93e707e290d6b630b9f096d3cd29675563c8a5a35abab4119db1fb4edd841a5ba2ff3ebbfd464c6d5fb035d5e81f77c13dade1d4e0a583dff5310137660a1f3ac742a010f452e8512b7fde086ff641f23", 0x1000}], 0x1, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r2, r3, r0, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r1, r3, r5]}}], 0xd8, 0x80}}], 0x1, 0x4000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r11, 0x0, 0x6, 0x0) write$binfmt_misc(r13, &(0x7f0000000140)='N', 0x1) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x22000040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 1m7.690948661s ago: executing program 0 (id=1256): io_setup(0x8, &(0x7f00000002c0)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7f66646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',k']) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffc, 0x9}}) r8 = syz_io_uring_setup(0x22ab, &(0x7f0000000900)={0x0, 0x6647, 0x402, 0x3, 0x15a}, &(0x7f0000000980), &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_CLOCK(r8, 0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfe, {0x2, 0x20, 0x80, 0x14, 0xfc, 0x2, 0xc8, 0x4, 0x400}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x9005) io_submit(r0, 0x1, &(0x7f0000000740)=[0x0]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x800) 1m6.873041494s ago: executing program 0 (id=1257): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000740)={0xd, 0x1, 0x1, "7e0efe3287fdaced3dbb72e8c46a17a55aab2500000000b482b200", 0x3447504d}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x10000, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x6, 0x10, 0x7c, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "19f04348"}, {0x5, 0x24, 0x0, 0xb99}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0xc82, 0x81}, {0x6, 0x24, 0x1a, 0x7, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xf4, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x3, 0xb}}}}}}}]}}, &(0x7f00000006c0)={0xffffff4d, &(0x7f0000000340)={0xa, 0x6, 0x200, 0xd4, 0x9, 0x9, 0x8, 0xe3}, 0xfa, &(0x7f0000000480)=ANY=[@ANYBLOB="050ffa000600100b071002046bfbffb410049555fd537007dc8f0d009442d5785dbfba843e7b0955c898fd1900d123860f56f837b455b01c6c6e0a27b8ceae15e6aa927f628f226fa53488be14995a4b0122c71816bd0669c37e2861e814bd32515d40912929b5326aeeeaaf6cf2ec6628f45edcab19525e7529ea57fb373ad9c4b3458fc4a274eee59b0aad476f2f5cb18a220cb5b613a44462c832314ef90db79156be4dabd7a543f669f154bd0d73c62baf4368dd72619396d59439a77c032d574103100b20100a0c850000000f008652000000000f3f0000cf00fe01c0c000003860000003100b"], 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x455}}, {0xe4, &(0x7f0000000580)=@string={0xe4, 0x3, "e4dbe021d92d0ab15513be03ebf19fd1a0bda0224596b1bbe7d5ace92d4de18ab2cb3ccd0388ce89b655a301e898f97df3a03db3b7ef5ce8a97e0317d70383490095159f27803ee74b5a089184438a15f2f9fbe3fc61fea8b5e6bccf01a7226383968f392e6f840af33ea68d28d1c0273bae9372885c509f2b35001bf54d2ba7ae64f16edd1c32be959a2187bf2a772ef2e15e0ded7191a97c40a0cff10893ecb8ac26c7b7788fa1af9085a59598b1057283bbcc19d377ba81b4ebce015303580b504b85e9b18120f03b36e2450749b836d69bf705361b8d533e387375990c3844ce"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000200)=@lang_id={0x1, 0x3, 0x3c0a}}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xb3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005200010030bd70f3ffdbdf251c"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x9) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'dt2801\x00', [0x3, 0x80008000, 0x9, 0x2, 0x2f, 0x0, 0x1, 0xf, 0xffe, 0x20000001, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0xa00000, 0x3, 0x3ff, 0x10000, 0x8, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8045]}) syz_open_pts(r2, 0x8000) pwritev2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x20) r5 = signalfd(r1, &(0x7f0000000900)={[0x200000000000000]}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000f00)=ANY=[@ANYBLOB="8520000001000000553101000400000018180000", @ANYRES32, @ANYBLOB="000000000000000018110300e820c4fbb74440f787c1f17bf28ddfcc83c9a2d0f8bd092d1afd772100f34d04871492d1a9ed61d57ece0aee8fe48fc21b535d3d067ec206ba93e7d9369e26219e0b9a7caa3ea413eb977b552419c2086ceaae262596dd08a3f3f7", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000183d0000020000000000000000000000186b000005000000000000000100000018260000", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000a80)='GPL\x00', 0x0, 0xdc, &(0x7f0000000ac0)=""/220, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xa, 0x8, 0xb}, 0x10, 0x298d2, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000c40)=[{0x5, 0x1, 0x6, 0x6}, {0x0, 0x2, 0x8}, {0x4, 0x1, 0xb, 0x5}, {0x1, 0x4, 0x0, 0x2}, {0x4, 0x2, 0x7, 0x3}], 0x10, 0x2}, 0x94) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)=r7) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0x1a, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x5}, @alu={0x7, 0x0, 0x0, 0x4, 0x9, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x66000000, 0x0, 0x0, 0x0, 0x401}, @alu={0x4, 0x0, 0x0, 0xb, 0x3, 0xfffffffffffffff0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000880)='syzkaller\x00', 0x8, 0x15, &(0x7f00000008c0)=""/21, 0x41100, 0x40, '\x00', 0x0, @tracing=0x19, r5, 0x8, &(0x7f0000000940)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x8, 0x1, 0x7}, 0x10, 0xffffffffffffffff, r6, 0x3, &(0x7f0000000d80)=[r7], &(0x7f0000000e00)=[{0x0, 0x4, 0x9, 0xd}, {0x2, 0x1, 0xf, 0x5}, {0x5, 0x2, 0x10}], 0x10, 0xcb}, 0x94) 1m1.786516556s ago: executing program 0 (id=1271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002c000480280001800b0001006f626a7265660000180002800900040073797a310000000008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000100000000000000000a"], 0x80}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x44, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x120b4718}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1m0.971719857s ago: executing program 0 (id=1275): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) socket(0x80000000000000a, 0x2, 0xffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) mlock2(&(0x7f000022c000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x1c, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x28) setns(r3, 0x20000) 1m0.561198716s ago: executing program 0 (id=1277): r0 = socket$netlink(0x10, 0x3, 0xf) bpf$MAP_CREATE(0xe4ffffff00000018, &(0x7f0000004440)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) listen(r0, 0x3ff) 44.74523576s ago: executing program 33 (id=1277): r0 = socket$netlink(0x10, 0x3, 0xf) bpf$MAP_CREATE(0xe4ffffff00000018, &(0x7f0000004440)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) listen(r0, 0x3ff) 25.634635496s ago: executing program 3 (id=1369): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x6, 0xbc, 0x46, 0x5, 0x5, 0xb0}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80080) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x2, 0x605, 0x2, 0x7f, 0x5, 0xe}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x80, 0x0, 'queue0\x00', 0x4}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}}]}, 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async, rerun: 32) r4 = signalfd4(r1, &(0x7f0000000300)={[0x10000]}, 0x8, 0x80000) (rerun: 32) sendmsg$kcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="040b1c3692306ae27a695bc68e2b17fafb63af32c2bb56", 0x17}, {&(0x7f0000000380)="582995fe81bf4798cbee2f4c571bad57643acd718c4f", 0x16}, {&(0x7f00000003c0)="0dcdaf6169fa9b566821c261b9382719234c71a996035d9a0200fbe0ab61d2d7c85b", 0x22}], 0x3, &(0x7f0000000440)=[{0x48, 0x115, 0xf08, "ece4b66b184cb0734bbfa72d5b66294e852771ce0cb6d55c592c8b7dac1760ba54970d084acd25e503b546506d1e8960362877"}, {0x30, 0x10f, 0x2, "e9b23116504f51f40fef096a5c4030b3c6e8936a2a881145968dc7cde1df"}], 0x78}, 0x4004840) r5 = syz_open_dev$rtc(&(0x7f0000000500), 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000580)=[{0x0, 0x1, {0x0, 0xff}, {0x2, 0xf0, 0x2}, 0xff}, {0x3, 0x2, {0x1, 0xff}, {0x1, 0xff, 0x1}, 0xfe, 0x1}, {0x1, 0x3, {0x2, 0xf0, 0x1}, {0x0, 0x0, 0x4}, 0x2, 0x82}, {0x0, 0x1, {0x0, 0x1, 0x4}, {0x1, 0xff, 0x4}, 0xfd, 0xfd}], 0x80) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r7, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xb74, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000845}, 0x40) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000780)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000880)=0xe8) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000008c0)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) setresuid(r8, r9, r11) (async) write$binfmt_script(r10, &(0x7f0000000940)={'#! ', './file0', [{0x20, '#^)'}, {0x20, '/dev/snd/seq\x00'}, {0x20, '/[^\\.[\\'}, {0x20, '([&'}], 0xa, "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"}, 0x1029) (async, rerun: 32) bind$unix(r6, &(0x7f0000001980)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x48, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x1) (async) setresuid(r8, r11, r11) (async, rerun: 32) bind(r4, &(0x7f0000001b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x1, 0x4, 0x2, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, 0x80) (rerun: 32) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000001fc0)={0x3, 0x1, 0x1e, 0x10, 0x15d, &(0x7f0000001bc0)}) (async, rerun: 64) socket$kcm(0x29, 0x7, 0x0) (async, rerun: 64) ioctl$TIOCSIG(r10, 0x40045436, 0x39) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000002000)={0x2, 0x8, 0xfffb, 0x1000, 0x12, "17a62e52d32f2a9d"}) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002080), r6) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x38, r12, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 25.544042398s ago: executing program 3 (id=1371): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) getpid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 24.609579693s ago: executing program 3 (id=1375): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x3503, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x158}}, 0x0) 24.499993391s ago: executing program 3 (id=1376): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @sliced={0xef1, [0x7, 0x5, 0x10, 0x1000, 0x4, 0xfff9, 0x400, 0x1, 0x2, 0x330, 0x2, 0xb0, 0xc000, 0xfff, 0x1, 0xff, 0x8226, 0x2, 0x101, 0x8000, 0x4, 0x1, 0x8, 0x8, 0xfa, 0x1, 0x9, 0x7, 0x1, 0x8000, 0xfff9, 0x96, 0x9, 0x2, 0x2, 0x6, 0xfc00, 0x10, 0xd, 0x4b, 0x6, 0x2, 0x1, 0x3, 0xfff7, 0xfff8, 0x3, 0x9]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)=""/175, 0xaf) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {}, 0x2}) io_uring_enter(r6, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 21.285380331s ago: executing program 5 (id=1382): openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="87631571ff55e12bb8175fba9a273c9ac014b8bed81ecc250ebe5ac107", @ANYBLOB="03a11c14204f7b3f7731b508825b24093990cd78d922f17ac0495c17c0fd1e61651bf914ec99016c1715ca1da68eacd497e461d52be9260521de4d904446998c33ec0d653e18f41f64b1ed582f0fabf30583d2245acaefaad3cd455122d6c381ce4f30eab4df71d64b", @ANYRES32, @ANYRESOCT=r3], 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x8dff, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) 20.881889443s ago: executing program 2 (id=1384): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) 20.415625202s ago: executing program 3 (id=1386): bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000240)={0x7, 0x3, 0x0, 0x2, 0x8}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x470e02, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt_acct\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000380)='./file0\x00', r3, 0x0, 0x40) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ip6erspan0\x00', &(0x7f0000000280)=@ethtool_per_queue_op={0x4b, 0xf, [0x2, 0xf, 0x6, 0x14000000, 0xff, 0x10, 0x7f, 0x5, 0xae, 0x80000001, 0x800, 0x8, 0x8, 0x4, 0x28c, 0x4, 0x4, 0x6c3, 0xffff8001, 0x7, 0x50b2, 0x7ee, 0x200, 0x5, 0xffffff80, 0x6, 0x52c, 0x7ff, 0x6, 0x3, 0x5, 0x4, 0x0, 0x3, 0x5, 0x6, 0x0, 0x5, 0x8, 0xfffffff8, 0x9, 0x4, 0x6, 0x80000000, 0x0, 0xa, 0xc7, 0x0, 0x800, 0x6, 0xda, 0x0, 0x1ff, 0x9, 0xc029, 0x4bb2eab0, 0x7, 0x2, 0x0, 0x4, 0xffffffa9, 0x7, 0x0, 0x6, 0xf29, 0x10000, 0x9cd, 0x84, 0x8, 0x7675, 0xf, 0x4, 0x9, 0x4, 0x10000, 0x1f, 0x9, 0x4, 0x6, 0x1, 0xe, 0x8c0, 0x8, 0x10000, 0x6, 0x3, 0x8000, 0x1000, 0x3, 0x9, 0x9, 0x3, 0xfff, 0xe, 0x81, 0xfffff7e6, 0x8, 0x8, 0x1, 0x8, 0x400, 0xfffff801, 0xb8, 0x8, 0xe, 0x1, 0x7, 0x6, 0xfffffffc, 0x0, 0x10000, 0x5, 0x9, 0x9, 0x1, 0x1ff, 0x8, 0x401, 0x10000, 0x4, 0x6, 0x7, 0x0, 0x6, 0x6, 0x4, 0x400, 0xfffffffc], "d0857663d3f1c81d323a61e5b4e1c18ac36a16239552c7ff87f7978e8cb605869056f5c2f02dbca0c6e42864ee83853032fcb89af5d479"}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 20.019770291s ago: executing program 5 (id=1387): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) ioctl$TIOCCONS(r3, 0x541d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x1, 0xfffffffc, 0x0, 0x3, 0xfffffffffffffffe, 0xff}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendto$inet(r4, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'vlan0\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ftruncate(r1, 0x6) getpid() 19.776536479s ago: executing program 1 (id=1388): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000240)={[{0x2b, 'net_prio'}]}, 0xa) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000000), 0x4) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x9) splice(r4, 0x0, r7, 0x0, 0x25, 0x5) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 19.769507782s ago: executing program 3 (id=1389): r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYBLOB="817755d599709add05658633542dbe665281efb28dc0b76cf6da9648a90051a10a", @ANYBLOB="59701bc7824b7396102d8e096c5bc8bc91784493f4b7f2df032c992846838c85ac78dd176830b709de647052df031e2f90e576a5e1ab0ab72b", @ANYBLOB="4285a23ce9bcbe6d98bfd38f3428a54cd7cd0ca7156906b8556f0243d50597f9f7d7277d3b2d85a1aa01dcc932e91ac8f9de3b8a1982f21bb4f27addc628a457e40b93dc78721674f5f40d71687b557a352b472a767ae3514d6c18d6a7d7e356aaab2c5fcdcef0237c58e7ea27043d2d4cde2f72bd98e71c19f2daf416b525ccf7be180e3a9ed5375efe78f73489494402b33c0c8255042d292f7fb67d55a4313608138a3b964b78d7c88537dbaa93c0ff09441c0d0c561fa8b1bbca42fbc7c36b5110e19401af08e4067410c64f5d80c34cf975d308e52c0d04d80d99a9982e9769b7e7f540400cb7bbf7cf4d0c9bd839f354c654bd3d", @ANYBLOB="33fb46227dd16062fd9a7c00304f6c83a949bc4ebfbe1e56d3d29a6eeba66f639a6b8f51115dcc7b7a1ca59531e24af5145d497f4a529a9e3dc73a93cd4f3411357ed68822ac7fb1fcb07740214119e38b935c9f2d99882f23290900c160b6e3d200215a15f34c686fb265f3e47e2d104ca8700f76dfbdc4ad2f42a79510a52d13e750fe012fe6b20907e00b97043f8e069728ff241b0b237206b20e4688eabb585d6140be9871145fcc4d72879d4af33d52b82598c1d90ac9a59fdd533a6c36a154c305c16c0979", @ANYBLOB="18f8d1aaebb0078326d6759dc98c7e85e71838845a75f3d48810f971e3e24c5bfdff03000000000000170600b56f78db3e75a850a76fa1a7944644ff01000050071d7b8ec8115ff4d6203b07425a25fb4c2f1e91291910a31b8ebca0b6a93cda2be4d00e06690af1486a17c18ebdb5212113bace59d0c1fad13b71bc9cdd7cc6706a9500000000000000", @ANYRES8=r0], 0x68}}, 0x4002844) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd619d4a4400442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00000001010088a8000086dd86dd0bfd6e3f04537c1985100100000000007b40080022eb0000000223022309020000000000000500ebb41b0800655800000000"], 0x0) r3 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000674000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) close(r2) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = syz_clone(0x26b50600, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='afs\x00', 0x32a0012, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r7 = openat$cgroup_ro(r4, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000080)) waitid(0x2, r5, &(0x7f0000000600), 0x8, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f0000000500)="b40364f44317ebb1dbc259b3a112dccf9552ee58fe15049034fe0ea7ff8e552c8a2382635ae32c76b8d7fab4e42cb1b475005cc0085076211291c57f139027a389d351fa9d7d8a5d3f89c51eedeca558c93d75fd65da20e333d0db1411bf5455468592aae96ef7f4e1b9c7ecba2df83a12af098b6a3325113bf391867e1f2cf07dfd81bd131a0564717ad006832380af85b403adcdc9d3d5dfc7a0f8e7cafd2448a1d2b670caec0eb8d4b013d9d09c5f4054c70db906482c4d4470d680375f791adf72cde32fbd28be75b29126e21cd2fae7b4ed1a41e741d8405f7cf0dcb1bbcf952bae5864a8", 0xe7}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 19.678373422s ago: executing program 1 (id=1390): capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000001c0)={0x6, 0x6, 0x2, 0x2, 0xffffffff, 0x40}) socket(0x1c, 0x5, 0x8000) r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x40488c1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a5", 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x0, 0x2, 0x40000333}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x3, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0xc, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='debug', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x5, 0x40}, &(0x7f0000000080)=0x90) 19.529056867s ago: executing program 2 (id=1391): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002c000480280001800b0001006f626a7265660000180002800900040073797a310000000008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000100000000000000000a"], 0x80}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x280bc3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x44, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x120b4718}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 18.745371843s ago: executing program 5 (id=1392): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 18.697027054s ago: executing program 1 (id=1393): syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x181000) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000019000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 18.6911063s ago: executing program 2 (id=1394): pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x80000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e9e, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000041c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT=r0, @ANYBLOB="ad432bbd7800000000000d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x49e8648f) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="90020000000000000008000000000000040000000020000000000000000000000900000000000000020000000000000000000000fcffffff0000000000000000000000000000000000000000000000000500"/93, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="02200000000000000000000000000000000000000800000000000000010000000000000000000000000000000200000000000000030000000000000002"], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r10 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000500)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002640), &(0x7f0000002680), &(0x7f00000026c0)=0x0) getgroups(0x9, &(0x7f0000002700)=[r4, 0xffffffffffffffff, r5, r8, r9, r10, r11, r12, r13]) r14 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r14, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r14, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r14, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 18.535583148s ago: executing program 5 (id=1395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000040)={{@local, 0x7}, 0x2, 0x9}) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = dup(0xffffffffffffffff) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x7, @none, 0x5}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$USBDEVFS_RESET(r3, 0x5514) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40090) 18.440567094s ago: executing program 5 (id=1396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000050) 18.438021785s ago: executing program 1 (id=1397): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f0000000400)=""/9, 0x9}], 0x5}, 0x1}], 0x2, 0x2023, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 18.366667348s ago: executing program 2 (id=1398): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x3503, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x158}}, 0x0) 18.366262776s ago: executing program 5 (id=1399): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) syz_usb_connect(0x6, 0x24, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16], 0x0) symlink(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x100000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x144) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x26100, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000300)={0xffffffff, 0x8, 0x3, 0x1, 0x22}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="080026006c0900000800a00033f4ffff08002700000000000500190109000000080026008009000004006c00"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x8000, 0x8201, 0x90}, 0x10) sendmmsg$sock(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x774}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={r6, 0x74, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x2, @remote, 0x9}, @in6={0xa, 0x4e24, 0x1, @loopback, 0x9}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x7467}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 18.364878264s ago: executing program 2 (id=1400): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_usb_connect(0x6, 0x24, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)=""/175, 0xaf) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {}, 0x2}) io_uring_enter(r7, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 16.601591852s ago: executing program 1 (id=1401): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa320180c200000208"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x0, &(0x7f0000000180)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000840)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000a7e000/0x13000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x78, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x5c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x12, 0x0, @random="ca18f7ebc02f05dc17192039277c"}, {0x1f, 0x0, @random="9c5771dda814fab6b1601a00a1cf1ce8ce154349c55de272285f26"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) 16.44634368s ago: executing program 1 (id=1402): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0xc1}]}}, 0x0, 0x26, 0x0, 0x6, 0x9}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000380)='y\x102\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xe4\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbdk\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xa9\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc&\x05$o\x8f;\x8e\x13M\xef\xa8\xc8\xb7a\b=\'5r|\xa3}F\xce\x10\x99\xd1\x19\xbb\xcd\xc5\x9a\x91`b\x8c\xbf*D\xb4\xa7\'\x0e\xf2\x80\xef)\x94O\x88&\x0e\xaa\x1a\f\xbf\x06\xc8\xc9)\xb6\x0e\xe3\b\x00\xaaE;\xe1F\xa9\xfc\xbd\xe1\xb4Q\xa3.?\xa5\x16\x97\x02\xd7!wt\xc9\xe4(\xb4Q\xf5\xb2:\xcf\xe7\x0f6/\xec2\xa48\xf7\x82\xc0~F\x93\xa4\xf0\xb8\xc9\x98\xee\xd0e\xac\xd3G\x86\xca\xa6p\x81\xd5\xb5\x7fX\x953\x81\xa3JS\xdbg\x9ezq\xb1\x00{4W}9E\xd5\xe3\x8a\xa9\x187\xd7T6\"\x11+\xf4\xed\x05 7\x91\xd8\x8b\xf5 \x85/\xd5B\xd5\xa2\x94\x98\xc7\x8e\x06\x1b\xc4Ipn\b\xba\x93@38\xcab\xd7f\x8a6\x95\xab\xb9\xc3t\xc3\xca\xa4E^z\x8f\xc2\xab\x98\n\x97\x8f)\xad\x12\x90\v)\xb3G!\xfbS{\xd5\x00\x13\x8eH(k\xc2\xdd}\xdf\x94\xdfv\x88\ayy\xf1\x81h\xed\x1e\x8fV\xce\x8aJ\xfe\xa4h!\xd6\xfew\xc2\xac\xe9\xb79.\x12\xd0\x1b\xab\xe4\xb4\xb6\x8dsW\xd5/c\xcb\xc8B\x9c\x1454(z\x8f\xedK\xf0\x06@\xb6\x98\xe3\xd9\x9f\xdd\xa1\x1b\x93t\x8f\x849\x91\x86\x1a\x9e\n\x1fzV\"^\xadKu\xff\xe7\x9b\xd6Z\xfa\x02\xca\x95\xb1\x8a\x06Al\xdb5&Q~SiHZ\x06\xc7\x8b\xbc\xb5\xdfu\xb0/m\xf8\x84Z\tn\xeet\xf2', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) r8 = fcntl$dupfd(r7, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) syz_usb_connect$cdc_ncm(0x197f514832b3151b, 0x175, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x5, 0xe, 0x20, 0x3f}, 0x3d, &(0x7f0000000200)={0x5, 0xf, 0x3d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "960d77a3bcc5ec4bc0216d1b99d100b7"}, @ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0x6, 0xf880, 0xfe01, [0x0, 0xf, 0xc000, 0xff3f30, 0x30, 0xff0030]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41e}}, {0x53, &(0x7f00000002c0)=ANY=[@ANYBLOB="530357226a16e9461752880a1a9116cb11245ce7c4b49cfe6f4efcb6e40788730d03691872a3e8a04353df46906453cc4792f93a4f2de1a3446d1578890f828ee82ae7b3d5027ae6d4c392dca21982cf237140"]}]}) bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_usbip_server_init(0x4) 15.283419024s ago: executing program 2 (id=1403): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002c000480280001800b0001006f626a7265660000180002800900040073797a310000000008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000100000000000000000a"], 0x80}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x280bc3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x44, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x120b4718}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 4.426089794s ago: executing program 34 (id=1389): r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYBLOB="817755d599709add05658633542dbe665281efb28dc0b76cf6da9648a90051a10a", @ANYBLOB="59701bc7824b7396102d8e096c5bc8bc91784493f4b7f2df032c992846838c85ac78dd176830b709de647052df031e2f90e576a5e1ab0ab72b", @ANYBLOB="4285a23ce9bcbe6d98bfd38f3428a54cd7cd0ca7156906b8556f0243d50597f9f7d7277d3b2d85a1aa01dcc932e91ac8f9de3b8a1982f21bb4f27addc628a457e40b93dc78721674f5f40d71687b557a352b472a767ae3514d6c18d6a7d7e356aaab2c5fcdcef0237c58e7ea27043d2d4cde2f72bd98e71c19f2daf416b525ccf7be180e3a9ed5375efe78f73489494402b33c0c8255042d292f7fb67d55a4313608138a3b964b78d7c88537dbaa93c0ff09441c0d0c561fa8b1bbca42fbc7c36b5110e19401af08e4067410c64f5d80c34cf975d308e52c0d04d80d99a9982e9769b7e7f540400cb7bbf7cf4d0c9bd839f354c654bd3d", @ANYBLOB="33fb46227dd16062fd9a7c00304f6c83a949bc4ebfbe1e56d3d29a6eeba66f639a6b8f51115dcc7b7a1ca59531e24af5145d497f4a529a9e3dc73a93cd4f3411357ed68822ac7fb1fcb07740214119e38b935c9f2d99882f23290900c160b6e3d200215a15f34c686fb265f3e47e2d104ca8700f76dfbdc4ad2f42a79510a52d13e750fe012fe6b20907e00b97043f8e069728ff241b0b237206b20e4688eabb585d6140be9871145fcc4d72879d4af33d52b82598c1d90ac9a59fdd533a6c36a154c305c16c0979", @ANYBLOB="18f8d1aaebb0078326d6759dc98c7e85e71838845a75f3d48810f971e3e24c5bfdff03000000000000170600b56f78db3e75a850a76fa1a7944644ff01000050071d7b8ec8115ff4d6203b07425a25fb4c2f1e91291910a31b8ebca0b6a93cda2be4d00e06690af1486a17c18ebdb5212113bace59d0c1fad13b71bc9cdd7cc6706a9500000000000000", @ANYRES8=r0], 0x68}}, 0x4002844) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd619d4a4400442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00000001010088a8000086dd86dd0bfd6e3f04537c1985100100000000007b40080022eb0000000223022309020000000000000500ebb41b0800655800000000"], 0x0) r3 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000674000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) close(r2) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = syz_clone(0x26b50600, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='afs\x00', 0x32a0012, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r7 = openat$cgroup_ro(r4, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000080)) waitid(0x2, r5, &(0x7f0000000600), 0x8, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f0000000500)="b40364f44317ebb1dbc259b3a112dccf9552ee58fe15049034fe0ea7ff8e552c8a2382635ae32c76b8d7fab4e42cb1b475005cc0085076211291c57f139027a389d351fa9d7d8a5d3f89c51eedeca558c93d75fd65da20e333d0db1411bf5455468592aae96ef7f4e1b9c7ecba2df83a12af098b6a3325113bf391867e1f2cf07dfd81bd131a0564717ad006832380af85b403adcdc9d3d5dfc7a0f8e7cafd2448a1d2b670caec0eb8d4b013d9d09c5f4054c70db906482c4d4470d680375f791adf72cde32fbd28be75b29126e21cd2fae7b4ed1a41e741d8405f7cf0dcb1bbcf952bae5864a8", 0xe7}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 3.002927116s ago: executing program 35 (id=1399): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) syz_usb_connect(0x6, 0x24, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16], 0x0) symlink(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x100000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x144) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x26100, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000300)={0xffffffff, 0x8, 0x3, 0x1, 0x22}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="080026006c0900000800a00033f4ffff08002700000000000500190109000000080026008009000004006c00"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x8000, 0x8201, 0x90}, 0x10) sendmmsg$sock(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x774}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={r6, 0x74, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x2, @remote, 0x9}, @in6={0xa, 0x4e24, 0x1, @loopback, 0x9}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x7467}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 492.121029ms ago: executing program 36 (id=1402): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0xc1}]}}, 0x0, 0x26, 0x0, 0x6, 0x9}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000380)='y\x102\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xe4\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbdk\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xa9\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc&\x05$o\x8f;\x8e\x13M\xef\xa8\xc8\xb7a\b=\'5r|\xa3}F\xce\x10\x99\xd1\x19\xbb\xcd\xc5\x9a\x91`b\x8c\xbf*D\xb4\xa7\'\x0e\xf2\x80\xef)\x94O\x88&\x0e\xaa\x1a\f\xbf\x06\xc8\xc9)\xb6\x0e\xe3\b\x00\xaaE;\xe1F\xa9\xfc\xbd\xe1\xb4Q\xa3.?\xa5\x16\x97\x02\xd7!wt\xc9\xe4(\xb4Q\xf5\xb2:\xcf\xe7\x0f6/\xec2\xa48\xf7\x82\xc0~F\x93\xa4\xf0\xb8\xc9\x98\xee\xd0e\xac\xd3G\x86\xca\xa6p\x81\xd5\xb5\x7fX\x953\x81\xa3JS\xdbg\x9ezq\xb1\x00{4W}9E\xd5\xe3\x8a\xa9\x187\xd7T6\"\x11+\xf4\xed\x05 7\x91\xd8\x8b\xf5 \x85/\xd5B\xd5\xa2\x94\x98\xc7\x8e\x06\x1b\xc4Ipn\b\xba\x93@38\xcab\xd7f\x8a6\x95\xab\xb9\xc3t\xc3\xca\xa4E^z\x8f\xc2\xab\x98\n\x97\x8f)\xad\x12\x90\v)\xb3G!\xfbS{\xd5\x00\x13\x8eH(k\xc2\xdd}\xdf\x94\xdfv\x88\ayy\xf1\x81h\xed\x1e\x8fV\xce\x8aJ\xfe\xa4h!\xd6\xfew\xc2\xac\xe9\xb79.\x12\xd0\x1b\xab\xe4\xb4\xb6\x8dsW\xd5/c\xcb\xc8B\x9c\x1454(z\x8f\xedK\xf0\x06@\xb6\x98\xe3\xd9\x9f\xdd\xa1\x1b\x93t\x8f\x849\x91\x86\x1a\x9e\n\x1fzV\"^\xadKu\xff\xe7\x9b\xd6Z\xfa\x02\xca\x95\xb1\x8a\x06Al\xdb5&Q~SiHZ\x06\xc7\x8b\xbc\xb5\xdfu\xb0/m\xf8\x84Z\tn\xeet\xf2', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) r8 = fcntl$dupfd(r7, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) syz_usb_connect$cdc_ncm(0x197f514832b3151b, 0x175, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x5, 0xe, 0x20, 0x3f}, 0x3d, &(0x7f0000000200)={0x5, 0xf, 0x3d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "960d77a3bcc5ec4bc0216d1b99d100b7"}, @ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0x6, 0xf880, 0xfe01, [0x0, 0xf, 0xc000, 0xff3f30, 0x30, 0xff0030]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41e}}, {0x53, &(0x7f00000002c0)=ANY=[@ANYBLOB="530357226a16e9461752880a1a9116cb11245ce7c4b49cfe6f4efcb6e40788730d03691872a3e8a04353df46906453cc4792f93a4f2de1a3446d1578890f828ee82ae7b3d5027ae6d4c392dca21982cf237140"]}]}) bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_usbip_server_init(0x4) 0s ago: executing program 37 (id=1403): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002c000480280001800b0001006f626a7265660000180002800900040073797a310000000008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000100000000000000000a"], 0x80}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x280bc3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x44, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x120b4718}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) kernel console output (not intermixed with test programs): es in process `syz.1.837'. [ 326.260283][ T30] audit: type=1326 audit(1754855649.349:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9944 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 326.295990][ T30] audit: type=1326 audit(1754855649.349:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9944 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 326.372068][ T30] audit: type=1326 audit(1754855649.349:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9944 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 326.751206][ T30] audit: type=1326 audit(1754855649.359:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9944 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 326.844415][ T30] audit: type=1326 audit(1754855649.369:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9944 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 327.049807][ T9962] cgroup: fork rejected by pids controller in /syz1 [ 329.012752][ T30] audit: type=1326 audit(1754855649.369:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9944 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 329.037053][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.647748][ T30] audit: type=1326 audit(1754855649.369:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9944 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 329.672965][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.719556][T10197] netlink: 44 bytes leftover after parsing attributes in process `syz.2.846'. [ 329.946329][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.846'. [ 330.077814][T10207] overlayfs: missing 'lowerdir' [ 330.238083][T10208] team_slave_1: mtu greater than device maximum [ 330.296360][T10208] team0: Device team_slave_1 failed to change mtu [ 330.793112][T10216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.362132][T10231] fuse: Unknown parameter 'user_id00000000000000000000' [ 331.944732][ T5901] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 332.986118][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 332.986135][ T30] audit: type=1326 audit(1754855656.079:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.093043][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 333.102094][T10447] veth1_to_bond: entered allmulticast mode [ 333.111853][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 333.136142][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.153921][ T30] audit: type=1326 audit(1754855656.099:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.181689][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.206661][ T5901] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 333.231134][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.249082][ T30] audit: type=1326 audit(1754855656.099:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.278601][ T5901] usb 4-1: config 0 descriptor?? [ 333.311197][ T30] audit: type=1326 audit(1754855656.099:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.348394][ T30] audit: type=1326 audit(1754855656.099:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.400667][ T30] audit: type=1326 audit(1754855656.099:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.530954][ T30] audit: type=1326 audit(1754855656.099:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.538889][T10514] 9pnet_fd: p9_fd_create_unix (10514): problem connecting socket: ./file1/../file0: -2 [ 333.539415][T10515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.563526][ T30] audit: type=1326 audit(1754855656.099:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.563577][ T30] audit: type=1326 audit(1754855656.099:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.563618][ T30] audit: type=1326 audit(1754855656.149:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 333.664141][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 333.670454][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 333.696067][ T5901] usb 4-1: USB disconnect, device number 33 [ 334.196022][T10327] veth1_to_bond: left allmulticast mode [ 334.828645][T10539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'. [ 334.838198][T10539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'. [ 335.519391][T10549] netlink: 'syz.3.866': attribute type 1 has an invalid length. [ 335.529151][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.866'. [ 337.310373][T10569] veth1_to_bond: entered allmulticast mode [ 337.319750][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 337.411655][T10569] block nbd0: server does not support multiple connections per device. [ 337.444658][T10569] block nbd0: shutting down sockets [ 337.709254][T10568] veth1_to_bond: left allmulticast mode [ 338.955840][T10583] overlayfs: missing 'workdir' [ 340.076393][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 340.076425][ T30] audit: type=1326 audit(1754855663.199:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10608 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7fc00000 [ 340.217393][ T30] audit: type=1326 audit(1754855663.279:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10608 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7fc00000 [ 340.529972][ T30] audit: type=1326 audit(1754855663.279:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10608 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7fc00000 [ 340.554012][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.831079][ T30] audit: type=1326 audit(1754855663.949:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 340.928609][ T30] audit: type=1326 audit(1754855663.959:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 341.068534][ T30] audit: type=1326 audit(1754855663.959:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 341.144462][ T30] audit: type=1326 audit(1754855663.959:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 341.170731][ T30] audit: type=1326 audit(1754855663.959:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 341.206334][ T30] audit: type=1326 audit(1754855663.989:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 341.304764][ T30] audit: type=1326 audit(1754855663.989:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 341.331193][ T5914] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 341.616415][ T5914] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 341.627826][ T5914] usb 1-1: can't read configurations, error -71 [ 343.281113][ T1207] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 343.401099][ T5914] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 343.509523][ T1207] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 343.519186][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.527742][ T1207] usb 2-1: Product: syz [ 343.532138][ T1207] usb 2-1: Manufacturer: syz [ 343.538525][ T1207] usb 2-1: SerialNumber: syz [ 343.584048][ T1207] usb 2-1: config 0 descriptor?? [ 343.671155][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 343.682477][ T5914] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 343.700491][ T5914] usb 1-1: config 0 has no interface number 0 [ 343.721185][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.747655][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 343.780413][ T5914] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.847240][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 343.921428][ T5914] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 343.940567][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.969803][ T5914] usb 1-1: config 0 descriptor?? [ 344.009024][ T5914] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 344.229801][ T9] usb 1-1: USB disconnect, device number 29 [ 344.293046][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 345.837782][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 345.837802][ T30] audit: type=1326 audit(1754855668.959:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 345.898774][ T30] audit: type=1326 audit(1754855668.959:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 345.922334][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.002638][ T30] audit: type=1326 audit(1754855668.959:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 346.036883][ T5914] usb 2-1: USB disconnect, device number 28 [ 346.049083][T10664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.144116][ T30] audit: type=1326 audit(1754855668.959:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 346.161706][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 346.167489][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.223848][T10672] netlink: 280 bytes leftover after parsing attributes in process `syz.5.904'. [ 346.229110][ T30] audit: type=1326 audit(1754855668.959:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 346.263218][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.902'. [ 346.277084][ T30] audit: type=1326 audit(1754855668.959:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 346.301484][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.311902][ T30] audit: type=1326 audit(1754855668.959:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 346.338586][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.507933][ T30] audit: type=1326 audit(1754855668.959:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 346.544770][ T30] audit: type=1326 audit(1754855668.959:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 346.568115][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.799133][ T30] audit: type=1326 audit(1754855668.959:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 346.826311][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.753471][T10698] bridge: RTM_NEWNEIGH with invalid ether address [ 348.382975][T10704] serio: Serial port ptm0 [ 349.929112][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.919'. [ 349.946590][T10732] FAULT_INJECTION: forcing a failure. [ 349.946590][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 349.967888][T10732] CPU: 0 UID: 0 PID: 10732 Comm: syz.1.921 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 349.967919][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.967928][T10732] Call Trace: [ 349.967935][T10732] [ 349.967943][T10732] dump_stack_lvl+0x16c/0x1f0 [ 349.967967][T10732] should_fail_ex+0x512/0x640 [ 349.967988][T10732] ? __kvmalloc_node_noprof+0x124/0x620 [ 349.968023][T10732] should_failslab+0xc2/0x120 [ 349.968044][T10732] __kvmalloc_node_noprof+0x137/0x620 [ 349.968074][T10732] ? fuse_dev_splice_write+0x16f/0xa60 [ 349.968108][T10732] ? fuse_dev_splice_write+0x16f/0xa60 [ 349.968131][T10732] fuse_dev_splice_write+0x16f/0xa60 [ 349.968165][T10732] ? __pfx_fuse_dev_splice_write+0x10/0x10 [ 349.968196][T10732] ? get_pid_task+0xfc/0x250 [ 349.968220][T10732] ? bpf_lsm_file_permission+0x9/0x10 [ 349.968243][T10732] ? security_file_permission+0x71/0x210 [ 349.968271][T10732] ? rw_verify_area+0xcf/0x6c0 [ 349.968298][T10732] ? __pfx_fuse_dev_splice_write+0x10/0x10 [ 349.968325][T10732] do_splice+0x1478/0x1fc0 [ 349.968346][T10732] ? __lock_acquire+0x62e/0x1ce0 [ 349.968404][T10732] ? __pfx_do_splice+0x10/0x10 [ 349.968421][T10732] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 349.968441][T10732] ? find_held_lock+0x2b/0x80 [ 349.968465][T10732] __do_splice+0x32a/0x360 [ 349.968487][T10732] ? __pfx___do_splice+0x10/0x10 [ 349.968515][T10732] __x64_sys_splice+0x187/0x250 [ 349.968537][T10732] do_syscall_64+0xcd/0x4c0 [ 349.968564][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.968582][T10732] RIP: 0033:0x7f16fe38ebe9 [ 349.968597][T10732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.968615][T10732] RSP: 002b:00007f16ff1f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 349.968633][T10732] RAX: ffffffffffffffda RBX: 00007f16fe5b5fa0 RCX: 00007f16fe38ebe9 [ 349.968645][T10732] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 349.968655][T10732] RBP: 00007f16ff1f8090 R08: 0000000000000018 R09: 0000000000000007 [ 349.968666][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.968676][T10732] R13: 00007f16fe5b6038 R14: 00007f16fe5b5fa0 R15: 00007ffdb1065cf8 [ 349.968701][T10732] [ 350.611707][ T5901] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 350.727118][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 350.930159][ T5901] usb 2-1: device descriptor read/64, error -71 [ 350.939469][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 350.939502][ T30] audit: type=1326 audit(1754855674.049:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.100360][ T30] audit: type=1326 audit(1754855674.049:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.136497][ T30] audit: type=1326 audit(1754855674.049:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.137323][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.173301][ T30] audit: type=1326 audit(1754855674.049:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.198734][ T30] audit: type=1326 audit(1754855674.049:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.222653][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.241166][ T5901] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 351.301564][ T30] audit: type=1326 audit(1754855674.049:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.329929][ T30] audit: type=1326 audit(1754855674.049:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.353532][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.357216][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.376868][ T30] audit: type=1326 audit(1754855674.049:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.401625][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.401630][ T5901] usb 2-1: device descriptor read/64, error -71 [ 351.409756][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 351.428998][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.520415][ T5901] usb usb2-port1: attempt power cycle [ 351.616856][ T9] usb 1-1: config 0 descriptor?? [ 351.646244][ T30] audit: type=1326 audit(1754855674.069:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.677740][ T30] audit: type=1326 audit(1754855674.069:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 351.797608][T10757] serio: Serial port ptm0 [ 351.871141][ T5901] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 352.083313][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 352.089387][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 352.821111][ T9] usb 1-1: USB disconnect, device number 30 [ 352.848697][ T5901] usb 2-1: device descriptor read/8, error -71 [ 353.211728][ T5901] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 353.343153][ T5901] usb 2-1: device descriptor read/8, error -71 [ 353.852543][ T5901] usb usb2-port1: unable to enumerate USB device [ 354.522031][T10782] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 355.293192][T10782] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 355.485644][T10784] wg1 speed is unknown, defaulting to 1000 [ 355.585076][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 355.722115][T10797] block nbd0: server does not support multiple connections per device. [ 355.736277][T10797] block nbd0: shutting down sockets [ 357.082366][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 357.082385][ T30] audit: type=1400 audit(1754855680.059:1026): avc: denied { append } for pid=10820 comm="syz.3.942" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 357.111223][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.266981][T10827] FAULT_INJECTION: forcing a failure. [ 357.266981][T10827] name failslab, interval 1, probability 0, space 0, times 0 [ 357.381214][T10827] CPU: 1 UID: 0 PID: 10827 Comm: syz.2.944 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 357.381244][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.381255][T10827] Call Trace: [ 357.381261][T10827] [ 357.381268][T10827] dump_stack_lvl+0x16c/0x1f0 [ 357.381291][T10827] should_fail_ex+0x512/0x640 [ 357.381310][T10827] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 357.381339][T10827] should_failslab+0xc2/0x120 [ 357.381360][T10827] __kmalloc_cache_noprof+0x6a/0x3e0 [ 357.381386][T10827] ? rcu_is_watching+0x12/0xc0 [ 357.381406][T10827] ? vhost_task_create+0xe5/0x2e0 [ 357.381424][T10827] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 357.381448][T10827] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 357.381476][T10827] vhost_task_create+0xe5/0x2e0 [ 357.381493][T10827] ? __pfx_vhost_task_create+0x10/0x10 [ 357.381518][T10827] ? __pfx_vhost_task_fn+0x10/0x10 [ 357.381548][T10827] kvm_mmu_post_init_vm+0x1b7/0x380 [ 357.381569][T10827] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 357.381595][T10827] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 357.381624][T10827] kvm_vcpu_ioctl+0x5eb/0x1690 [ 357.381650][T10827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 357.381670][T10827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.381692][T10827] ? do_vfs_ioctl+0x128/0x14f0 [ 357.381720][T10827] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 357.381745][T10827] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 357.381781][T10827] ? hook_file_ioctl_common+0x145/0x410 [ 357.381805][T10827] ? selinux_file_ioctl+0x180/0x270 [ 357.381828][T10827] ? selinux_file_ioctl+0xb4/0x270 [ 357.381852][T10827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 357.381875][T10827] __x64_sys_ioctl+0x18b/0x210 [ 357.381911][T10827] do_syscall_64+0xcd/0x4c0 [ 357.381933][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.381950][T10827] RIP: 0033:0x7fb08f58ebe9 [ 357.381964][T10827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.381980][T10827] RSP: 002b:00007fb0904cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.381998][T10827] RAX: ffffffffffffffda RBX: 00007fb08f7b5fa0 RCX: 00007fb08f58ebe9 [ 357.382009][T10827] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 357.382018][T10827] RBP: 00007fb0904cb090 R08: 0000000000000000 R09: 0000000000000000 [ 357.382028][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.382037][T10827] R13: 00007fb08f7b6038 R14: 00007fb08f7b5fa0 R15: 00007ffc7f719338 [ 357.382062][T10827] [ 357.829934][ T30] audit: type=1400 audit(1754855680.789:1027): avc: denied { map } for pid=10831 comm="syz.3.945" path="socket:[23574]" dev="sockfs" ino=23574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 357.834023][T10831] delete_channel: no stack [ 357.889383][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 358.185221][ T30] audit: type=1400 audit(1754855680.789:1028): avc: denied { accept } for pid=10831 comm="syz.3.945" path="socket:[23574]" dev="sockfs" ino=23574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 358.211523][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.518722][T10843] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 358.518722][T10843] program syz.2.947 not setting count and/or reply_len properly [ 358.911226][ T30] audit: type=1400 audit(1754855680.839:1029): avc: denied { setopt } for pid=10831 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 358.949877][T10842] netlink: 244 bytes leftover after parsing attributes in process `syz.3.948'. [ 358.962025][ T30] audit: type=1400 audit(1754855681.079:1030): avc: denied { create } for pid=10822 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 358.984570][ T30] audit: type=1400 audit(1754855681.079:1031): avc: denied { write } for pid=10822 comm="syz.0.943" path="socket:[23582]" dev="sockfs" ino=23582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 359.010389][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.291494][ T92] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 359.436574][T10855] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 359.436574][T10855] program syz.1.951 not setting count and/or reply_len properly [ 359.511320][ T92] usb 6-1: Using ep0 maxpacket: 32 [ 359.600716][ T92] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 359.688510][ T92] usb 6-1: config 0 has no interface number 0 [ 359.840797][ T92] usb 6-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.902946][ T92] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 359.929451][ T92] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 359.946747][ T92] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 359.958553][ T92] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 360.243998][ T30] audit: type=1400 audit(1754855683.349:1032): avc: denied { map } for pid=10858 comm="syz.3.953" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 360.602469][ T92] usb 6-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.618714][ T92] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 360.631588][ T30] audit: type=1400 audit(1754855683.349:1033): avc: denied { execute } for pid=10858 comm="syz.3.953" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 360.677724][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.701419][ T92] usb 6-1: Product: syz [ 360.705858][ T92] usb 6-1: Manufacturer: syz [ 360.722688][ T92] usb 6-1: SerialNumber: syz [ 360.745906][ T92] usb 6-1: config 0 descriptor?? [ 360.877753][T10845] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 360.894033][T10845] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 361.103444][T10870] FAULT_INJECTION: forcing a failure. [ 361.103444][T10870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.116706][T10870] CPU: 0 UID: 0 PID: 10870 Comm: syz.2.956 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 361.116734][T10870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.116745][T10870] Call Trace: [ 361.116751][T10870] [ 361.116758][T10870] dump_stack_lvl+0x16c/0x1f0 [ 361.116782][T10870] should_fail_ex+0x512/0x640 [ 361.116805][T10870] _copy_from_user+0x2e/0xd0 [ 361.116829][T10870] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 361.116860][T10870] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 361.116890][T10870] ? trace_kmalloc+0x2b/0xd0 [ 361.116914][T10870] ? __local_bh_enable_ip+0x51/0x120 [ 361.116939][T10870] ? ipv6_setsockopt+0xcb/0x170 [ 361.116972][T10870] do_ipv6_setsockopt+0x2935/0x4470 [ 361.117008][T10870] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 361.117036][T10870] ? avc_has_perm_noaudit+0x117/0x3b0 [ 361.117061][T10870] ? avc_has_perm_noaudit+0x149/0x3b0 [ 361.117085][T10870] ? avc_has_perm+0x144/0x1f0 [ 361.117105][T10870] ? __pfx_avc_has_perm+0x10/0x10 [ 361.117126][T10870] ? get_pid_task+0x106/0x250 [ 361.117144][T10870] ? proc_fail_nth_write+0x9f/0x220 [ 361.117173][T10870] ? sock_has_perm+0x259/0x2f0 [ 361.117197][T10870] ? __pfx_sock_has_perm+0x10/0x10 [ 361.117219][T10870] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 361.117249][T10870] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 361.117286][T10870] ? ipv6_setsockopt+0xcb/0x170 [ 361.117314][T10870] ipv6_setsockopt+0xcb/0x170 [ 361.117346][T10870] tcp_setsockopt+0xa7/0x100 [ 361.117377][T10870] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 361.117403][T10870] do_sock_setsockopt+0xf3/0x1d0 [ 361.117431][T10870] __sys_setsockopt+0x1a0/0x230 [ 361.117466][T10870] __x64_sys_setsockopt+0xbd/0x160 [ 361.117495][T10870] ? do_syscall_64+0x91/0x4c0 [ 361.117516][T10870] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.117535][T10870] do_syscall_64+0xcd/0x4c0 [ 361.117557][T10870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.117577][T10870] RIP: 0033:0x7fb08f58ebe9 [ 361.117593][T10870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.117613][T10870] RSP: 002b:00007fb0904cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.117632][T10870] RAX: ffffffffffffffda RBX: 00007fb08f7b5fa0 RCX: 00007fb08f58ebe9 [ 361.117645][T10870] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000005 [ 361.117661][T10870] RBP: 00007fb0904cb090 R08: 0000000000000090 R09: 0000000000000000 [ 361.117674][T10870] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 361.117690][T10870] R13: 00007fb08f7b6038 R14: 00007fb08f7b5fa0 R15: 00007ffc7f719338 [ 361.117718][T10870] [ 361.389190][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.036189][T10845] netlink: 'syz.5.949': attribute type 1 has an invalid length. [ 362.101223][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.949'. [ 362.220216][T10845] nbd: illegal input index 65544 [ 362.265980][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 362.303203][T10881] kvm: user requested TSC rate below hardware speed [ 362.316146][T10881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 362.354261][T10845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.375985][T10845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.674230][T10845] ubi31: detaching mtd0 [ 362.710357][T10845] ubi31: mtd0 is detached [ 362.767678][ T92] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 362.775394][T10879] block nbd0: server does not support multiple connections per device. [ 362.781897][ T92] etas_es58x 6-1:0.219: could not retrieve the product info string [ 362.823258][ T92] usb 6-1: USB disconnect, device number 19 [ 362.841660][T10879] block nbd0: shutting down sockets [ 362.855011][ T92] etas_es58x 6-1:0.219: Disconnecting syz syz [ 363.829461][ T5915] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 364.223629][ T30] audit: type=1400 audit(1754855686.929:1034): avc: denied { map } for pid=10891 comm="syz.2.963" path="socket:[24659]" dev="sockfs" ino=24659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 364.304768][T10904] serio: Serial port ptm0 [ 364.451282][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 364.462872][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.602072][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 365.739339][ T5915] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 365.841225][ T5915] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 365.855887][ T5915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.865198][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 365.885550][ T5915] usb 4-1: SerialNumber: syz [ 365.908026][ T5915] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 366.141711][ T5915] usb 4-1: USB disconnect, device number 34 [ 366.279389][T10918] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.967'. [ 366.784197][T10924] FAULT_INJECTION: forcing a failure. [ 366.784197][T10924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.798247][T10924] CPU: 0 UID: 0 PID: 10924 Comm: syz.2.968 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 366.798265][T10924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.798271][T10924] Call Trace: [ 366.798275][T10924] [ 366.798279][T10924] dump_stack_lvl+0x16c/0x1f0 [ 366.798297][T10924] should_fail_ex+0x512/0x640 [ 366.798311][T10924] _copy_from_iter+0x29f/0x16f0 [ 366.798326][T10924] ? __alloc_skb+0x200/0x380 [ 366.798344][T10924] ? __pfx__copy_from_iter+0x10/0x10 [ 366.798360][T10924] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 366.798379][T10924] netlink_sendmsg+0x829/0xdd0 [ 366.798394][T10924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.798413][T10924] ____sys_sendmsg+0xa98/0xc70 [ 366.798429][T10924] ? copy_msghdr_from_user+0x10a/0x160 [ 366.798445][T10924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.798467][T10924] ___sys_sendmsg+0x134/0x1d0 [ 366.798480][T10924] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.798508][T10924] ? __mutex_unlock_slowpath+0x100/0x800 [ 366.798537][T10924] __sys_sendmsg+0x16d/0x220 [ 366.798555][T10924] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.798579][T10924] do_syscall_64+0xcd/0x4c0 [ 366.798594][T10924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.798607][T10924] RIP: 0033:0x7fb08f58ebe9 [ 366.798618][T10924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.798630][T10924] RSP: 002b:00007fb0904aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.798643][T10924] RAX: ffffffffffffffda RBX: 00007fb08f7b6090 RCX: 00007fb08f58ebe9 [ 366.798651][T10924] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000008 [ 366.798658][T10924] RBP: 00007fb0904aa090 R08: 0000000000000000 R09: 0000000000000000 [ 366.798665][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.798671][T10924] R13: 00007fb08f7b6128 R14: 00007fb08f7b6090 R15: 00007ffc7f719338 [ 366.798686][T10924] [ 368.621311][ T5914] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 368.902603][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 368.942913][ T5914] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 368.953836][ T5914] usb 2-1: config 0 has no interface number 0 [ 369.041206][ T5893] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 369.391258][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 369.405651][ T5893] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 369.417043][ T5914] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.439517][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.462390][ T5914] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 369.472946][ T5893] usb 3-1: Product: syz [ 369.481139][ T5893] usb 3-1: Manufacturer: syz [ 369.499808][ T5893] usb 3-1: SerialNumber: syz [ 369.500782][ T5914] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 369.517792][ T5893] usb 3-1: config 0 descriptor?? [ 369.539763][ T5893] cypress_m8 3-1:0.0: HID->COM RS232 Adapter converter detected [ 369.546938][ T5914] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 369.564284][ T5893] cyphidcom ttyUSB0: required endpoint is missing [ 369.580798][ T5914] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 369.609884][ T5914] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.642926][ T5914] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 369.652766][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.662716][ T5914] usb 2-1: Product: syz [ 369.667000][ T5914] usb 2-1: Manufacturer: syz [ 369.672714][ T5914] usb 2-1: SerialNumber: syz [ 369.691159][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 369.696390][ T5914] usb 2-1: config 0 descriptor?? [ 369.708658][T10937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.722462][T10937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.836758][ T30] audit: type=1326 audit(1754855692.959:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 369.900217][ T30] audit: type=1326 audit(1754855692.959:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 369.941159][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 369.958488][ T30] audit: type=1326 audit(1754855693.019:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 369.987233][ T30] audit: type=1326 audit(1754855693.019:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 370.022570][ T9] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 370.036317][ T9] usb 1-1: config 254 has no interface number 0 [ 370.052165][ T9] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.065389][T10937] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 370.077739][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 370.081677][ T30] audit: type=1326 audit(1754855693.019:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 370.097029][ T9] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 370.127711][T10937] nbd: illegal input index 65544 [ 370.135341][ T30] audit: type=1326 audit(1754855693.019:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 370.140559][ T9] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 370.187021][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.201466][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.207564][ T30] audit: type=1326 audit(1754855693.019:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 370.249500][ T9] usb 1-1: config 254 interface 235 has no altsetting 0 [ 370.270046][ T5914] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 370.276094][ T30] audit: type=1326 audit(1754855693.019:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 370.303565][ T5914] etas_es58x 2-1:0.219: could not retrieve the product info string [ 370.308056][ T30] audit: type=1326 audit(1754855693.019:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 370.343312][ T30] audit: type=1326 audit(1754855693.029:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 370.367172][ T5914] usb 2-1: USB disconnect, device number 33 [ 370.372120][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 370.376845][ T5914] etas_es58x 2-1:0.219: Disconnecting syz syz [ 370.393063][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.429721][ T9] usb 1-1: Product: syz [ 370.436345][ T9] usb 1-1: Manufacturer: syz [ 370.449003][ T9] usb 1-1: SerialNumber: syz [ 371.050502][ T9] usbtest 1-1:254.235: Linux gadget zero [ 371.071177][ T9] usbtest 1-1:254.235: high-speed {control in/out int-in} tests (+alt) [ 371.671024][ T5914] usb 3-1: USB disconnect, device number 30 [ 371.679591][ T5914] cypress_m8 3-1:0.0: device disconnected [ 371.858248][T10994] serio: Serial port ptm0 [ 372.043473][ T92] usb 1-1: USB disconnect, device number 31 [ 372.876726][T10993] netlink: 96 bytes leftover after parsing attributes in process `syz.5.982'. [ 373.394032][ T5893] IPVS: starting estimator thread 0... [ 373.506165][T11009] IPVS: using max 76 ests per chain, 182400 per kthread [ 375.005841][T11040] FAULT_INJECTION: forcing a failure. [ 375.005841][T11040] name failslab, interval 1, probability 0, space 0, times 0 [ 375.036051][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 375.036172][ T30] audit: type=1400 audit(1754855698.159:1051): avc: denied { read } for pid=11027 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.041287][T11040] CPU: 0 UID: 0 PID: 11040 Comm: syz.5.995 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 375.041313][T11040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.041322][T11040] Call Trace: [ 375.041327][T11040] [ 375.041333][T11040] dump_stack_lvl+0x16c/0x1f0 [ 375.041355][T11040] should_fail_ex+0x512/0x640 [ 375.041371][T11040] ? fs_reclaim_acquire+0xae/0x150 [ 375.041393][T11040] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 375.041413][T11040] should_failslab+0xc2/0x120 [ 375.041431][T11040] __kmalloc_noprof+0xd2/0x510 [ 375.041451][T11040] tomoyo_realpath_from_path+0xc2/0x6e0 [ 375.041474][T11040] ? tomoyo_profile+0x47/0x60 [ 375.041491][T11040] tomoyo_path_number_perm+0x245/0x580 [ 375.041516][T11040] ? tomoyo_path_number_perm+0x237/0x580 [ 375.041535][T11040] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 375.041554][T11040] ? find_held_lock+0x2b/0x80 [ 375.041593][T11040] ? find_held_lock+0x2b/0x80 [ 375.041610][T11040] ? hook_file_ioctl_common+0x145/0x410 [ 375.041630][T11040] ? __fget_files+0x20e/0x3c0 [ 375.041650][T11040] security_file_ioctl+0x9b/0x240 [ 375.041672][T11040] __x64_sys_ioctl+0xb7/0x210 [ 375.041696][T11040] do_syscall_64+0xcd/0x4c0 [ 375.041714][T11040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.041730][T11040] RIP: 0033:0x7f778198ebe9 [ 375.041742][T11040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.041756][T11040] RSP: 002b:00007f77827ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.041772][T11040] RAX: ffffffffffffffda RBX: 00007f7781bb5fa0 RCX: 00007f778198ebe9 [ 375.041781][T11040] RDX: 0000200000000d40 RSI: 00000000c0386105 RDI: 0000000000000004 [ 375.041790][T11040] RBP: 00007f77827ca090 R08: 0000000000000000 R09: 0000000000000000 [ 375.041799][T11040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.041807][T11040] R13: 00007f7781bb6038 R14: 00007f7781bb5fa0 R15: 00007ffe5b6893e8 [ 375.041827][T11040] [ 375.041834][T11040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.389437][ T30] audit: type=1326 audit(1754855700.509:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 377.413519][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.471232][ T30] audit: type=1326 audit(1754855700.509:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 377.495596][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.578610][ T30] audit: type=1326 audit(1754855700.509:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 377.602997][ T30] audit: type=1326 audit(1754855700.509:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 377.627125][ T30] audit: type=1326 audit(1754855700.509:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 377.652103][ T30] audit: type=1326 audit(1754855700.509:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 378.267381][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.275594][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.287110][ T30] audit: type=1326 audit(1754855700.509:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 378.356092][ T30] audit: type=1326 audit(1754855700.509:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 378.380149][ T30] audit: type=1326 audit(1754855700.509:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.1.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 378.869012][ T92] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 379.491306][ T92] usb 4-1: device descriptor read/64, error -71 [ 380.041257][ T92] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 380.139001][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 380.139019][ T30] audit: type=1326 audit(1754855703.259:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.2.1019" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb08f58ebe9 code=0x0 [ 380.214561][ T92] usb 4-1: device descriptor read/64, error -71 [ 380.418651][ T92] usb usb4-port1: attempt power cycle [ 380.751729][T11137] cgroup: fork rejected by pids controller in /syz0 [ 381.361316][ T92] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 382.089114][ T30] audit: type=1400 audit(1754855704.539:1065): avc: denied { mounton } for pid=11146 comm="syz.1.1022" path="/proc/1170/task" dev="proc" ino=25097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 382.338049][ T92] usb 4-1: device descriptor read/8, error -71 [ 382.669675][ T30] audit: type=1400 audit(1754855704.539:1066): avc: denied { mount } for pid=11146 comm="syz.1.1022" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 385.931118][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 386.232005][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 386.262420][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 386.286765][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.308942][ T9] usb 2-1: Product: syz [ 386.320625][ T9] usb 2-1: Manufacturer: syz [ 386.329308][ T9] usb 2-1: SerialNumber: syz [ 386.346095][ T9] usb 2-1: config 0 descriptor?? [ 386.359926][ T30] audit: type=1400 audit(1754855709.479:1067): avc: denied { connect } for pid=11473 comm="syz.5.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 386.362678][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 386.563442][T11478] veth1_to_bond: entered allmulticast mode [ 386.576466][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 386.665622][T11481] serio: Serial port ptm1 [ 386.681537][T11478] block nbd0: server does not support multiple connections per device. [ 386.766264][T11478] block nbd0: shutting down sockets [ 386.932424][T11476] veth1_to_bond: left allmulticast mode [ 387.701239][ T30] audit: type=1400 audit(1754855710.819:1068): avc: denied { getopt } for pid=11463 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 387.891119][ T9] gspca_ov534_9: reg_w failed -71 [ 388.111105][ T5914] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 388.161094][ T1207] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 388.181163][ T9] gspca_ov534_9: Unknown sensor 0000 [ 388.181245][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 388.206715][ T9] usb 2-1: USB disconnect, device number 34 [ 388.283143][ T5914] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 388.304870][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.313097][ T1207] usb 4-1: device descriptor read/64, error -71 [ 388.337110][ T5914] usb 1-1: config 0 descriptor?? [ 388.611112][ T1207] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 388.714982][ T5914] usbhid 1-1:0.0: can't add hid device: -71 [ 388.721096][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 388.731426][ T5914] usb 1-1: USB disconnect, device number 32 [ 388.761300][ T1207] usb 4-1: device descriptor read/64, error -71 [ 388.831085][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 388.873053][ T1207] usb usb4-port1: attempt power cycle [ 388.991034][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 389.001032][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 389.017951][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.051837][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 389.073989][ T9] pvrusb2: ********** [ 389.078010][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 389.089488][ T9] pvrusb2: Important functionality might not be entirely working. [ 389.105189][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 389.118466][ T9] pvrusb2: ********** [ 389.231075][ T1207] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 389.251510][ T2337] pvrusb2: Invalid write control endpoint [ 389.273671][ T1207] usb 4-1: device descriptor read/8, error -71 [ 389.366819][ T2337] pvrusb2: Invalid write control endpoint [ 389.393082][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 389.411043][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 389.418597][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 389.431639][ T2337] pvrusb2: Device being rendered inoperable [ 389.439156][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 389.448521][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 389.463266][ T5893] usb 2-1: USB disconnect, device number 35 [ 389.466743][ T2337] pvrusb2: Attached sub-driver cx25840 [ 389.479092][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 389.501549][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 389.515014][ T1207] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 389.553595][ T1207] usb 4-1: device descriptor read/8, error -71 [ 389.672596][ T1207] usb usb4-port1: unable to enumerate USB device [ 390.552193][T11527] IPv6: Can't replace route, no match found [ 390.572189][T11527] netlink: 'syz.1.1049': attribute type 3 has an invalid length. [ 390.580104][T11527] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 390.587907][T11527] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1049'. [ 390.597030][T11527] NCSI netlink: No device for ifindex 33022 [ 391.495914][T11540] No control pipe specified [ 392.040249][ T30] audit: type=1326 audit(1754855715.159:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 392.089674][T11548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11548 comm=syz.2.1055 [ 392.106229][T11547] veth1_to_bond: entered allmulticast mode [ 392.106921][ T30] audit: type=1326 audit(1754855715.159:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 392.145105][ T30] audit: type=1326 audit(1754855715.169:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 392.171261][ T30] audit: type=1326 audit(1754855715.169:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 392.242417][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 392.298813][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 392.385939][T11557] serio: Serial port ptm0 [ 393.242268][ T30] audit: type=1326 audit(1754855715.169:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fe38ebe9 code=0x7ffc0000 [ 393.312987][T11547] block nbd0: shutting down sockets [ 393.575952][T11563] serio: Serial port ptm0 [ 395.518630][T11552] hsr_slave_1 (unregistering): left promiscuous mode [ 395.521860][ T30] audit: type=1326 audit(1754855718.639:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 395.549139][ T30] audit: type=1326 audit(1754855718.639:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 395.553515][T11546] veth1_to_bond: left allmulticast mode [ 395.574520][ T30] audit: type=1326 audit(1754855718.639:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 395.602816][ T30] audit: type=1326 audit(1754855718.669:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 395.626523][ T30] audit: type=1326 audit(1754855718.669:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11583 comm="syz.0.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 395.825258][T11584] bond2: entered promiscuous mode [ 395.835704][T11584] bond2: entered allmulticast mode [ 395.856191][T11584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.964006][T11593] QAT: failed to copy from user cfg_data. [ 396.009063][T11595] pim6reg1: entered promiscuous mode [ 396.017980][T11595] pim6reg1: entered allmulticast mode [ 397.056683][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 397.056699][ T30] audit: type=1326 audit(1754855720.179:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 397.086230][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.127728][ T30] audit: type=1326 audit(1754855720.179:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 397.152114][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.164654][ T30] audit: type=1326 audit(1754855720.229:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 397.189627][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.350034][ T30] audit: type=1326 audit(1754855720.229:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 397.373767][ T30] audit: type=1326 audit(1754855720.229:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 397.984248][ T30] audit: type=1326 audit(1754855720.229:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 398.138574][T11631] serio: Serial port ptm1 [ 399.113449][ T30] audit: type=1326 audit(1754855720.229:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f58ebe9 code=0x7ffc0000 [ 399.147228][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 399.302318][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 399.452920][ T5915] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 400.163924][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 402.171624][ T5978] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 402.351178][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 402.374470][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.391315][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.452483][ T30] audit: type=1326 audit(1754855725.559:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 402.457609][ T5978] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 402.587924][ T5915] usb 4-1: device descriptor read/all, error -71 [ 402.597420][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.757316][ T5978] usb 3-1: config 0 descriptor?? [ 402.784569][ T30] audit: type=1326 audit(1754855725.559:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 402.865245][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 402.874937][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 403.273647][ T5978] usbhid 3-1:0.0: can't add hid device: -71 [ 403.771146][ T5978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 403.805471][ T30] audit: type=1326 audit(1754855725.559:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 403.835786][ T5978] usb 3-1: USB disconnect, device number 31 [ 404.423278][ T30] audit: type=1326 audit(1754855725.559:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 404.504569][ T30] audit: type=1326 audit(1754855725.559:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 404.578313][ T30] audit: type=1326 audit(1754855725.559:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 404.602025][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.706929][ T30] audit: type=1326 audit(1754855725.559:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 404.731228][ T30] audit: type=1326 audit(1754855725.559:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 404.754636][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.833121][ T30] audit: type=1326 audit(1754855725.559:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 404.883703][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 404.893234][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 405.238194][ T30] audit: type=1326 audit(1754855725.559:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 405.449878][T11696] veth1_to_bond: entered allmulticast mode [ 405.463550][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 405.591463][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 405.611526][T11696] block nbd0: server does not support multiple connections per device. [ 405.715380][T11696] block nbd0: shutting down sockets [ 405.815896][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 406.164732][ T9] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 406.165259][T11693] veth1_to_bond: left allmulticast mode [ 406.179472][ T9] usb 1-1: config 0 has no interface number 0 [ 406.218141][ T9] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.230738][ T9] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 406.242919][ T9] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 406.255116][ T9] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 406.295990][T11704] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 406.315782][ T9] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 406.333372][T11704] netlink: 'syz.2.1092': attribute type 2 has an invalid length. [ 406.349680][ T9] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 406.483945][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 406.493613][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.509713][ T9] usb 1-1: Product: syz [ 406.526985][T11709] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 406.535109][T11709] PKCS7: Only support pkcs7_signedData type [ 406.555521][ T9] usb 1-1: Manufacturer: syz [ 406.565928][ T9] usb 1-1: SerialNumber: syz [ 406.905912][T11719] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 406.905912][T11719] program syz.2.1096 not setting count and/or reply_len properly [ 407.012855][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 407.022426][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 407.628513][ T9] usb 1-1: config 0 descriptor?? [ 408.142462][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 408.142487][ T30] audit: type=1400 audit(1754855731.199:1117): avc: denied { bind } for pid=11722 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.729095][ T30] audit: type=1400 audit(1754855731.419:1118): avc: denied { connect } for pid=11722 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 408.748703][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.142108][ T9] usb 1-1: can't set config #0, error -71 [ 409.816096][ T9] usb 1-1: USB disconnect, device number 33 [ 410.214926][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1100'. [ 412.769040][ T30] audit: type=1400 audit(1754855735.889:1119): avc: denied { listen } for pid=11764 comm="syz.0.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 413.106277][ T30] audit: type=1400 audit(1754855736.209:1120): avc: denied { ioctl } for pid=11764 comm="syz.0.1108" path="socket:[24535]" dev="sockfs" ino=24535 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.321317][ T5915] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 413.486534][T11774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1111'. [ 413.514180][T11774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1111'. [ 413.561494][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 413.590670][ T5915] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 413.669473][ T5915] usb 6-1: config 0 has no interface number 0 [ 413.697862][ T5915] usb 6-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.739459][ T5915] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 413.756110][ T5915] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 413.787197][ T5915] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 413.849539][ T5915] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 413.860582][ T5915] usb 6-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.877325][ T5915] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 413.893279][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.914960][ T5915] usb 6-1: Product: syz [ 413.923571][ T5915] usb 6-1: Manufacturer: syz [ 413.928192][ T5915] usb 6-1: SerialNumber: syz [ 413.946240][ T5915] usb 6-1: config 0 descriptor?? [ 413.953513][T11771] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 413.976118][T11771] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 414.011279][ T5973] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 414.161582][ T5973] usb 1-1: Invalid ep0 maxpacket: 64 [ 414.264866][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 414.335511][T11771] netlink: 'syz.5.1109': attribute type 1 has an invalid length. [ 414.940780][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1109'. [ 414.955890][T11789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.966311][ T5973] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 414.981199][T11771] nbd: illegal input index 65544 [ 414.981571][T11789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.045118][ T5915] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 415.059236][ T5915] etas_es58x 6-1:0.219: could not retrieve the product info string [ 415.084902][ T5915] usb 6-1: USB disconnect, device number 20 [ 415.092526][ T5915] etas_es58x 6-1:0.219: Disconnecting syz syz [ 415.171067][ T92] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 415.221086][ T5973] usb 1-1: Invalid ep0 maxpacket: 64 [ 415.229825][ T5973] usb usb1-port1: attempt power cycle [ 415.351626][ T92] usb 3-1: device descriptor read/64, error -71 [ 415.469148][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 415.600385][ T5973] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 415.601139][ T92] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 415.626431][ T5973] usb 1-1: Invalid ep0 maxpacket: 64 [ 415.821634][ T5973] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 415.919370][ T5973] usb 1-1: Invalid ep0 maxpacket: 64 [ 415.936956][ T5973] usb usb1-port1: unable to enumerate USB device [ 415.971163][ T92] usb 3-1: device descriptor read/64, error -71 [ 416.085199][ T92] usb usb3-port1: attempt power cycle [ 416.709379][T11816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.948002][ T92] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 417.044351][ T92] usb 3-1: device descriptor read/8, error -71 [ 417.381128][ T92] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 417.493192][ T92] usb 3-1: device descriptor read/8, error -71 [ 417.615459][ T92] usb usb3-port1: unable to enumerate USB device [ 417.835307][T11833] veth1_to_bond: entered allmulticast mode [ 417.849396][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 417.932036][T11833] block nbd0: server does not support multiple connections per device. [ 417.980617][T11833] block nbd0: shutting down sockets [ 418.057992][T11832] veth1_to_bond: left allmulticast mode [ 418.673575][T11839] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:194x2160 (0x33424752, 6, 0, 0, 0) [ 419.127061][ T30] audit: type=1400 audit(1754855741.929:1121): avc: denied { watch watch_reads } for pid=11836 comm="syz.5.1131" path="/proc/848/net" dev="proc" ino=25942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 419.364637][T11845] serio: Serial port ptm0 [ 420.726168][T11859] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 420.860874][ T92] IPVS: starting estimator thread 0... [ 420.981731][T11861] IPVS: using max 75 ests per chain, 180000 per kthread [ 422.770922][ T30] audit: type=1400 audit(1754855745.869:1122): avc: denied { map } for pid=11886 comm="syz.2.1143" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 422.794958][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.125362][ T30] audit: type=1400 audit(1754855745.879:1123): avc: denied { execute } for pid=11886 comm="syz.2.1143" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 425.221281][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 425.249392][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.266232][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.278866][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.287821][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.298673][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.307774][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.353401][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.376606][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.405204][ T9] usb 4-1: config 8 has an invalid interface number: 6 but max is 0 [ 425.407021][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.413992][ T9] usb 4-1: config 8 has no interface number 0 [ 425.446040][ T9] usb 4-1: config 8 interface 6 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 425.452664][ T5914] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 425.474771][ T9] usb 4-1: config 8 interface 6 has no altsetting 0 [ 425.496975][ T9] usb 4-1: New USB device found, idVendor=0e6f, idProduct=172e, bcdDevice=dc.78 [ 425.506591][ T5893] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 425.516297][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.525468][ T9] usb 4-1: Product: syz [ 425.534128][ T9] usb 4-1: Manufacturer: syz [ 425.543653][ T9] usb 4-1: SerialNumber: syz [ 425.570141][ T5914] hid-generic 00A0:0006:0003.000A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 425.574397][T11911] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 425.663430][ T5893] usb 1-1: config 0 has no interfaces? [ 425.669964][ T5893] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 425.709650][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.168648][ T5893] usb 1-1: config 0 descriptor?? [ 426.176877][ T9] usb 4-1: USB disconnect, device number 45 [ 426.400019][ T9] usb 1-1: USB disconnect, device number 38 [ 427.264489][T11933] serio: Serial port ptm0 [ 428.195600][ T30] audit: type=1326 audit(1754855751.319:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 428.219526][ T30] audit: type=1326 audit(1754855751.319:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 428.254674][ T30] audit: type=1326 audit(1754855751.319:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 428.295028][ T30] audit: type=1326 audit(1754855751.319:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 428.321061][ T5915] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 428.361073][ T30] audit: type=1326 audit(1754855751.319:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 428.409943][ T30] audit: type=1326 audit(1754855751.319:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 428.444527][ T30] audit: type=1326 audit(1754855751.319:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 428.491209][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 428.498191][ T30] audit: type=1326 audit(1754855751.319:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 428.500011][ T5915] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 428.555865][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.586030][ T5915] usb 1-1: config 0 descriptor?? [ 428.601145][ T30] audit: type=1326 audit(1754855751.319:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 428.613776][ T5915] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 428.648578][ T30] audit: type=1326 audit(1754855751.319:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 429.450496][T11937] veth0: entered promiscuous mode [ 429.522352][ T5914] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 429.682324][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 429.698114][ T5914] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 429.707695][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.717679][ T5914] usb 3-1: Product: syz [ 429.723219][ T5914] usb 3-1: Manufacturer: syz [ 429.728433][ T5914] usb 3-1: SerialNumber: syz [ 429.737376][ T5914] usb 3-1: config 0 descriptor?? [ 429.749119][ T5914] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 429.757219][ T5915] gspca_nw80x: reg_r err -110 [ 429.762337][ T5915] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 429.772188][ T5914] usb 3-1: Detected FT-X [ 430.065652][ T5914] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 430.074685][ T5914] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 430.082566][ T5914] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 430.144730][ T5914] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 430.166437][T11976] [U] [ 430.169675][T11976] [U] [ 430.172380][T11976] [U] [ 430.175676][T11976] [U] [ 430.178372][T11976] [U] [ 430.181080][T11976] [U] [ 430.183777][T11976] [U] [ 430.187434][T11976] [U] [ 430.207792][ T5914] usb 3-1: USB disconnect, device number 36 [ 430.222213][T11976] [U] [ 430.225050][T11976] [U] [ 430.227776][T11976] [U] [ 430.239738][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 430.264296][ T5914] ftdi_sio 3-1:0.0: device disconnected [ 430.268865][T11973] [U] [ 430.961324][ T5893] usb 1-1: USB disconnect, device number 39 [ 430.973082][T11937] veth0: left promiscuous mode [ 431.138057][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 431.405299][T11996] veth1_to_bond: entered allmulticast mode [ 431.437789][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 431.602829][T12003] siw: device registration error -23 [ 431.642106][T12002] block nbd0: server does not support multiple connections per device. [ 432.907694][T12002] block nbd0: shutting down sockets [ 432.974799][T11993] veth1_to_bond: left allmulticast mode [ 434.319012][T12314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'. [ 434.748989][ T5893] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 435.191300][ T5915] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 435.369252][ T5893] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.382976][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.395735][ T5893] usb 2-1: Product: syz [ 435.410213][ T5893] usb 2-1: Manufacturer: syz [ 435.422155][ T5893] usb 2-1: SerialNumber: syz [ 435.514567][T12334] syz_tun: entered allmulticast mode [ 435.888570][ T5893] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.911594][T12333] veth1_to_bond: entered allmulticast mode [ 435.929265][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 435.967053][ T92] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.992552][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 435.994787][T12326] syz_tun: left allmulticast mode [ 436.087419][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.099811][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.113979][T12333] block nbd0: server does not support multiple connections per device. [ 436.128303][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.142474][T12333] block nbd0: shutting down sockets [ 436.150542][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.197697][T12340] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1189'. [ 436.367576][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 436.367597][ T30] audit: type=1400 audit(1754855759.319:1137): avc: denied { nlmsg_read } for pid=12336 comm="syz.5.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.409359][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.424653][T12332] veth1_to_bond: left allmulticast mode [ 436.451930][ T5915] usb 3-1: config 0 descriptor?? [ 436.793017][T12353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1181'. [ 437.277489][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.288338][ T92] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 437.467411][ T92] ath9k_htc: Failed to initialize the device [ 437.495614][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.625816][ T92] usb 2-1: ath9k_htc: USB layer deinitialized [ 437.814627][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.825594][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.068564][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 438.081051][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 438.222406][ T5915] usb 3-1: USB disconnect, device number 37 [ 438.322617][ T5893] usb 2-1: USB disconnect, device number 36 [ 438.692251][ T30] audit: type=1326 audit(1754855761.809:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 438.754279][ T30] audit: type=1326 audit(1754855761.809:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 438.778497][ T30] audit: type=1326 audit(1754855761.809:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 438.966415][ T30] audit: type=1326 audit(1754855761.809:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 438.992995][ T30] audit: type=1326 audit(1754855761.809:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 439.017700][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 439.030907][ T30] audit: type=1326 audit(1754855761.809:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 439.056302][ T30] audit: type=1326 audit(1754855761.809:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 439.086092][ T30] audit: type=1326 audit(1754855761.809:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 439.086688][T12391] veth1_to_bond: entered allmulticast mode [ 439.113929][ T30] audit: type=1326 audit(1754855761.809:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.0.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ba058ebe9 code=0x7ffc0000 [ 439.193029][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 439.240285][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 439.253204][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.265372][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.277737][ T10] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 439.287714][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.303400][ T10] usb 2-1: config 0 descriptor?? [ 439.321362][T12391] block nbd0: server does not support multiple connections per device. [ 439.330047][T12391] block nbd0: shutting down sockets [ 439.351763][T12390] veth1_to_bond: left allmulticast mode [ 439.527402][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 439.537880][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 439.590610][ T10] usb 2-1: USB disconnect, device number 37 [ 439.693455][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.693512][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.531604][T12436] usb usb1: usbfs: process 12436 (syz.5.1212) did not claim interface 0 before use [ 442.246293][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 442.246315][ T30] audit: type=1326 audit(1754855764.679:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 442.548848][ T30] audit: type=1326 audit(1754855764.679:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 442.574828][ T30] audit: type=1326 audit(1754855764.719:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 442.600205][ T30] audit: type=1326 audit(1754855764.729:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 442.658347][ T30] audit: type=1326 audit(1754855764.729:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 442.904867][ T30] audit: type=1326 audit(1754855764.749:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 443.296898][ T30] audit: type=1326 audit(1754855764.749:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 443.374253][ T30] audit: type=1326 audit(1754855764.759:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 443.417274][T12449] bond3: entered promiscuous mode [ 443.447354][T12449] bond3: entered allmulticast mode [ 443.493114][T12449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.544240][ T30] audit: type=1326 audit(1754855764.769:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 443.569483][ T5893] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 443.577337][ T30] audit: type=1326 audit(1754855764.769:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 443.758161][ T5893] usb 6-1: device descriptor read/64, error -71 [ 443.985682][T12449] bond3 (unregistering): Released all slaves [ 444.001091][ T5893] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 444.143135][ T5893] usb 6-1: device descriptor read/64, error -71 [ 444.277270][ T5893] usb usb6-port1: attempt power cycle [ 444.401078][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 444.571685][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 444.584195][ T10] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 444.604412][ T10] usb 1-1: config 0 has no interface number 0 [ 444.616881][ T10] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.633777][ T5893] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 444.642147][ T10] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 444.660368][ T10] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 444.672793][ T10] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 444.672933][ T5893] usb 6-1: device descriptor read/8, error -71 [ 444.690897][ T10] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 444.701305][ T10] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.734227][ T10] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 444.756196][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.775021][ T10] usb 1-1: Product: syz [ 444.783362][ T10] usb 1-1: Manufacturer: syz [ 444.788398][ T10] usb 1-1: SerialNumber: syz [ 444.901636][ T10] usb 1-1: config 0 descriptor?? [ 444.911618][T12470] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 444.919471][T12470] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 445.578954][T11620] Bluetooth: hci4: command 0x0c1a tx timeout [ 445.596903][T12485] fuse: Unknown parameter 'user_i00000000000000000000' [ 445.675426][ T5893] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 445.983525][ T5893] usb 6-1: device descriptor read/8, error -71 [ 446.182029][ T5893] usb usb6-port1: unable to enumerate USB device [ 446.485757][T12470] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 447.498000][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 447.507060][T12470] nbd: illegal input index 65544 [ 447.548704][ T10] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 447.606454][ T10] etas_es58x 1-1:0.219: could not retrieve the product info string [ 447.699715][ T10] usb 1-1: USB disconnect, device number 40 [ 447.741659][ T10] etas_es58x 1-1:0.219: Disconnecting syz syz [ 448.031100][ T5893] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 448.191378][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 448.203596][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.484088][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.682194][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 448.725142][ T5893] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 448.782614][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.806246][ T5893] usb 6-1: config 0 descriptor?? [ 449.332931][ T5893] hid-multitouch 0003:0457:07DA.000B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 449.455433][ T5893] usb 6-1: USB disconnect, device number 25 [ 449.646150][T12525] fido_id[12525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 451.208112][T12556] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 451.208112][T12556] program syz.1.1238 not setting count and/or reply_len properly [ 453.291298][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'. [ 453.510230][T12572] block nbd0: server does not support multiple connections per device. [ 453.637804][T12572] block nbd0: shutting down sockets [ 454.739716][T12577] tty tty23: ldisc open failed (-12), clearing slot 22 [ 455.055132][T12603] cgroup: fork rejected by pids controller in /syz3 [ 456.455447][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 456.455460][ T30] audit: type=1326 audit(1754855779.579:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 456.557515][ T30] audit: type=1326 audit(1754855779.609:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 456.646768][ T30] audit: type=1326 audit(1754855779.629:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 456.730796][ T30] audit: type=1326 audit(1754855779.629:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 457.292690][ T30] audit: type=1326 audit(1754855779.629:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 457.317825][ T30] audit: type=1326 audit(1754855779.629:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 457.353863][ T30] audit: type=1326 audit(1754855779.629:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 457.521255][ T30] audit: type=1326 audit(1754855779.639:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 457.545982][ T30] audit: type=1326 audit(1754855779.649:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 457.570311][ T30] audit: type=1326 audit(1754855779.649:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 458.304075][T12916] 9pnet_fd: Insufficient options for proto=fd [ 459.251078][ T5915] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 459.521137][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 459.528567][ T5915] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.540205][ T5915] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.563237][ T5915] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 459.574382][ T5915] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 459.583314][ T5915] usb 1-1: Product: syz [ 459.591146][ T5915] usb 1-1: Manufacturer: syz [ 459.610399][ T5915] hub 1-1:4.0: USB hub found [ 459.821108][ T5915] hub 1-1:4.0: 2 ports detected [ 459.837062][T12906] syzkaller0: entered promiscuous mode [ 459.845023][T12906] syzkaller0: entered allmulticast mode [ 460.583045][T12952] comedi comedi0: dt2801: I/O port conflict (0x3,2) [ 460.606975][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 461.644607][ T5915] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 462.245252][ T5915] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 463.590454][T12987] FAULT_INJECTION: forcing a failure. [ 463.590454][T12987] name failslab, interval 1, probability 0, space 0, times 0 [ 463.603284][T12987] CPU: 1 UID: 0 PID: 12987 Comm: syz.2.1269 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 463.603311][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.603321][T12987] Call Trace: [ 463.603333][T12987] [ 463.603340][T12987] dump_stack_lvl+0x16c/0x1f0 [ 463.603366][T12987] should_fail_ex+0x512/0x640 [ 463.603390][T12987] should_failslab+0xc2/0x120 [ 463.603412][T12987] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 463.603431][T12987] ? __nf_conntrack_alloc+0xd1/0x660 [ 463.603458][T12987] __nf_conntrack_alloc+0xd1/0x660 [ 463.603483][T12987] ctnetlink_create_conntrack+0xb0/0x1650 [ 463.603510][T12987] ? __pfx_ctnetlink_create_conntrack+0x10/0x10 [ 463.603533][T12987] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 463.603571][T12987] ? __rcu_read_unlock+0x2bc/0x620 [ 463.603590][T12987] ? nf_conntrack_find_get+0x141/0x350 [ 463.603615][T12987] ctnetlink_new_conntrack+0x60b/0x1080 [ 463.603639][T12987] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 463.603667][T12987] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 463.603708][T12987] nfnetlink_rcv_msg+0x9f9/0x1200 [ 463.603741][T12987] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 463.603768][T12987] ? __lock_acquire+0x62e/0x1ce0 [ 463.603822][T12987] ? avc_has_perm_noaudit+0x149/0x3b0 [ 463.603847][T12987] netlink_rcv_skb+0x158/0x420 [ 463.603867][T12987] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 463.603892][T12987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.603932][T12987] ? ns_capable+0xd7/0x110 [ 463.603957][T12987] nfnetlink_rcv+0x1b3/0x430 [ 463.603980][T12987] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 463.604010][T12987] netlink_unicast+0x5a7/0x870 [ 463.604033][T12987] ? __pfx_netlink_unicast+0x10/0x10 [ 463.604052][T12987] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 463.604079][T12987] netlink_sendmsg+0x8d1/0xdd0 [ 463.604102][T12987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.604118][T12987] ? sock_has_perm+0x259/0x2f0 [ 463.604148][T12987] ____sys_sendmsg+0xa98/0xc70 [ 463.604172][T12987] ? copy_msghdr_from_user+0x10a/0x160 [ 463.604190][T12987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.604225][T12987] ___sys_sendmsg+0x134/0x1d0 [ 463.604244][T12987] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.604284][T12987] ? __mutex_unlock_slowpath+0x100/0x800 [ 463.604310][T12987] __sys_sendmsg+0x16d/0x220 [ 463.604332][T12987] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.604366][T12987] do_syscall_64+0xcd/0x4c0 [ 463.604387][T12987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.604405][T12987] RIP: 0033:0x7fb08f58ebe9 [ 463.604419][T12987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.604435][T12987] RSP: 002b:00007fb090489038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.604453][T12987] RAX: ffffffffffffffda RBX: 00007fb08f7b6180 RCX: 00007fb08f58ebe9 [ 463.604464][T12987] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 463.604474][T12987] RBP: 00007fb090489090 R08: 0000000000000000 R09: 0000000000000000 [ 463.604484][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.604493][T12987] R13: 00007fb08f7b6218 R14: 00007fb08f7b6180 R15: 00007ffc7f719338 [ 463.604518][T12987] [ 463.933736][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.052914][ T5915] usb 1-1: USB disconnect, device number 41 [ 464.140173][T12998] sd 0:0:1:0: device reset [ 464.321165][ T5914] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 464.358105][T13006] FAULT_INJECTION: forcing a failure. [ 464.358105][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 464.371286][T13006] CPU: 0 UID: 0 PID: 13006 Comm: syz.2.1274 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 464.371316][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.371323][T13006] Call Trace: [ 464.371328][T13006] [ 464.371333][T13006] dump_stack_lvl+0x16c/0x1f0 [ 464.371351][T13006] should_fail_ex+0x512/0x640 [ 464.371364][T13006] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 464.371379][T13006] should_failslab+0xc2/0x120 [ 464.371393][T13006] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 464.371406][T13006] ? __alloc_skb+0x2b2/0x380 [ 464.371429][T13006] __alloc_skb+0x2b2/0x380 [ 464.371447][T13006] ? __pfx___alloc_skb+0x10/0x10 [ 464.371468][T13006] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 464.371485][T13006] netlink_alloc_large_skb+0x69/0x130 [ 464.371499][T13006] netlink_sendmsg+0x6a1/0xdd0 [ 464.371514][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.371529][T13006] ? ____sys_sendmsg+0x871/0xc70 [ 464.371548][T13006] ____sys_sendmsg+0xa98/0xc70 [ 464.371563][T13006] ? copy_msghdr_from_user+0x10a/0x160 [ 464.371575][T13006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.371596][T13006] ___sys_sendmsg+0x134/0x1d0 [ 464.371609][T13006] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.371634][T13006] ? lockdep_hardirqs_on+0x50/0x110 [ 464.371650][T13006] __sys_sendmsg+0x16d/0x220 [ 464.371661][T13006] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.371672][T13006] ? rcu_is_watching+0x12/0xc0 [ 464.371694][T13006] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 464.371711][T13006] do_syscall_64+0xcd/0x4c0 [ 464.371725][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.371737][T13006] RIP: 0033:0x7fb08f58ebe9 [ 464.371749][T13006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.371760][T13006] RSP: 002b:00007fb0904aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.371772][T13006] RAX: ffffffffffffffda RBX: 00007fb08f7b6090 RCX: 00007fb08f58ebe9 [ 464.371779][T13006] RDX: 0000000000008004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 464.371786][T13006] RBP: 00007fb0904aa090 R08: 0000000000000000 R09: 0000000000000000 [ 464.371793][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.371799][T13006] R13: 00007fb08f7b6128 R14: 00007fb08f7b6090 R15: 00007ffc7f719338 [ 464.371814][T13006] [ 464.951166][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 464.973294][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.991903][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.028503][T13010] PM: Enabling pm_trace changes system date and time during resume. [ 465.028503][T13010] PM: Correct system time has to be restored manually after resume. [ 465.126249][T13014] serio: Serial port ptm0 [ 466.330412][ T5914] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 466.340226][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.359783][ T5914] usb 4-1: config 0 descriptor?? [ 466.436464][T13020] binder: 13019:13020 ioctl c0306201 2000000003c0 returned -14 [ 466.593536][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 466.599607][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 466.599624][ T30] audit: type=1400 audit(1754855789.719:1183): avc: denied { listen } for pid=13016 comm="syz.0.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 466.661446][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 466.910629][ T5914] usb 4-1: USB disconnect, device number 46 [ 467.168788][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 467.179115][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 469.383863][ T30] audit: type=1326 audit(1754855790.969:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.3.1282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54b318ebe9 code=0x0 [ 469.412273][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.427027][ T30] audit: type=1326 audit(1754855792.499:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 469.453349][ T30] audit: type=1326 audit(1754855792.499:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 469.479820][ T30] audit: type=1326 audit(1754855792.549:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 469.515471][ T30] audit: type=1326 audit(1754855792.549:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 469.540206][ T30] audit: type=1326 audit(1754855792.549:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 469.633283][ T30] audit: type=1326 audit(1754855792.579:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 469.710308][ T30] audit: type=1326 audit(1754855792.579:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 469.751265][ T30] audit: type=1326 audit(1754855792.579:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f778198ebe9 code=0x7ffc0000 [ 470.478133][T13053] mkiss: ax0: crc mode is auto. [ 471.068228][T13066] serio: Serial port ptm0 [ 472.361057][ T5893] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 472.431270][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 472.541056][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 472.565887][ T5893] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 472.571308][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 472.608119][ T5893] usb 2-1: config 0 has no interface number 0 [ 472.615251][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 472.629008][T12497] IPVS: starting estimator thread 0... [ 472.642916][ T5893] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 472.660240][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 472.677017][ T5893] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 472.691891][ T9] usb 6-1: config 179 has no interface number 0 [ 472.732468][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 472.743888][ T5893] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 472.755447][T13083] IPVS: using max 76 ests per chain, 182400 per kthread [ 472.762638][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 472.774030][ T5893] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 472.791477][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 472.811153][ T5893] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 472.891065][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 472.903023][ T5893] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 472.917900][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 472.933348][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 472.943231][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.953575][ T5893] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 472.968273][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.994495][T13073] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 473.031233][ T5893] usb 2-1: Product: syz [ 473.066785][ T5893] usb 2-1: Manufacturer: syz [ 473.097411][ T5893] usb 2-1: SerialNumber: syz [ 473.113895][ T5893] usb 2-1: config 0 descriptor?? [ 473.124794][T13071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 473.145144][T13071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 473.374932][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input19 [ 473.425895][T13071] netlink: 'syz.1.1290': attribute type 1 has an invalid length. [ 473.443097][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 473.468841][T13071] nbd: illegal input index 65544 [ 473.521712][ T5893] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 473.566500][ T5893] etas_es58x 2-1:0.219: could not retrieve the product info string [ 473.675743][ T5893] usb 2-1: USB disconnect, device number 38 [ 473.832133][ T5893] etas_es58x 2-1:0.219: Disconnecting syz syz [ 474.069638][T13073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.108733][T13073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.207559][ T5914] usb 6-1: USB disconnect, device number 26 [ 474.207640][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 474.222618][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 474.231914][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.360060][T13092] overlayfs: conflicting lowerdir path [ 474.737635][ T5893] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 474.896614][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'. [ 474.941805][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 474.949783][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 474.979261][ T5893] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 475.004211][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.024734][ T5893] usb 2-1: Product: syz [ 475.029022][ T5893] usb 2-1: Manufacturer: syz [ 475.035585][ T5893] usb 2-1: SerialNumber: syz [ 475.047743][ T5893] usb 2-1: config 0 descriptor?? [ 475.064787][T13099] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.089713][ T5893] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 475.930299][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1301'. [ 475.961990][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 475.962059][ T30] audit: type=1400 audit(1754855799.069:1199): avc: denied { listen } for pid=13132 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.213492][ T30] audit: type=1400 audit(1754855799.069:1200): avc: denied { map } for pid=13132 comm="syz.2.1300" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 476.585842][ T30] audit: type=1400 audit(1754855799.189:1201): avc: denied { wake_alarm } for pid=13140 comm="syz.5.1301" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 476.726782][T13147] serio: Serial port ptm0 [ 477.696739][ T9] usb 2-1: USB disconnect, device number 39 [ 477.703215][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 477.783629][ T30] audit: type=1400 audit(1754855800.899:1202): avc: denied { write } for pid=13149 comm="syz.3.1303" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 478.196929][ T30] audit: type=1400 audit(1754855800.909:1203): avc: denied { ioctl } for pid=13149 comm="syz.3.1303" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 478.361526][ T30] audit: type=1400 audit(1754855801.479:1204): avc: denied { call } for pid=13161 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 478.380531][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.415409][ T30] audit: type=1400 audit(1754855801.479:1205): avc: denied { transfer } for pid=13161 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 478.455523][T13164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13164 comm=syz.2.1307 [ 479.432684][T13186] veth1_to_bond: entered allmulticast mode [ 479.435230][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 479.651495][T13186] block nbd0: server does not support multiple connections per device. [ 479.660087][T13186] block nbd0: shutting down sockets [ 479.776246][T13185] veth1_to_bond: left allmulticast mode [ 481.037809][T13203] veth1_to_bond: entered allmulticast mode [ 481.044880][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'. [ 481.084981][T13202] veth1_to_bond: left allmulticast mode [ 483.785940][T13240] bridge0: entered promiscuous mode [ 483.806203][T13240] macsec0: entered promiscuous mode [ 483.819737][T13240] bridge0: port 4(macsec0) entered blocking state [ 483.828451][T13240] bridge0: port 4(macsec0) entered disabled state [ 483.836953][T13240] macsec0: entered allmulticast mode [ 483.843849][T13240] bridge0: entered allmulticast mode [ 483.862115][T13240] macsec0: left allmulticast mode [ 483.881062][T13240] bridge0: left allmulticast mode [ 483.898046][T13240] bridge0: left promiscuous mode [ 485.340213][T13262] program syz.1.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.372135][T13262] program syz.1.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.385355][T13262] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 489.830592][ T30] audit: type=1400 audit(1754855812.949:1206): avc: denied { accept } for pid=13303 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 489.859604][ T30] audit: type=1400 audit(1754855812.979:1207): avc: denied { append } for pid=13303 comm="syz.5.1335" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 491.512918][T12497] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 491.708797][T12497] usb 3-1: Using ep0 maxpacket: 32 [ 491.720699][T12497] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 491.730399][T12497] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 176, using maximum allowed: 30 [ 491.741988][T12497] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 491.753318][T12497] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 491.765494][T12497] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 176 [ 491.786119][T12497] usb 3-1: config 0 interface 0 has no altsetting 0 [ 491.807537][T12497] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 491.819186][T12497] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 492.081235][T12497] usb 3-1: Product: syz [ 492.085458][T12497] usb 3-1: Manufacturer: syz [ 492.090087][T12497] usb 3-1: SerialNumber: syz [ 492.104700][T12497] usb 3-1: config 0 descriptor?? [ 492.115167][T12497] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 492.130373][T12497] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 492.404640][T13308] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 492.730407][ T5978] usb 3-1: USB disconnect, device number 38 [ 492.768590][ T5978] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 493.635810][T13639] : renamed from bond_slave_0 [ 494.358676][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 494.841568][T13656] hsr_slave_0 (unregistering): left promiscuous mode [ 494.957673][T13664] 9pnet_fd: Insufficient options for proto=fd [ 495.540293][T13664] lo speed is unknown, defaulting to 1000 [ 495.546194][T13664] lo speed is unknown, defaulting to 1000 [ 495.552999][T13664] lo speed is unknown, defaulting to 1000 [ 495.566782][T13664] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 495.584523][T13664] lo speed is unknown, defaulting to 1000 [ 495.593707][T13664] lo speed is unknown, defaulting to 1000 [ 495.601406][T13664] lo speed is unknown, defaulting to 1000 [ 495.608128][T13664] lo speed is unknown, defaulting to 1000 [ 495.614725][T13664] lo speed is unknown, defaulting to 1000 [ 495.813427][T13671] serio: Serial port ptm0 [ 496.811268][ T30] audit: type=1400 audit(1754855819.929:1208): avc: denied { write } for pid=13677 comm="syz.1.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 498.225443][ T30] audit: type=1400 audit(1754855821.339:1209): avc: denied { mount } for pid=13685 comm="syz.1.1359" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 498.387975][T13704] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1364'. [ 498.404288][ T30] audit: type=1400 audit(1754855821.499:1210): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 498.606395][T13708] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1364'. [ 499.407153][T13710] serio: Serial port ptm0 [ 501.135042][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.216522][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.362765][ T5893] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 501.715416][ T5893] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 501.726340][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.748072][ T5893] usb 3-1: config 0 descriptor?? [ 501.810829][ T5893] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 503.331410][ T5893] gp8psk: usb in 128 operation failed. [ 503.362768][ T5893] gp8psk: usb in 137 operation failed. [ 503.442710][ T5893] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 503.457656][ T5893] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 503.479716][ T5893] usb 3-1: USB disconnect, device number 39 [ 504.082428][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 504.131250][T13770] veth1_to_bond: entered allmulticast mode [ 504.196507][T13769] veth1_to_bond: left allmulticast mode [ 504.489177][ T30] audit: type=1400 audit(1754855827.609:1211): avc: denied { getopt } for pid=13775 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 506.078594][T13802] veth1_to_bond: entered allmulticast mode [ 506.087222][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 506.102633][T13801] veth1_to_bond: left allmulticast mode [ 507.215857][T13825] can0: slcan on ptm0. [ 507.236105][ T30] audit: type=1400 audit(1754855830.349:1212): avc: denied { getopt } for pid=13823 comm="syz.2.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.370663][T13825] can0 (unregistered): slcan off ptm0. [ 507.445681][T13833] trusted_key: syz.1.1397 sent an empty control message without MSG_MORE. [ 562.584045][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.591329][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 611.851266][ T31] INFO: task kworker/1:4:5915 blocked for more than 143 seconds. [ 611.859123][ T31] Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 [ 611.867868][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.876953][ T31] task:kworker/1:4 state:D stack:21000 pid:5915 tgid:5915 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 611.889848][ T31] Workqueue: events rfkill_sync_work [ 611.895236][ T31] Call Trace: [ 611.898519][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 611.901467][ T31] __schedule+0x1190/0x5de0 [ 611.906455][ T31] ? __pfx___schedule+0x10/0x10 [ 611.911683][ T31] ? find_held_lock+0x2b/0x80 [ 611.916695][ T31] ? schedule+0x2d7/0x3a0 [ 611.922279][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 611.973525][ T31] schedule+0xe7/0x3a0 [ 611.981179][ T31] schedule_preempt_disabled+0x13/0x30 [ 611.987384][ T31] __mutex_lock+0x82a/0x10b0 [ 611.992148][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 611.997266][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 612.001925][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 612.006949][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 612.012131][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 612.016816][ T31] ? mark_held_locks+0x49/0x80 [ 612.021636][ T31] nfc_dev_down+0x2d/0x2e0 [ 612.026048][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 612.031120][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 612.036843][ T31] rfkill_set_block+0x1fb/0x550 [ 612.041718][ T31] rfkill_sync+0x10a/0x1c0 [ 612.046132][ T31] rfkill_sync_work+0x27/0x40 [ 612.050814][ T31] process_one_work+0x9cc/0x1b70 [ 612.055820][ T31] ? __pfx_process_one_work+0x10/0x10 [ 612.061241][ T31] ? assign_work+0x1a0/0x250 [ 612.065834][ T31] worker_thread+0x6c8/0xf10 [ 612.070426][ T31] ? __kthread_parkme+0x19e/0x250 [ 612.075479][ T31] ? __pfx_worker_thread+0x10/0x10 [ 612.080584][ T31] kthread+0x3c5/0x780 [ 612.084676][ T31] ? __pfx_kthread+0x10/0x10 [ 612.089269][ T31] ? rcu_is_watching+0x12/0xc0 [ 612.094099][ T31] ? __pfx_kthread+0x10/0x10 [ 612.098768][ T31] ret_from_fork+0x5d7/0x6f0 [ 612.103370][ T31] ? __pfx_kthread+0x10/0x10 [ 612.107955][ T31] ret_from_fork_asm+0x1a/0x30 [ 612.113022][ T31] [ 612.116063][ T31] INFO: task kworker/1:5:5973 blocked for more than 143 seconds. [ 612.123877][ T31] Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 [ 612.131201][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 612.139956][ T31] task:kworker/1:5 state:D stack:23384 pid:5973 tgid:5973 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 612.151993][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 612.159025][ T31] Call Trace: [ 612.162308][ T31] [ 612.165425][ T31] __schedule+0x1190/0x5de0 [ 612.169955][ T31] ? __pfx___schedule+0x10/0x10 [ 612.174930][ T31] ? find_held_lock+0x2b/0x80 [ 612.179624][ T31] ? schedule+0x2d7/0x3a0 [ 612.183993][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 612.190656][ T31] schedule+0xe7/0x3a0 [ 612.194778][ T31] schedule_preempt_disabled+0x13/0x30 [ 612.200245][ T31] __mutex_lock+0x82a/0x10b0 [ 612.204867][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 612.211253][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 612.216193][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 612.221271][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 612.227104][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 612.233472][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 612.239623][ T31] process_one_work+0x9cc/0x1b70 [ 612.244594][ T31] ? __pfx_process_one_work+0x10/0x10 [ 612.249959][ T31] ? assign_work+0x1a0/0x250 [ 612.254620][ T31] worker_thread+0x6c8/0xf10 [ 612.259222][ T31] ? __pfx_worker_thread+0x10/0x10 [ 612.264356][ T31] kthread+0x3c5/0x780 [ 612.268510][ T31] ? __pfx_kthread+0x10/0x10 [ 612.273146][ T31] ? rcu_is_watching+0x12/0xc0 [ 612.277928][ T31] ? __pfx_kthread+0x10/0x10 [ 612.282563][ T31] ret_from_fork+0x5d7/0x6f0 [ 612.287146][ T31] ? __pfx_kthread+0x10/0x10 [ 612.291788][ T31] ret_from_fork_asm+0x1a/0x30 [ 612.296566][ T31] [ 612.299591][ T31] INFO: task syz.0.1277:13016 blocked for more than 143 seconds. [ 612.307641][ T31] Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 [ 612.315167][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 612.324042][ T31] task:syz.0.1277 state:D stack:25240 pid:13016 tgid:13016 ppid:5840 task_flags:0x400040 flags:0x00004004 [ 612.336537][ T31] Call Trace: [ 612.339814][ T31] [ 612.342825][ T31] __schedule+0x1190/0x5de0 [ 612.347335][ T31] ? rcu_is_watching+0x12/0xc0 [ 612.352297][ T31] ? __pfx___schedule+0x10/0x10 [ 612.357174][ T31] ? find_held_lock+0x2b/0x80 [ 612.362282][ T31] ? schedule+0x2d7/0x3a0 [ 612.366614][ T31] schedule+0xe7/0x3a0 [ 612.370677][ T31] schedule_timeout+0x257/0x290 [ 612.375618][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 612.381066][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.386249][ T31] __wait_for_common+0x2fc/0x4e0 [ 612.392953][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 612.398680][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 612.404294][ T31] ? find_held_lock+0x2b/0x80 [ 612.408968][ T31] ? __flush_work+0x938/0xcc0 [ 612.415100][ T31] ? __flush_work+0x4d0/0xcc0 [ 612.419787][ T31] __flush_work+0x7d7/0xcc0 [ 612.424358][ T31] ? __pfx___might_resched+0x10/0x10 [ 612.429645][ T31] ? __pfx___flush_work+0x10/0x10 [ 612.435679][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 612.441166][ T31] ? __pfx___might_resched+0x10/0x10 [ 612.446460][ T31] __cancel_work_sync+0x10c/0x130 [ 612.451506][ T31] rfkill_unregister+0x95/0x2c0 [ 612.456378][ T31] nfc_unregister_device+0x94/0x330 [ 612.461980][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 612.467732][ T31] virtual_ncidev_close+0x4b/0xa0 [ 612.472827][ T31] __fput+0x3ff/0xb70 [ 612.476820][ T31] task_work_run+0x150/0x240 [ 612.481468][ T31] ? __pfx_task_work_run+0x10/0x10 [ 612.486570][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 612.492420][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 612.497718][ T31] do_syscall_64+0x3f6/0x4c0 [ 612.502389][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.508287][ T31] RIP: 0033:0x7f3ba058ebe9 [ 612.512721][ T31] RSP: 002b:00007ffdf06474b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 612.521190][ T31] RAX: 0000000000000000 RBX: 0000000000071db9 RCX: 00007f3ba058ebe9 [ 612.529203][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 612.537221][ T31] RBP: 00007f3ba07b7da0 R08: 0000000000000001 R09: 00000006f06477af [ 612.545297][ T31] R10: 0000001b30b20000 R11: 0000000000000246 R12: 00007f3ba07b609c [ 612.553317][ T31] R13: 00007f3ba07b6090 R14: ffffffffffffffff R15: 00007ffdf06475d0 [ 612.561334][ T31] [ 612.564390][ T31] [ 612.564390][ T31] Showing all locks held in the system: [ 612.574424][ T31] 1 lock held by khungtaskd/31: [ 612.579353][ T31] #0: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 612.589355][ T31] 5 locks held by kworker/u8:7/4189: [ 612.594889][ T31] 2 locks held by getty/5613: [ 612.599562][ T31] #0: ffff88814d1e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 612.609335][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 612.619469][ T31] 1 lock held by syz-executor/5846: [ 612.624680][ T31] #0: ffffffff9081eaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 612.634827][ T31] 4 locks held by kworker/1:4/5915: [ 612.640002][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 612.650438][ T31] #1: ffffc900044efd10 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 612.662217][ T31] #2: ffffffff9081eaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 612.672181][ T31] #3: ffff88807c6a4100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 612.681231][ T31] 3 locks held by kworker/1:5/5973: [ 612.686443][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 612.696910][ T31] #1: ffffc90004f1fd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 612.709931][ T31] #2: ffffffff9081eaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 612.721398][ T31] 5 locks held by kworker/u8:11/7315: [ 612.726763][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 612.736718][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 612.745433][ T31] #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 612.754775][ T31] #3: ffffffff9b045d18 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 612.765147][ T31] #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 612.774830][ T31] 1 lock held by syz.0.1277/13016: [ 612.779914][ T31] #0: ffff88807c6a4100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 612.789705][ T31] 2 locks held by syz-executor/13235: [ 612.795101][ T31] #0: ffff888030f48918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 612.804526][ T31] #1: ffffffff9081eaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 612.814502][ T31] 2 locks held by syz.5.1399/13842: [ 612.819699][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.828192][ T31] #1: ffffffff9081eaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x136/0x750 [ 612.838250][ T31] 1 lock held by syz.5.1399/13843: [ 612.843389][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.852095][ T31] 1 lock held by syz.1.1402/14174: [ 612.857306][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.865917][ T31] 1 lock held by syz.2.1403/14176: [ 612.871069][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.879529][ T31] 1 lock held by syz-executor/14183: [ 612.884858][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.893404][ T31] 1 lock held by syz-executor/14185: [ 612.898880][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.907414][ T31] 1 lock held by syz-executor/14187: [ 612.912730][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.921239][ T31] 1 lock held by syz-executor/14189: [ 612.926517][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.934968][ T31] 1 lock held by syz-executor/14191: [ 612.940255][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.948871][ T31] 1 lock held by syz-executor/14205: [ 612.954378][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.963046][ T31] 1 lock held by syz-executor/14207: [ 612.969280][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.978306][ T31] 1 lock held by syz-executor/14209: [ 612.983729][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 612.992445][ T31] 1 lock held by syz-executor/14211: [ 612.997724][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 613.006206][ T31] 1 lock held by syz-executor/14213: [ 613.011566][ T31] #0: ffffffff8f302ec8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 613.020047][ T31] 2 locks held by dhcpcd/14216: [ 613.025035][ T31] #0: ffff888078eee258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 613.034781][ T31] #1: ffffffff8e5cc778 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 613.045113][ T31] [ 613.047592][ T31] ============================================= [ 613.047592][ T31] [ 613.056321][ T31] NMI backtrace for cpu 1 [ 613.056334][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 613.056355][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.056365][ T31] Call Trace: [ 613.056371][ T31] [ 613.056377][ T31] dump_stack_lvl+0x116/0x1f0 [ 613.056400][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 613.056422][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 613.056449][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 613.056474][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 613.056498][ T31] watchdog+0xf0e/0x1260 [ 613.056518][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.056533][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.056548][ T31] ? __kthread_parkme+0x19e/0x250 [ 613.056571][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.056586][ T31] kthread+0x3c5/0x780 [ 613.056602][ T31] ? __pfx_kthread+0x10/0x10 [ 613.056619][ T31] ? rcu_is_watching+0x12/0xc0 [ 613.056639][ T31] ? __pfx_kthread+0x10/0x10 [ 613.056656][ T31] ret_from_fork+0x5d7/0x6f0 [ 613.056671][ T31] ? __pfx_kthread+0x10/0x10 [ 613.056688][ T31] ret_from_fork_asm+0x1a/0x30 [ 613.056719][ T31] [ 613.056725][ T31] Sending NMI from CPU 1 to CPUs 0: [ 613.181384][ C0] NMI backtrace for cpu 0 [ 613.181400][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 613.181416][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.181425][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 613.181454][ C0] Code: ac 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 613.181468][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 613.181479][ C0] RAX: 000000000225354b RBX: 0000000000000000 RCX: ffffffff8b934c29 [ 613.181488][ C0] RDX: 0000000000000000 RSI: ffffffff8de4f125 RDI: ffffffff8c162480 [ 613.181496][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 613.181505][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 613.181513][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab3590 R15: 0000000000000000 [ 613.181522][ C0] FS: 0000000000000000(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 613.181536][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.181544][ C0] CR2: 0000560e172f8168 CR3: 000000000e380000 CR4: 00000000003526f0 [ 613.181553][ C0] Call Trace: [ 613.181559][ C0] [ 613.181563][ C0] default_idle+0x13/0x20 [ 613.181578][ C0] default_idle_call+0x6d/0xb0 [ 613.181592][ C0] do_idle+0x391/0x510 [ 613.181611][ C0] ? __pfx_do_idle+0x10/0x10 [ 613.181626][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 613.181642][ C0] cpu_startup_entry+0x4f/0x60 [ 613.181658][ C0] rest_init+0x16b/0x2b0 [ 613.181673][ C0] ? acpi_subsystem_init+0x133/0x180 [ 613.181692][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 613.181712][ C0] start_kernel+0x3ee/0x4d0 [ 613.181733][ C0] x86_64_start_reservations+0x18/0x30 [ 613.181751][ C0] x86_64_start_kernel+0x130/0x190 [ 613.181769][ C0] common_startup_64+0x13e/0x148 [ 613.181789][ C0] [ 613.182444][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 613.380730][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 613.392177][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.402301][ T31] Call Trace: [ 613.405570][ T31] [ 613.408488][ T31] dump_stack_lvl+0x3d/0x1f0 [ 613.413066][ T31] vpanic+0x6e8/0x7a0 [ 613.417126][ T31] ? __pfx_vpanic+0x10/0x10 [ 613.421630][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 613.427606][ T31] panic+0xca/0xd0 [ 613.431314][ T31] ? __pfx_panic+0x10/0x10 [ 613.435714][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 613.441070][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 613.447223][ T31] ? watchdog+0xd78/0x1260 [ 613.451634][ T31] ? watchdog+0xd6b/0x1260 [ 613.456056][ T31] watchdog+0xd89/0x1260 [ 613.460300][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.464993][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.470187][ T31] ? __kthread_parkme+0x19e/0x250 [ 613.475207][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.479864][ T31] kthread+0x3c5/0x780 [ 613.483915][ T31] ? __pfx_kthread+0x10/0x10 [ 613.488500][ T31] ? rcu_is_watching+0x12/0xc0 [ 613.493247][ T31] ? __pfx_kthread+0x10/0x10 [ 613.497817][ T31] ret_from_fork+0x5d7/0x6f0 [ 613.502384][ T31] ? __pfx_kthread+0x10/0x10 [ 613.507050][ T31] ret_from_fork_asm+0x1a/0x30 [ 613.511816][ T31] [ 613.515076][ T31] Kernel Offset: disabled [ 613.519380][ T31] Rebooting in 86400 seconds..