last executing test programs: 8m16.809437536s ago: executing program 2 (id=66): socket$kcm(0xa, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) io_uring_setup(0x3ef, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x1c}, 0x94) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x1569, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 8m13.411832312s ago: executing program 2 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="9000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000680012800b0001006272696467650000580002800c001f000200000000000000050016803b000000000005002b00fa000000050029000000000008000400010100000c002e0000000000000000000c001e00a00000000000000008001b00fbffffff050083b32a0000000000", @ANYRES32=0x0, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x800) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x2000000000000021, 0x2, 0x2) syz_open_procfs(0x0, 0x0) 8m9.384127464s ago: executing program 2 (id=81): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc849) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=bind:7-', @ANYRESOCT]) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) add_key$fscrypt_v1(0x0, &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000000000006161616161616161616161616161616161616161616161616161616161616131313131313131313131313131313131313131313131313100000000006c000000635c01eed92c540356fa0f4b4de9df77c2abe67e7fe88ec4e772170a5c6f3107e8e5ce6c55c804f379cfd59886d6dc90550fad99e7ff01000000000000dd1ef4db65c06efe5631467c6548289bb6576e7b834450db4c5bd9060bd0f72bf7bbebf9037718fe7fbe535b25444c9265cc29615e1eba569d16aabc76ba89f6e51c03357209130f90758251634ab01b9393bd0a7f902703b8e4ecd5134f32"], 0x48, r7) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r6, 0x13) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x20000129, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaad8c6a0bf000000002cfffe8000000006000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 8m8.094035926s ago: executing program 2 (id=84): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x152) mknodat$loop(r3, &(0x7f00000053c0)='./file1\x00', 0x2000, 0x1) 8m7.38978365s ago: executing program 2 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x1fffff, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[]) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 8m7.004438449s ago: executing program 2 (id=88): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002240)={0xffffffffffffffff, 0x21}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2036) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) acct(&(0x7f00000021c0)='./file0/file0\x00') write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68fef08000000000000001c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x90, 0x0, 0x6, {0x1, 0x0, 0x7fffbfff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r6, r7, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 8m6.663151145s ago: executing program 32 (id=88): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002240)={0xffffffffffffffff, 0x21}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2036) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) acct(&(0x7f00000021c0)='./file0/file0\x00') write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x90, 0x0, 0x6, {0x1, 0x0, 0x7fffbfff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r6, r7, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 7m6.515689583s ago: executing program 0 (id=274): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 7m4.994205593s ago: executing program 0 (id=280): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000c00), 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) (async) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) readv(r9, &(0x7f0000000700)=[{&(0x7f0000001980)=""/237, 0xed}], 0x1) close_range(r7, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r7, 0x8004510a, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x1402, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x20000051) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf5ff52ca946691ec}]}, @IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4080) 7m4.828446936s ago: executing program 0 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x1fffff, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) shutdown(r0, 0x1) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[]) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 7m3.89302549s ago: executing program 0 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000001a80)='net/unix\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@abs, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r6, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6m59.856221219s ago: executing program 0 (id=297): openat$vcs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) recvmsg$unix(r0, 0x0, 0x141) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0x11d7, 0x0, &(0x7f0000000880), 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000300)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00009e4000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x100010, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e032000"], 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x34, 0x33, 0x0, 0x35, 0x0, 0x34, 0x63, 0x0, 0x64, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 6m56.899984448s ago: executing program 0 (id=309): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r2, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000200)={0x1, 0x2, 0x3, &(0x7f0000000040)={0xf, "ba56b4f76c1147713bbb79931987bb23849e329969dbeedd97d1f1948f4e2c833a"}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r9 = dup(r8) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) 6m41.668961418s ago: executing program 33 (id=309): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r2, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000200)={0x1, 0x2, 0x3, &(0x7f0000000040)={0xf, "ba56b4f76c1147713bbb79931987bb23849e329969dbeedd97d1f1948f4e2c833a"}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r9 = dup(r8) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) 1m3.140289604s ago: executing program 3 (id=1557): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x80, 0x7ff, 0x60, 0x9, 0xec0}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0x4018aee3, 0x110c2afffa) 1m2.848453428s ago: executing program 3 (id=1560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x314a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000440)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r7, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 58.952355723s ago: executing program 3 (id=1571): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x910, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)=':\'\x00', &(0x7f00000000c0)='.\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[], 0x0) accept(r6, 0x0, 0x0) 55.786747598s ago: executing program 3 (id=1583): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x7200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 55.268167626s ago: executing program 3 (id=1585): getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), 0x0) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0xfffffffffffffffe, 0x4) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000927000/0x7000)=nil, 0x2) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) r6 = socket$inet(0x2, 0x3, 0x5) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r6, &(0x7f0000000480)=ANY=[], 0x44) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000004c0)={r9, 0x2, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0x4]}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0xf) 54.732759143s ago: executing program 3 (id=1588): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1c", 0x1}], 0x1}}], 0x1, 0x1c000) r1 = fsopen(&(0x7f0000000680)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000001000), &(0x7f00000010c0)=0x68) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r5 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x9, 0x80, 0xfe, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "c60187f6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x3b9, 0x3, 0x8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0x5, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xfd, 0xb4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x7f, 0x1}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x8, 0x0, 0x8, 0x1}, 0x47, &(0x7f0000000100)={0x5, 0xf, 0x47, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0xff, 0xf00, 0x4, [0xff0030, 0xff0f, 0x30, 0xc0, 0x0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0xd6, 0xee00}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "79fba03f5072c82c0125d27a034a1ca3"}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x283f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1401}}, {0x4a, &(0x7f0000000280)=@string={0x4a, 0x3, "7126c53230db40c10ce71f49ade71657571b53669c3f653eb97f484435213596178f7612a73c8de399c2d0c40e5bfc03a2df43f64d6b3e704422ca88e20002560c989c1ffed8bc35"}}, {0x84, &(0x7f0000000300)=@string={0x84, 0x3, "214c530fe8e2b84ce0d1f96ab1d883543d079cd100337b0715fe28ccc3a4fb8c7740a021dfea6af5865a4ba4b12ca56a1e43fad4c0a70305f8f31975c5d1fe68008e25a2c9a69ddb9d809be5830dbffb6cc2d5919edefe7a36814261f167aebcf514c41d668bfeffc918c7ced59db1068e4aede903494d52b35e7b98ee298367ba22"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x427}}, {0xd5, &(0x7f0000000500)=@string={0xd5, 0x3, "635a2860e6ca848810747d0bdea53219a7499251055dfeb82fe74b6aa44cc5385af44331370494beca816dedb2bb18c9eb7b1d7701c0fd11c6782408117337518ce54a34dd41fc3de1c27521d4bd08efe79c87f0722326e2070850fa4f6c3aca5fa7a0995ffbe75504fab26e98ad43364751b5e74922afbad193dafddff6ec4e7b42dd9c27b5a2ecf62640d67264944034b5165b362a8d10eabc9ecb0b1778d8484122487800a0bebc8d2a771aec20af4cfaeb56d40e78c48b28d7562fb3e73c05e5f3eb00"/211}}, {0x2f, &(0x7f0000000680)=ANY=[@ANYBLOB="2f03187535daf2d600534ddf294ed60ae8f504e1ce471af1f16840a9c934119c04f452836294eeaefb4d47d084304b81f2660a6a9c9c901a708aff777ab1740a94c198b01d07ef9c6ce6c041aa2fa590cf47f99e04b1b287c355114c59afbc0087fe6525ecf13c905b35a41f61dfa897b13f08c8dbb19fab27e4d83313704658e0e7eaa2e2025c4a96613061cc23945ee074128712c2cf686b5da1e8ea3219325d888e00"/174]}]}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="201702160000700e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, &(0x7f0000000740)={0x14, &(0x7f0000000400)={0x80, 0x21, 0xe, {0xe, 0x1, "87368693367a69e6305fc45a"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x40, 0x14, 0x5, "7dfac15d48"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000840)={0x20, 0x81, 0x3, "77d01d"}, &(0x7f0000000880)={0x20, 0x82, 0x3, "b6f816"}, &(0x7f00000008c0)={0x20, 0x83, 0x3, "050943"}, &(0x7f0000000900)={0x20, 0x84, 0x1, "da"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "5f98d8"}}) 53.901201366s ago: executing program 34 (id=1588): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1c", 0x1}], 0x1}}], 0x1, 0x1c000) r1 = fsopen(&(0x7f0000000680)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000001000), &(0x7f00000010c0)=0x68) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r5 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x9, 0x80, 0xfe, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "c60187f6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x3b9, 0x3, 0x8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0x5, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xfd, 0xb4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x7f, 0x1}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x8, 0x0, 0x8, 0x1}, 0x47, &(0x7f0000000100)={0x5, 0xf, 0x47, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0xff, 0xf00, 0x4, [0xff0030, 0xff0f, 0x30, 0xc0, 0x0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0xd6, 0xee00}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "79fba03f5072c82c0125d27a034a1ca3"}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x283f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1401}}, {0x4a, &(0x7f0000000280)=@string={0x4a, 0x3, "7126c53230db40c10ce71f49ade71657571b53669c3f653eb97f484435213596178f7612a73c8de399c2d0c40e5bfc03a2df43f64d6b3e704422ca88e20002560c989c1ffed8bc35"}}, {0x84, &(0x7f0000000300)=@string={0x84, 0x3, "214c530fe8e2b84ce0d1f96ab1d883543d079cd100337b0715fe28ccc3a4fb8c7740a021dfea6af5865a4ba4b12ca56a1e43fad4c0a70305f8f31975c5d1fe68008e25a2c9a69ddb9d809be5830dbffb6cc2d5919edefe7a36814261f167aebcf514c41d668bfeffc918c7ced59db1068e4aede903494d52b35e7b98ee298367ba22"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x427}}, {0xd5, &(0x7f0000000500)=@string={0xd5, 0x3, "635a2860e6ca848810747d0bdea53219a7499251055dfeb82fe74b6aa44cc5385af44331370494beca816dedb2bb18c9eb7b1d7701c0fd11c6782408117337518ce54a34dd41fc3de1c27521d4bd08efe79c87f0722326e2070850fa4f6c3aca5fa7a0995ffbe75504fab26e98ad43364751b5e74922afbad193dafddff6ec4e7b42dd9c27b5a2ecf62640d67264944034b5165b362a8d10eabc9ecb0b1778d8484122487800a0bebc8d2a771aec20af4cfaeb56d40e78c48b28d7562fb3e73c05e5f3eb00"/211}}, {0x2f, &(0x7f0000000680)=ANY=[@ANYBLOB="2f03187535daf2d600534ddf294ed60ae8f504e1ce471af1f16840a9c934119c04f452836294eeaefb4d47d084304b81f2660a6a9c9c901a708aff777ab1740a94c198b01d07ef9c6ce6c041aa2fa590cf47f99e04b1b287c355114c59afbc0087fe6525ecf13c905b35a41f61dfa897b13f08c8dbb19fab27e4d83313704658e0e7eaa2e2025c4a96613061cc23945ee074128712c2cf686b5da1e8ea3219325d888e00"/174]}]}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="201702160000700e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, &(0x7f0000000740)={0x14, &(0x7f0000000400)={0x80, 0x21, 0xe, {0xe, 0x1, "87368693367a69e6305fc45a"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x40, 0x14, 0x5, "7dfac15d48"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000840)={0x20, 0x81, 0x3, "77d01d"}, &(0x7f0000000880)={0x20, 0x82, 0x3, "b6f816"}, &(0x7f00000008c0)={0x20, 0x83, 0x3, "050943"}, &(0x7f0000000900)={0x20, 0x84, 0x1, "da"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "5f98d8"}}) 12.207903166s ago: executing program 6 (id=1708): userfaultfd(0x1) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 12.095378907s ago: executing program 6 (id=1711): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000000c0), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 11.608897525s ago: executing program 4 (id=1712): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0xa7, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x2, 0x1, 0x3, 0x50, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x6, 0xcc}, {0x6, 0x24, 0x1a, 0x7, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @mdlm={0x15}, @dmm={0x7, 0x24, 0x14, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x2, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x618, 0xf, 0x0, 0x7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x6, 0x8, 0x9, 0x20}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0xa1, &(0x7f0000000240)=@string={0xa1, 0x3, "cc06a8d9f78108595dc6610d3b584fe82513d9d847d9a38244dc077f280ffec3a60c492e1387eafebd998bbb87aa68b3bc48083b0ff73c4f5a748263694e020c1252dce22521a44763d448ce42484ccaf27c9c11940696499e3f141d244d45c21e13534050fff5ba350c40968c53329025d3deb682d837eb8c9a7bd9d9dde5b1c8e97164a45f7021cab4e840b02efdbe9a8bb294e1ca6f4dd3ec80f3f1f6c0"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000003000/0x3000)=nil, 0x3000, &(0x7f0000000000)='pids.current\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x22, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xfdfff034}, {0x6, 0x3, 0xa, 0x4}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.595276235s ago: executing program 7 (id=1713): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{0x80000000}}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={r1, 0x0, &(0x7f0000000440)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r4, &(0x7f00000007c0)=[{0x80000000}], 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000f12500010025bd7000fcdbdf2507000000"], 0x14}}, 0x2400e844) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{0x0, 0x5, 0x0, 0x7, 0xfe54, 0x0, 0x200, 0x7f, 0x3, 0x9, 0x9, 0x9, 0x7, 0xa4, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001b40)={{0x0, 0x8, 0x11, 0xd751, 0x80000000007, 0x6, 0x1017, 0x7, 0x1003, 0xd3f, 0x5, 0x8, 0xfffffffffffffc00, 0x101, 0xffffffffffffff7f}}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r5, 0x0, 0x2, [0x1, 0x8]}, {0x80000000, r3, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000209010400000000000000000a000000080005400000000e2c0002001400018008000100ffffffff08000200ffffffff0600034008a900000c13c080050001003a0000000800064000200001"], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) 11.155051323s ago: executing program 6 (id=1716): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x28, 0x0, &(0x7f0000000680)="000000006bd4871ff589d5c113b5146f3dbdacbef58ed5e04ad97ffe1e341f0d36e149b4cb376e9f", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000980)={0xff, 0xee, 0x1, 0x0}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x5, r7, &(0x7f0000000200), 0x0) 11.11221117s ago: executing program 7 (id=1717): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) dup(0xffffffffffffffff) (async) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r0, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x36) splice(0xffffffffffffffff, &(0x7f000000c280)=0xcc5, 0xffffffffffffffff, 0x0, 0x9, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="0f01caf36fb8cb008ec80fc72e6c0066b86c402ba20f23d00f21f86635300000090f23f80f08660fc7b004000f2021b805008ee80fc76905", 0x38}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) 6.802096981s ago: executing program 4 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000040000100fcff070004000000010000000800cb80040008800c0001800800108004000f800c0000000600000000000000c3a66347cd4d2b259ff94a92f7947e2ef3ae82b23e5c7e7760029d1038e75197631647e45f513398ef08979bda7f6487eaddb11eca90859a276a8fa66ddd04a87bb8c76034"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x40800) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58010000", @ANYRES16, @ANYBLOB="010026bd7000000000", @ANYRES32=r8, @ANYBLOB="0600cd000000000031013300000000000802110000010802110000005050505050505f00ffffffffffffff"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000000d40)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000200)="a905000400007464f4019e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb00000000000000", 0xf}], 0x2}}], 0x1, 0x4004040) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) 6.740626009s ago: executing program 1 (id=1728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) getitimer(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) socket(0x15, 0x0, 0x400003) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x265, 0x26, 0xffffffffffffffff, 0x0) fanotify_mark(r4, 0x441, 0x800000a, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x4, 0x14000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x2, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x1, 0x4, 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000019680)={0x6, 0x4, &(0x7f0000019640)=ANY=[@ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) dup(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x6}, 0x50) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) unshare(0x6a040000) 6.059930258s ago: executing program 6 (id=1729): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000804) 6.023285517s ago: executing program 7 (id=1730): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="2008010000040000"], 0x20}}, 0x4084) 5.964845158s ago: executing program 1 (id=1731): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="9255968d", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a00000000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x22008080}, 0x40) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex_waitv(&(0x7f0000000540), 0x0, 0x0, &(0x7f00000006c0)={r6, r7+10000000}, 0x0) setsockopt$inet6_int(r5, 0x29, 0xcf, 0x0, 0x0) timer_getoverrun(r4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r8, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) timer_create(0x5, &(0x7f0000000140)={0x0, 0x9, 0x4, @tid=r3}, &(0x7f00000001c0)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x1000) r9 = memfd_secret(0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x11, r9, 0xffffe000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x18a80, 0x0) 5.607796244s ago: executing program 4 (id=1732): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x2002000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 4.772621218s ago: executing program 1 (id=1734): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000180)={0x800, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='efs\x00', 0x208000, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) 4.484781954s ago: executing program 4 (id=1736): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x90000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000100ffff000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000caffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xc2c00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r1}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 4.268703847s ago: executing program 4 (id=1737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x2, 0x1, 0x8080000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.568285738s ago: executing program 5 (id=1738): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x1, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r7 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x890d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) 3.336336797s ago: executing program 1 (id=1739): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x28, 0x0, &(0x7f0000000680)="000000006bd4871ff589d5c113b5146f3dbdacbef58ed5e04ad97ffe1e341f0d36e149b4cb376e9f", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000980)={0xff, 0xee, 0x1, 0x0}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x5, r7, &(0x7f0000000200), 0x0) 2.999373577s ago: executing program 4 (id=1740): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x47d7, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @auto="3946884d86bf9a82"}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x3, {0x2, 0xff, 0x4}, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000180)={0x3a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x2, 'ovf\x00', 0x3, 0x10, 0x6c}, 0x2c) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[0x9, 0xfffffffa, 0xe5, 0x3ff, 0x1000, 0x9]}) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.682903276s ago: executing program 7 (id=1741): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = memfd_create(&(0x7f0000000000)='\\\\&\x0e\x00', 0x4) setresuid(0xee00, 0xee00, 0x0) fchmod(r2, 0x84) splice(r0, 0x0, r1, 0x0, 0x7c1c, 0x8) r3 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYRES16=r3], &(0x7f00000003c0)='GPL\x00'}, 0x94) syz_usb_ep_read(r4, 0xb4, 0xee, &(0x7f0000000200)=""/238) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='qgroup_meta_reserve\x00', r5}, 0x18) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4048aecb, &(0x7f00000034c0)={{0x6, 0x0, 0x80, {0xffffffffffffffff, 0xb000, 0x1}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9e7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf2805372a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504cbfb4e9d4d100ea64ffff5208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56080000000007000000b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab77ff8898d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0fa8d86b26cf0081cd2d80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb007fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77030094543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ee1409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) timer_create(0x1, &(0x7f0000000080)={0x0, 0x39, 0x2}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000000380)={{}, {r10, r11+10000000}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xb, 0x5, 0xc) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r12, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220b010000c3bdda06cb5058abfcd9c5041264dd12578a8c67976ab72db1a94bbf510606bff1ad6b8dd60db0e59cebbffafb3e4bd8c4769f"], 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="0000348000000000000000003c70fc6a7f4c424314fa37e89c66ad2bce8760d79d0f44efd6fcb12720caab3f34f7a02f6f599bfe79dcdf3e1ecc2a71842dd91d9d9e8713d98c004f4a670a01245715fa8ce2a30d36ee82718858d9da06d98f7ad0f1a36110493638ab8b145e36935e1c288e4c98277ae02b1a2d3c23ae070e9e64c33787067a5e14cefc8f5aa338abf7841ee51dec7f01574c53451b", @ANYRES8=r1], 0x38}, 0x1, 0x300, 0x0, 0x44000}, 0x40) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) 2.079048671s ago: executing program 7 (id=1742): socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4958, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x141}, 0x0, &(0x7f0000000380)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = io_uring_setup(0x80070c5, &(0x7f00000002c0)={0x0, 0xf76f, 0x10, 0x3, 0x155}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffc, 0x0, @private1, 0x3}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001002abd70000000040000000000", @ANYRES32=0x0, @ANYBLOB="400001000063f2c3b975c73c4ec502786c00000014ecff766c616e2600356ba8c2000000000000080004000e0400100c002b80080003a0ff51ec01ccaca93fb6c622fb9b16a7000600000000"], 0x48}}, 0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 1.688039238s ago: executing program 5 (id=1743): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x6, 0x3}, @generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000913000000000000030000008500000027000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x1309, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$unix(0x1, 0x1, 0x0) rt_sigqueueinfo(0x0, 0x2a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$tipc(0x1e, 0x2, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.663759867s ago: executing program 6 (id=1744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x8, 0x20, @empty, @local, 0x8000, 0x80, 0x8, 0xf2ad}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x68, r2, 0x20, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x68}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r6, 0x40045201, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000180)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 916.28911ms ago: executing program 6 (id=1745): unshare(0xa000400) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x203800000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000980)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "3178d6", 0x28, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @remote, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x8, 0x0, 0x1, 0xd, 0x0, 0x1, 0x4e24, 0x4e24, 0x3, 0x4, 0x0, 0x0, 0x1}}}}}}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) write$char_usb(r4, 0x0, 0x0) 744.386106ms ago: executing program 5 (id=1746): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x6) listen(r1, 0xa) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 743.913199ms ago: executing program 7 (id=1747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe00000010800"], 0x5c}, 0x1, 0x6c}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 722.458583ms ago: executing program 5 (id=1748): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) (fail_nth: 6) 642.680824ms ago: executing program 5 (id=1749): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x9, 0x81, 0xd1, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@newqdisc={0x34, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a0000b4bf769aafcc43b7f900080000002200000c0000000000000000000000005f00f2d75b34a6ad04f51230ed8dda482ccb21a3b9420049d924c437b8113823d3975f3f76635939e96e8bab5e427385471d9eca7811c3bd4736124e97e3"], 0x0, 0x2e}, 0x28) (async, rerun: 32) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1b, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f00000029c0), 0x400006d, 0x20000004) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040f04080219200a1c9c6d7cd19ec75975645fa9253b83b75c7f24025dd85d2096d6d13441ddfc1c7f605ab98cb6014ae4264c9fc683f91d4b990482ed8dd0c86946fb312a3059b5e1319c0d181a0e32081efbe89c193f18d3237b8e8fee66f0dadc131d6be199fca9f91499971f6a5a2366345a10a9d0eb792c3d12c8617bd1d2550a037e8acce0c4277e05a01172df543ba5e2bed00683ea56e15e73bb81eed742d06d9d2db6c386dc00"], 0x7) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="050008000000fcdbdf250200000008000000", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) (async) write$nci(r8, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x3, @v={0x6, 0x4, 0x6, 0x3, {0x7, 0x7, "d899db024d8942fe"}, 0x1}}, 0x12) (async) syz_io_uring_setup(0xcc8, &(0x7f0000000540)={0x0, 0x24c1, 0x10, 0x1, 0x310}, &(0x7f00000006c0), &(0x7f0000000280)) 448.069007ms ago: executing program 5 (id=1750): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x100, 0x0) recvmsg$kcm(r0, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) getxattr(0x0, &(0x7f0000000080)=@known='system.advise\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)='s', 0x48, 0x40, &(0x7f0000000000)={0x11, 0xd, r3, 0x1, 0x4, 0x6, @remote}, 0x14) r4 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1001, 0x9, 0x4, 0x8000, 0xfffd, 0x8ec, 0x3, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201010200000040b804020240000102030200000000000000900209040008010701010709050102ff030465ff0d05820200020200de32a7b1c42be52f2aecfc0334dc63b451490ab924f72e335ce2d55923e7110209d0e98c310817a4f438e5b5b392dbabb78d45e5b93902e525d219a66f4db3a85de69c8a120f007e8e687f813253665e791217a3b56c907e5690fe4ebce23be25b61a730dbacf8abbb8939f332607ebd056159e247cbd1ffaf9fa647fa01010b8a3febcc53146b8922b9f5f8a7090ba39a2b"], &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xa6, 0x85, 0x7, 0x40, 0x5}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xfd, 0x9, 0x8}]}, 0x7, [{0xf7, &(0x7f00000001c0)=@string={0xf7, 0x3, "180c7466eda28a1f379833f334c8662161a980320d01787973b2dd468d68b8712f063083b7ef5a7bac4038d954660cba8cdf3367515079b83c68e43ef48b8b7575c14033b1b1917d02b77dd68dcd2d0f4f7bc6c81f1b591006da81dad5f4e2eebe16707e828428a806575e32c993e27111abcedf4e9abb47e6caf91d777f2bfcbebe55daff4fcc757e13fa4673beea8e636f442ace8a08312ad4ce173f356c58a58c7afc74153f54a65cdb3a860cc8529e072c1db7ad38ca8114eb210ebfc3bf2b434264a22e3beaf66243e9173014530d7da309b52036ad525c06a32c6d1e57714e72985b99692865cb57b2527962f5ae12e606a0"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0xcb, &(0x7f0000000300)=@string={0xcb, 0x3, "5f4fc79fea7fe4d7d9eb55df3c92f1b3946182e64dd1e9db906e41720859f27f5f63b42bce5fc93c4f9a80698cee425f166baafdabfc576b59ddf743f10c10246c121d0a383a2209560c9fe7b07189c7bd455f7abfc692537ff73b6ac8599d87a2dd6c18c374668550ebd3a70cb65fde570401943c297b311d29766cf5f52d212bc571dc6d85176adc411d5cc93d99b33430319d5c7d6926bc3d583b975967ff082b4fcbba6c8881187cdc05a0913e0d30175358f2e3772451a9899a86b6eca5df2a59e059e245bbef"}}, {0x13, &(0x7f0000000400)=@string={0x13, 0x3, "31d3fc9a136817bdc94f562d66af5b5e22"}}, {0x22, &(0x7f0000000440)=@string={0x22, 0x3, "f341e84331a561654b623fdf620d3b8387b138b2bd910ccf1737baaf9766dbc1"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40d}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x40, 0x23, 0x60, {0x60, 0x23, "2f945e92c5802db65639ace2d8ff27b14168a84ada59b1000eba647b04408696a8f03a62c0e629327ddce50cc79b579492296a17743706b46118bcf2cf1b6810f57388d551d4e1ad691c72b68f6f5dfd2204a90386ec4ad076dffec39db1"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000780)={0x20, 0x5, 0x7c, "39dcb8a4a544bed6912218a9029bbec92429a9f271d10d2ffaa3bef4d5112426950f58a61694da88e2911e575ee0758520fcee2ec3d675679fcc5700e8cc504acf16f1d527bfa87d0003d5de732b77b1fef959d1bdf2bc191bcbab7aa9a1d1e060e13d5c376cb6cd39d78c3a19797f15ce65e10f02aeadc8fce5b32c"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xf2}, &(0x7f0000000c40)=ANY=[@ANYBLOB="2000b800000000b64d54d3b40639d1e70d87ddbfe50ecd43e76b10688ae3d78de7fe3fdea3531e5fc019984cf10d9a77e3ca475bf2d80f0be5e875a6ecca30a6668403e7cd9d93f27931b75eb6ea8c3b0411d20bae59c48ad50abc9fa5ca88fa8bb42998c9507c81685d2e544b140cc57a7f2d2aa030f93483fb84b62e6f5f72b4a40d5cbb566fc84bf9c3dddf66c82c9dc2ff5973258687698824b2386461aef2df29bc2eafacc8727b716a8bfb5fd8cd65c664144054dd25fe836bed527ae9558f219cc83c6b5786944ef9f936299fe04233479df12dd6ca040c12735030d88933147d10784dc59e71a7581a03f22cfd8d605b19cafb8e6b555fa67ede0f770b7075735f4c97725b830cc3bb42e58d1219af78f560c62d4cdafdd2d3c63bf24a797ec7ac855974ed7342c7eaf86495ef5d18198f723b5ed4af21202a791054a1da87d14a1aa39440f3d77721d68d2d0216cd2d8aea321b4157a5686a793e648fa9eef0d1b23c88dab28dd053051d0ceace781952b2ca82620c028340f90b961ee8b31e7c8395f1788cc22ef46d19185a02d0e79b0c888f1a17d736d21bb3fb4eb3d047c754ddca95b6e3f868dba0e8e65e0abf79ddf75d90ae61b0017f4708000000caaf05f7724496f4ec01535eb3d4d52c9d194965bd0b28a8e3f2115bb39dd298"], &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x85}}) r6 = eventfd(0x3) write(r6, &(0x7f0000000bc0)="7e841f6cde686a69980e5cbb5d055fa181d365824e86ba50b356ccf967bc3a01da5e9c6b16b3fe3357a56430309b5f0629534f34f20a4139334d2d392d11018368", 0x41) io_submit(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 235.407838ms ago: executing program 1 (id=1751): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x4000000, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 0s ago: executing program 1 (id=1752): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000080)={0x2, 0x80, 0x3, 0x80000003, 0xe, "0060730000e7a489020401030040000000f600"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): :3201.0007: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.6-1/input0 [ 420.448142][T10384] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 420.486698][T10384] SELinux: failed to load policy [ 420.492180][ T5862] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 420.545249][T10384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10384 comm=syz.3.1146 [ 420.662837][ T5862] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 420.673764][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 420.688370][ T10] usb 7-1: USB disconnect, device number 32 [ 420.697522][ T5862] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.737300][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 420.765288][ T5862] usb 5-1: Product: syz [ 420.777082][ T5862] usb 5-1: Manufacturer: syz [ 420.786569][ T5862] usb 5-1: SerialNumber: syz [ 421.751077][ T5862] usb 5-1: config 0 descriptor?? [ 421.781883][ T5862] hub 5-1:0.0: bad descriptor, ignoring hub [ 421.787811][ T5862] hub 5-1:0.0: probe with driver hub failed with error -5 [ 421.802093][ T5862] usb 5-1: selecting invalid altsetting 0 [ 422.361079][ T10] usb 5-1: USB disconnect, device number 49 [ 423.181526][T10423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10423 comm=syz.5.1158 [ 423.330376][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 423.390843][ T5862] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 423.550251][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 423.559807][ T5862] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 423.570315][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 423.575792][ T5862] usb 7-1: config 179 has no interface number 0 [ 423.582891][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 423.582979][ T5862] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 423.619522][ T5862] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 423.622810][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.632300][ T5862] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 423.653371][ T5862] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 423.685355][ T10] usb 5-1: config 0 has no interface number 0 [ 423.689472][ T5862] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 423.705983][ T5862] usb 7-1: config 179 interface 65 has no altsetting 0 [ 423.710305][ T10] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 423.726262][ T5862] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 423.728248][T10430] fuse: Bad value for 'fd' [ 423.735758][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.753239][T10423] overlayfs: missing 'workdir' [ 423.810206][T10420] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 423.827262][ T5862] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input18 [ 423.830231][ T10] usb 5-1: config 0 interface 8 has no altsetting 0 [ 423.883220][ T10] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 423.918784][ T5171] input input18: unable to receive magic message: -110 [ 423.949527][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.981901][ T10] usb 5-1: Product: syz [ 423.986082][ T10] usb 5-1: Manufacturer: syz [ 424.022636][ T10] usb 5-1: SerialNumber: syz [ 424.033711][ T5171] input input18: unable to receive magic message: -32 [ 424.051401][ T10] usb 5-1: config 0 descriptor?? [ 424.078760][ T5171] input input18: unable to receive magic message: -32 [ 424.098991][ T5171] input input18: unable to receive magic message: -32 [ 424.126645][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.139076][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 424.169576][ T30] audit: type=1400 audit(1767709599.996:547): avc: denied { read } for pid=10419 comm="syz.6.1157" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 424.199156][ T5171] input input18: unable to receive magic message: -32 [ 424.205098][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.217433][ T30] audit: type=1400 audit(1767709600.046:548): avc: denied { open } for pid=10419 comm="syz.6.1157" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 424.265219][ T5171] input input18: unable to receive magic message: -32 [ 424.333709][ T10] ath6kl: Failed to submit usb control message: -71 [ 424.342859][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 424.369676][ T10] ath6kl: Unable to send get target info: -71 [ 424.394753][ T10] ath6kl: Failed to init ath6kl core: -71 [ 424.408964][ T10] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 424.476050][ T10] usb 5-1: USB disconnect, device number 50 [ 424.647924][ T34] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.698701][ T34] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.717635][ T34] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.747843][ T34] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.758145][T10420] gadgetfs: Unknown parameter 'usrquota' [ 424.839076][T10444] input input18: unable to receive magic message: -32 [ 424.920384][ T5862] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 425.138861][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 425.150361][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 425.159763][ T5862] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.172634][ T5862] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.199592][ T5862] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 425.299730][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.806123][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 425.833769][ T5862] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 425.880342][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 425.890626][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 425.905453][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 426.010361][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 426.041162][ T30] audit: type=1400 audit(1767709601.876:549): avc: denied { ioctl } for pid=10457 comm="syz.3.1168" path="socket:[28760]" dev="sockfs" ino=28760 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.101463][ T10] usb 6-1: device descriptor read/64, error -32 [ 426.211371][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 426.219548][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 426.292006][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 426.360477][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 426.372362][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 426.379577][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 426.387429][T10464] FAULT_INJECTION: forcing a failure. [ 426.387429][T10464] name failslab, interval 1, probability 0, space 0, times 0 [ 426.428652][T10464] CPU: 1 UID: 0 PID: 10464 Comm: syz.3.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.428672][T10464] Tainted: [L]=SOFTLOCKUP [ 426.428676][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.428682][T10464] Call Trace: [ 426.428686][T10464] [ 426.428690][T10464] dump_stack_lvl+0x16c/0x1f0 [ 426.428708][T10464] should_fail_ex+0x512/0x640 [ 426.428725][T10464] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 426.428739][T10464] should_failslab+0xc2/0x120 [ 426.428754][T10464] kmem_cache_alloc_node_noprof+0x86/0x800 [ 426.428768][T10464] ? __alloc_skb+0x156/0x410 [ 426.428788][T10464] ? __alloc_skb+0x156/0x410 [ 426.428803][T10464] __alloc_skb+0x156/0x410 [ 426.428818][T10464] ? __alloc_skb+0x35d/0x410 [ 426.428834][T10464] ? __pfx___alloc_skb+0x10/0x10 [ 426.428851][T10464] ? netlink_autobind.isra.0+0x158/0x370 [ 426.428869][T10464] netlink_alloc_large_skb+0x69/0x140 [ 426.428884][T10464] netlink_sendmsg+0x698/0xdd0 [ 426.428900][T10464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.428919][T10464] ____sys_sendmsg+0xa5d/0xc30 [ 426.428934][T10464] ? copy_msghdr_from_user+0x10a/0x160 [ 426.428945][T10464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.428966][T10464] ___sys_sendmsg+0x134/0x1d0 [ 426.428977][T10464] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.429006][T10464] __sys_sendmsg+0x16d/0x220 [ 426.429017][T10464] ? __pfx___sys_sendmsg+0x10/0x10 [ 426.429037][T10464] do_syscall_64+0xcd/0xf80 [ 426.429053][T10464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.429064][T10464] RIP: 0033:0x7fd1ca18f749 [ 426.429074][T10464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.429085][T10464] RSP: 002b:00007fd1cb0da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.429096][T10464] RAX: ffffffffffffffda RBX: 00007fd1ca3e5fa0 RCX: 00007fd1ca18f749 [ 426.429103][T10464] RDX: 0000000000040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 426.429110][T10464] RBP: 00007fd1cb0da090 R08: 0000000000000000 R09: 0000000000000000 [ 426.429116][T10464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.429123][T10464] R13: 00007fd1ca3e6038 R14: 00007fd1ca3e5fa0 R15: 00007ffeceffc1b8 [ 426.429137][T10464] [ 426.450314][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 426.711231][ T30] audit: type=1400 audit(1767709602.546:550): avc: denied { watch } for pid=10465 comm="syz.3.1171" path="/proc/956" dev="proc" ino=28787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 426.755599][ T10] usb 6-1: device descriptor read/64, error -32 [ 426.870325][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 426.887777][ T10] usb usb6-port1: attempt power cycle [ 426.907230][ T10] raw-gadget.1 gadget.5: failed to queue disconnect event [ 426.927855][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 426.979577][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.998897][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.011368][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 427.038855][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 427.050406][ T5890] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 427.054149][T10473] FAULT_INJECTION: forcing a failure. [ 427.054149][T10473] name failslab, interval 1, probability 0, space 0, times 0 [ 427.090353][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.5.1174 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.090382][T10473] Tainted: [L]=SOFTLOCKUP [ 427.090389][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.090407][T10473] Call Trace: [ 427.090413][T10473] [ 427.090423][T10473] dump_stack_lvl+0x16c/0x1f0 [ 427.090452][T10473] should_fail_ex+0x512/0x640 [ 427.090483][T10473] ? fs_reclaim_acquire+0xae/0x150 [ 427.090511][T10473] should_failslab+0xc2/0x120 [ 427.090536][T10473] __kmalloc_noprof+0xeb/0x910 [ 427.090564][T10473] ? tomoyo_encode2+0x100/0x3e0 [ 427.090594][T10473] ? tomoyo_encode2+0x100/0x3e0 [ 427.090616][T10473] tomoyo_encode2+0x100/0x3e0 [ 427.090644][T10473] tomoyo_encode+0x29/0x50 [ 427.090667][T10473] tomoyo_realpath_from_path+0x18f/0x6e0 [ 427.090695][T10473] ? tomoyo_profile+0x47/0x60 [ 427.090725][T10473] tomoyo_path_number_perm+0x245/0x580 [ 427.090745][T10473] ? tomoyo_path_number_perm+0x237/0x580 [ 427.090769][T10473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 427.090792][T10473] ? find_held_lock+0x2b/0x80 [ 427.090845][T10473] ? find_held_lock+0x2b/0x80 [ 427.090872][T10473] ? hook_file_ioctl_common+0x144/0x410 [ 427.090905][T10473] ? __fget_files+0x20e/0x3c0 [ 427.090936][T10473] security_file_ioctl+0x9b/0x240 [ 427.090962][T10473] __x64_sys_ioctl+0xb7/0x210 [ 427.090986][T10473] do_syscall_64+0xcd/0xf80 [ 427.091010][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.091029][T10473] RIP: 0033:0x7ffa5398f749 [ 427.091046][T10473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.091063][T10473] RSP: 002b:00007ffa51bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.091081][T10473] RAX: ffffffffffffffda RBX: 00007ffa53be5fa0 RCX: 00007ffa5398f749 [ 427.091093][T10473] RDX: 0000200000000480 RSI: 000000004048aecb RDI: 0000000000000005 [ 427.091104][T10473] RBP: 00007ffa51bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.091114][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.091125][T10473] R13: 00007ffa53be6038 R14: 00007ffa53be5fa0 R15: 00007ffff030fe98 [ 427.091152][T10473] [ 427.091234][T10473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.334417][ T30] audit: type=1400 audit(1767709603.166:551): avc: denied { append } for pid=10469 comm="syz.1.1173" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 427.357869][T10470] random: crng reseeded on system resumption [ 427.396253][ T5870] usb 7-1: USB disconnect, device number 33 [ 427.396268][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 427.402410][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 427.510295][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 427.530416][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 427.538806][ T10] usb 6-1: device descriptor read/8, error -32 [ 427.650277][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 427.662170][T10480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.663924][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 427.679204][T10480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.740311][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 427.800327][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 427.820486][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 427.827582][ T10] usb 6-1: device descriptor read/8, error -32 [ 427.942632][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 427.951491][ T10] usb usb6-port1: unable to enumerate USB device [ 428.032125][T10484] bond1: option arp_interval: invalid value (18446744073709551615) [ 428.042571][ T30] audit: type=1400 audit(1767709603.876:552): avc: denied { write } for pid=10479 comm="syz.5.1176" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 428.078362][T10484] bond1: option arp_interval: allowed values 0 - 2147483647 [ 428.201306][T10484] bond1 (unregistering): Released all slaves [ 428.699561][ T6022] raw-gadget.1 gadget.5: failed to queue reset event [ 429.040367][ T6022] raw-gadget.1 gadget.5: failed to queue resume event [ 429.110874][ T6022] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 429.121588][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 429.129709][ T6022] raw-gadget.1 gadget.5: failed to queue reset event [ 429.200373][ T6022] raw-gadget.1 gadget.5: failed to queue resume event [ 429.209145][T10507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.505832][T10507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.570471][ T6022] usb 6-1: device descriptor read/64, error -32 [ 429.632281][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 429.681711][ T6022] raw-gadget.1 gadget.5: failed to queue suspend event [ 429.692309][ T6022] raw-gadget.1 gadget.5: failed to queue reset event [ 429.843775][ T6022] raw-gadget.1 gadget.5: failed to queue resume event [ 429.920272][ T6022] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 429.928654][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 429.936691][ T6022] raw-gadget.1 gadget.5: failed to queue reset event [ 430.010381][ T6022] raw-gadget.1 gadget.5: failed to queue resume event [ 430.070474][ T6022] usb 6-1: device descriptor read/64, error -32 [ 430.191287][ T6022] raw-gadget.1 gadget.5: failed to queue suspend event [ 430.198409][ T6022] usb usb6-port1: attempt power cycle [ 430.203960][ T6022] raw-gadget.1 gadget.5: failed to queue disconnect event [ 430.211749][ T6022] raw-gadget.1 gadget.5: failed to queue reset event [ 430.290424][ T6022] raw-gadget.1 gadget.5: failed to queue resume event [ 430.298225][ T6022] raw-gadget.1 gadget.5: failed to queue reset event [ 430.510351][ T6022] raw-gadget.1 gadget.5: failed to queue resume event [ 430.530544][ T8235] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 430.570437][ T6022] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 430.590425][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 430.597597][ T6022] usb 6-1: device descriptor read/8, error -32 [ 430.710701][ T6022] raw-gadget.1 gadget.5: failed to queue suspend event [ 430.722766][ T6022] raw-gadget.1 gadget.5: failed to queue reset event [ 430.800379][ T6022] raw-gadget.1 gadget.5: failed to queue resume event [ 430.870342][ T6022] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 430.900429][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 430.907773][ T6022] usb 6-1: device descriptor read/8, error -32 [ 431.020541][ T6022] raw-gadget.1 gadget.5: failed to queue suspend event [ 431.034473][ T6022] usb usb6-port1: unable to enumerate USB device [ 431.369886][T10545] rdma_rxe: rxe_newlink: failed to add lo [ 431.550260][ T5870] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 432.050562][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 432.062012][ T5870] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 432.075737][ T5870] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.095266][ T5870] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.111162][ T5870] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.120546][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.141796][ T5870] usb 7-1: Product: syz [ 432.220433][ T5870] usb 7-1: Manufacturer: syz [ 432.225053][ T5870] usb 7-1: SerialNumber: syz [ 432.250961][ T30] audit: type=1400 audit(1767709608.086:553): avc: denied { read } for pid=10548 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 432.270392][ T5890] usb 2-1: device descriptor read/64, error -110 [ 432.542386][ T5890] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 432.598743][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'. [ 432.870350][ T49] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 432.878049][ T5890] usb 2-1: device descriptor read/64, error -32 [ 432.960511][T10564] bridge0: entered promiscuous mode [ 432.974582][T10564] bridge0: port 3(macsec1) entered blocking state [ 432.981303][T10564] bridge0: port 3(macsec1) entered disabled state [ 432.989074][T10564] macsec1: entered allmulticast mode [ 432.994441][T10564] bridge0: entered allmulticast mode [ 433.026058][T10565] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1195'. [ 433.122917][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.133940][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.193204][T10564] macsec1: left allmulticast mode [ 433.198272][T10564] bridge0: left allmulticast mode [ 433.207346][T10564] bridge0: left promiscuous mode [ 433.243505][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 433.350759][ T5890] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 433.388416][ T49] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.415309][ T49] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.426085][ T5890] usb 2-1: device descriptor read/8, error -32 [ 433.432687][ T49] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.441944][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.722467][ T30] audit: type=1400 audit(1767709609.556:554): avc: denied { write } for pid=10576 comm="syz.3.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 433.748458][T10577] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0x00000000000000000xffffffffffffffff' [ 433.769764][T10577] fuse: Bad value for 'fd' [ 433.780531][ T5890] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 433.812504][ T5890] usb 2-1: device descriptor read/8, error -32 [ 434.602335][ T5870] usb 7-1: 0:2 : does not exist [ 435.010014][ T5890] raw-gadget.0 gadget.1: failed to queue suspend event [ 435.030953][ T5870] usb 7-1: USB disconnect, device number 34 [ 435.067235][ T49] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 435.080051][ T5862] usb 2-1: USB disconnect, device number 36 [ 435.254196][ T9431] udevd[9431]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.281117][ T30] audit: type=1400 audit(1767709611.116:555): avc: denied { mount } for pid=10583 comm="syz.5.1210" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 435.424422][T10584] fuse: Unknown parameter '0xffffffffffffffff' [ 435.574902][T10591] /dev/nbd3: Can't lookup blockdev [ 435.580280][T10591] FAULT_INJECTION: forcing a failure. [ 435.580280][T10591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.593651][T10591] CPU: 0 UID: 0 PID: 10591 Comm: syz.3.1211 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.593668][T10591] Tainted: [L]=SOFTLOCKUP [ 435.593672][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.593679][T10591] Call Trace: [ 435.593683][T10591] [ 435.593692][T10591] dump_stack_lvl+0x16c/0x1f0 [ 435.593711][T10591] should_fail_ex+0x512/0x640 [ 435.593730][T10591] _copy_from_user+0x2e/0xd0 [ 435.593747][T10591] kstrtouint_from_user+0xd6/0x1d0 [ 435.593760][T10591] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 435.593772][T10591] ? __lock_acquire+0x436/0x2890 [ 435.593787][T10591] ? lock_acquire+0x179/0x330 [ 435.593803][T10591] proc_fail_nth_write+0x83/0x220 [ 435.593815][T10591] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 435.593830][T10591] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 435.593841][T10591] vfs_write+0x2a0/0x11d0 [ 435.593856][T10591] ? __pfx___mutex_lock+0x10/0x10 [ 435.593873][T10591] ? __pfx_vfs_write+0x10/0x10 [ 435.593890][T10591] ? __fget_files+0x20e/0x3c0 [ 435.593905][T10591] ? __x64_sys_mount+0x180/0x310 [ 435.593920][T10591] ksys_write+0x12a/0x250 [ 435.593933][T10591] ? __pfx_ksys_write+0x10/0x10 [ 435.593951][T10591] do_syscall_64+0xcd/0xf80 [ 435.593967][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.593978][T10591] RIP: 0033:0x7fd1ca18e1ff [ 435.593988][T10591] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 435.593998][T10591] RSP: 002b:00007fd1cb0b9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 435.594009][T10591] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd1ca18e1ff [ 435.594016][T10591] RDX: 0000000000000001 RSI: 00007fd1cb0b90a0 RDI: 0000000000000006 [ 435.594022][T10591] RBP: 00007fd1cb0b9090 R08: 0000000000000000 R09: 0000000000000000 [ 435.594029][T10591] R10: 0000000000218800 R11: 0000000000000293 R12: 0000000000000002 [ 435.594035][T10591] R13: 00007fd1ca3e6128 R14: 00007fd1ca3e6090 R15: 00007ffeceffc1b8 [ 435.594050][T10591] [ 435.818059][T10587] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.825612][T10587] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.958519][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.050693][ T5870] usb 5-1: USB disconnect, device number 51 [ 436.096087][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.114862][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 436.128861][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 436.675757][ T5890] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 437.120438][ T30] audit: type=1400 audit(1767709612.706:556): avc: denied { listen } for pid=10604 comm="syz.4.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 437.142742][ T5890] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 437.150010][ T30] audit: type=1326 audit(1767709612.976:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337098f749 code=0x7ffc0000 [ 437.158228][T10611] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1216'. [ 437.175671][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 437.223021][ T3544] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.232315][ T3544] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.235046][ T30] audit: type=1326 audit(1767709612.976:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337098f749 code=0x7ffc0000 [ 437.280618][ T3544] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.288967][ T3544] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.290677][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 437.308901][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 437.333794][ T5890] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 437.350436][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.358419][ T5890] usb 7-1: Product: syz [ 437.362610][ T5890] usb 7-1: Manufacturer: syz [ 437.367199][ T5890] usb 7-1: SerialNumber: syz [ 437.375456][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1217'. [ 437.400488][ T5890] usb 7-1: config 0 descriptor?? [ 437.409035][ T5890] usb 7-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 437.427253][ T30] audit: type=1326 audit(1767709612.976:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f337098f749 code=0x7ffc0000 [ 437.453428][ T30] audit: type=1326 audit(1767709612.976:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337098f749 code=0x7ffc0000 [ 437.477728][ T30] audit: type=1326 audit(1767709612.976:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337098f749 code=0x7ffc0000 [ 437.502392][ T30] audit: type=1326 audit(1767709612.986:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3370991667 code=0x7ffc0000 [ 437.587891][ T30] audit: type=1326 audit(1767709612.986:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f33709915dc code=0x7ffc0000 [ 437.640429][ T30] audit: type=1326 audit(1767709612.986:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3370991514 code=0x7ffc0000 [ 437.694259][ T30] audit: type=1326 audit(1767709612.986:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3370991514 code=0x7ffc0000 [ 437.761154][ T30] audit: type=1326 audit(1767709612.986:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f337098e3aa code=0x7ffc0000 [ 437.808860][ T30] audit: type=1326 audit(1767709612.986:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337098f749 code=0x7ffc0000 [ 437.853079][ T30] audit: type=1326 audit(1767709612.986:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f337098df90 code=0x7ffc0000 [ 439.024997][ T5890] usb 7-1: USB disconnect, device number 35 [ 439.068999][ T9432] udevd[9432]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.260941][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1231'. [ 439.762917][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.078204][ T5870] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 440.183137][T10680] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 440.237365][T10680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.252510][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.268285][T10684] fuse: Bad value for 'fd' [ 440.277086][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.288656][ T5870] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.328402][ T5870] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.490288][ T5870] usb 5-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 440.500589][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.509109][ T5870] usb 5-1: Product: syz [ 440.513909][ T5870] usb 5-1: Manufacturer: syz [ 440.518568][ T5870] usb 5-1: SerialNumber: syz [ 440.604463][T10692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.615588][T10692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.084258][T10696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1240'. [ 441.231950][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1240'. [ 441.965513][T10711] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 442.359486][T10727] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1249'. [ 442.426560][T10731] netlink: 'syz.6.1246': attribute type 1 has an invalid length. [ 442.434734][T10731] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1246'. [ 442.477002][T10735] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1250'. [ 442.578544][T10743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.589776][T10743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.601294][T10743] fuse: Bad value for 'fd' [ 442.793027][ T5870] cdc_ncm 5-1:1.0: bind() failure [ 442.805119][ T5870] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 442.813462][ T5870] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 442.822849][ T5870] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 442.834243][ T5870] usb 5-1: USB disconnect, device number 52 [ 442.989868][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 442.989907][ T30] audit: type=1400 audit(1767709618.816:612): avc: denied { shutdown } for pid=10749 comm="syz.6.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 443.165112][ T30] audit: type=1400 audit(1767709618.996:613): avc: denied { write } for pid=10754 comm="syz.1.1257" name="anycast6" dev="proc" ino=4026533447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 443.828721][T10765] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 443.841586][T10763] netlink: 'syz.4.1260': attribute type 61 has an invalid length. [ 444.019231][T10765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.252860][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1266'. [ 444.465416][T10792] nvme_fabrics: missing parameter 'transport=%s' [ 444.472064][T10792] nvme_fabrics: missing parameter 'nqn=%s' [ 444.480001][T10795] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 447.185809][T10831] fuse: Bad value for 'fd' [ 448.759256][T10856] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1286'. [ 452.727730][ T49] raw-gadget.1 gadget.5: failed to queue reset event [ 453.150770][ T49] raw-gadget.1 gadget.5: failed to queue resume event [ 453.250649][ T49] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 453.258800][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 453.268952][ T49] raw-gadget.1 gadget.5: failed to queue reset event [ 453.427498][ T49] raw-gadget.1 gadget.5: failed to queue resume event [ 453.520671][ T49] usb 6-1: device descriptor read/64, error -32 [ 453.641790][ T49] raw-gadget.1 gadget.5: failed to queue suspend event [ 453.655305][ T49] raw-gadget.1 gadget.5: failed to queue reset event [ 453.730516][ T49] raw-gadget.1 gadget.5: failed to queue resume event [ 453.810405][ T49] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 453.826982][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 453.854012][ T49] raw-gadget.1 gadget.5: failed to queue reset event [ 453.930369][ T49] raw-gadget.1 gadget.5: failed to queue resume event [ 453.992437][ T49] usb 6-1: device descriptor read/64, error -32 [ 454.110277][ T49] raw-gadget.1 gadget.5: failed to queue suspend event [ 454.124716][ T49] usb usb6-port1: attempt power cycle [ 454.134175][ T30] audit: type=1400 audit(1767709629.966:614): avc: denied { getopt } for pid=10929 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 454.153872][ T49] raw-gadget.1 gadget.5: failed to queue disconnect event [ 454.177277][ T49] raw-gadget.1 gadget.5: failed to queue reset event [ 454.251084][ T49] raw-gadget.1 gadget.5: failed to queue resume event [ 454.446534][ T49] raw-gadget.1 gadget.5: failed to queue reset event [ 454.660354][ T49] raw-gadget.1 gadget.5: failed to queue resume event [ 454.805220][ T49] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 454.833803][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 454.841019][ T49] usb 6-1: device descriptor read/8, error -32 [ 454.951549][ T49] raw-gadget.1 gadget.5: failed to queue suspend event [ 454.963706][ T49] raw-gadget.1 gadget.5: failed to queue reset event [ 455.040299][ T49] raw-gadget.1 gadget.5: failed to queue resume event [ 455.110288][ T49] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 455.140422][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 455.148567][ T49] usb 6-1: device descriptor read/8, error -32 [ 455.229436][T10950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=10950 comm=syz.5.1313 [ 455.243385][ T5890] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 455.260367][ T49] raw-gadget.1 gadget.5: failed to queue suspend event [ 455.271511][T10948] netlink: 'syz.4.1312': attribute type 10 has an invalid length. [ 455.273587][ T49] usb usb6-port1: unable to enumerate USB device [ 455.279400][T10948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1312'. [ 455.453936][T10955] FAULT_INJECTION: forcing a failure. [ 455.453936][T10955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.483674][T10955] CPU: 1 UID: 0 PID: 10955 Comm: syz.6.1315 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.483704][T10955] Tainted: [L]=SOFTLOCKUP [ 455.483710][T10955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.483720][T10955] Call Trace: [ 455.483726][T10955] [ 455.483734][T10955] dump_stack_lvl+0x16c/0x1f0 [ 455.483762][T10955] should_fail_ex+0x512/0x640 [ 455.483793][T10955] _copy_to_user+0x32/0xd0 [ 455.483822][T10955] simple_read_from_buffer+0xcb/0x170 [ 455.483852][T10955] proc_fail_nth_read+0x197/0x240 [ 455.483872][T10955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.483894][T10955] ? rw_verify_area+0xcf/0x6c0 [ 455.483914][T10955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.483933][T10955] vfs_read+0x1e4/0xcf0 [ 455.483957][T10955] ? __pfx___mutex_lock+0x10/0x10 [ 455.483984][T10955] ? __pfx_vfs_read+0x10/0x10 [ 455.484014][T10955] ? __fget_files+0x20e/0x3c0 [ 455.484049][T10955] ksys_read+0x12a/0x250 [ 455.484071][T10955] ? __pfx_ksys_read+0x10/0x10 [ 455.484103][T10955] do_syscall_64+0xcd/0xf80 [ 455.484129][T10955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.484147][T10955] RIP: 0033:0x7fa87518e15c [ 455.484161][T10955] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 455.484178][T10955] RSP: 002b:00007fa875ff1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.484196][T10955] RAX: ffffffffffffffda RBX: 00007fa8753e5fa0 RCX: 00007fa87518e15c [ 455.484207][T10955] RDX: 000000000000000f RSI: 00007fa875ff10a0 RDI: 0000000000000004 [ 455.484218][T10955] RBP: 00007fa875ff1090 R08: 0000000000000000 R09: 0000000000000000 [ 455.484229][T10955] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 455.484245][T10955] R13: 00007fa8753e6038 R14: 00007fa8753e5fa0 R15: 00007ffc7750c908 [ 455.484272][T10955] [ 458.680300][ T49] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 458.997093][ T30] audit: type=1400 audit(1767709634.426:615): avc: denied { bind } for pid=10980 comm="syz.6.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 459.182861][ T49] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 459.198111][ T49] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 459.218490][ T49] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 459.228146][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.238407][ T49] usb 5-1: Product: syz [ 459.243011][ T49] usb 5-1: Manufacturer: syz [ 459.260276][ T49] usb 5-1: SerialNumber: syz [ 459.333240][ T49] usb 5-1: config 0 descriptor?? [ 459.354172][T10979] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 459.361499][T10979] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 459.376041][ T49] option 5-1:0.0: GSM modem (1-port) converter detected [ 459.515193][ T49] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 460.625811][ T30] audit: type=1400 audit(1767709636.356:616): avc: denied { ioctl } for pid=10978 comm="syz.4.1322" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 461.174174][T10997] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 461.183996][T10997] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 461.193253][ T30] audit: type=1400 audit(1767709637.016:617): avc: denied { firmware_load } for pid=10996 comm="syz.5.1327" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 461.784068][T11003] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 461.934509][ T3544] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 462.031766][ T49] usb 5-1: USB disconnect, device number 54 [ 462.032242][ T30] audit: type=1400 audit(1767709637.866:618): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 462.081099][ T49] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 462.260300][ T49] option 5-1:0.0: device disconnected [ 462.876528][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 464.314467][ T30] audit: type=1804 audit(1767709640.136:619): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1336" name="/newroot/271/file0" dev="tmpfs" ino=1469 res=1 errno=0 [ 464.723597][T11055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.895756][T11055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.918537][T11055] netlink: 'syz.1.1341': attribute type 2 has an invalid length. [ 464.934804][T11055] !9: entered promiscuous mode [ 465.435459][T11059] netlink: 'syz.6.1342': attribute type 3 has an invalid length. [ 465.443299][T11059] netlink: 'syz.6.1342': attribute type 3 has an invalid length. [ 465.591154][ T30] audit: type=1400 audit(1767709641.416:620): avc: denied { getopt } for pid=11054 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 466.424159][ T30] audit: type=1400 audit(1767709642.256:621): avc: denied { bind } for pid=11071 comm="syz.6.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 466.645038][T11075] netlink: 'syz.6.1345': attribute type 3 has an invalid length. [ 466.653449][T11075] netlink: 'syz.6.1345': attribute type 3 has an invalid length. [ 467.182950][T11079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.193771][T11079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.337806][T11081] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 470.914050][ T30] audit: type=1400 audit(1767709646.746:622): avc: denied { name_bind } for pid=11094 comm="syz.5.1351" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 471.004126][ T5890] raw-gadget.1 gadget.5: failed to queue reset event [ 471.080699][ T5890] raw-gadget.1 gadget.5: failed to queue resume event [ 471.140343][ T5890] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 471.148621][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 471.181690][ T5890] raw-gadget.1 gadget.5: failed to queue reset event [ 471.204268][T11099] xt_limit: Overflow, try lower: 4294967292/0 [ 471.280646][ T5890] raw-gadget.1 gadget.5: failed to queue resume event [ 471.296546][ T30] audit: type=1400 audit(1767709647.126:623): avc: denied { read } for pid=11097 comm="syz.6.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 471.368370][ T5890] usb 6-1: device descriptor read/64, error -32 [ 471.494919][ T5890] raw-gadget.1 gadget.5: failed to queue suspend event [ 471.502046][ T5890] raw-gadget.1 gadget.5: failed to queue reset event [ 471.581042][ T5890] raw-gadget.1 gadget.5: failed to queue resume event [ 471.650683][ T5890] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 471.694853][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 471.710410][ T5890] raw-gadget.1 gadget.5: failed to queue reset event [ 471.821563][ T5890] raw-gadget.1 gadget.5: failed to queue resume event [ 471.893842][ T5890] usb 6-1: device descriptor read/64, error -32 [ 472.079802][ T5890] raw-gadget.1 gadget.5: failed to queue suspend event [ 472.087107][ T5890] usb usb6-port1: attempt power cycle [ 472.092867][ T5890] raw-gadget.1 gadget.5: failed to queue disconnect event [ 472.102868][ T5890] raw-gadget.1 gadget.5: failed to queue reset event [ 472.170270][ T5890] raw-gadget.1 gadget.5: failed to queue resume event [ 472.193395][ T5890] raw-gadget.1 gadget.5: failed to queue reset event [ 472.470795][ T5890] raw-gadget.1 gadget.5: failed to queue resume event [ 472.620526][ T5890] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 472.650693][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 472.657811][ T5890] usb 6-1: device descriptor read/8, error -32 [ 472.770411][ T5890] raw-gadget.1 gadget.5: failed to queue suspend event [ 472.777662][ T5890] raw-gadget.1 gadget.5: failed to queue reset event [ 473.324718][ T30] audit: type=1400 audit(1767709649.146:624): avc: denied { getopt } for pid=11128 comm="syz.1.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 473.796414][ T5890] raw-gadget.1 gadget.5: failed to queue resume event [ 473.950872][ T5890] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 473.980417][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 473.987513][ T5890] usb 6-1: device descriptor read/8, error -32 [ 474.104192][ T5890] raw-gadget.1 gadget.5: failed to queue suspend event [ 474.136950][ T5890] usb usb6-port1: unable to enumerate USB device [ 474.230987][T11143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 475.261145][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 475.393865][ T30] audit: type=1400 audit(1767709651.226:625): avc: denied { create } for pid=11173 comm="syz.6.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 475.684848][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 475.781045][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 475.850616][ T5870] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 476.045836][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 476.062682][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 476.140380][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 476.332965][ T5870] usb 6-1: device descriptor read/64, error -32 [ 476.434542][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1382'. [ 476.449409][ T5870] raw-gadget.1 gadget.5: failed to queue suspend event [ 476.477126][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 476.561427][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 476.696220][ T5870] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 476.704388][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 476.716150][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 476.886043][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 476.950276][ T5870] usb 6-1: device descriptor read/64, error -32 [ 476.960285][ T5890] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 477.060500][ T5870] raw-gadget.1 gadget.5: failed to queue suspend event [ 477.074612][ T5870] usb usb6-port1: attempt power cycle [ 477.087194][ T5870] raw-gadget.1 gadget.5: failed to queue disconnect event [ 477.101756][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 477.135727][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 477.147557][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.158865][ T5890] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 477.172025][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.181134][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 477.196487][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 477.209296][ T5890] usb 7-1: config 0 descriptor?? [ 477.420341][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 477.562398][ T30] audit: type=1400 audit(1767709653.376:626): avc: denied { bind } for pid=11224 comm="syz.5.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 477.715427][ T5890] konepure 0003:1E7D:2DBE.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.6-1/input0 [ 477.980373][ T5870] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 478.020485][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 478.027670][ T5870] usb 6-1: device descriptor read/8, error -32 [ 478.207871][ T5870] raw-gadget.1 gadget.5: failed to queue suspend event [ 478.215259][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 478.647541][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 478.710260][ T10] usb 7-1: USB disconnect, device number 36 [ 478.720476][ T5870] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 478.750924][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 478.759475][ T5870] usb 6-1: device descriptor read/8, error -32 [ 478.917217][ T5870] raw-gadget.1 gadget.5: failed to queue suspend event [ 478.924687][ T5870] usb usb6-port1: unable to enumerate USB device [ 479.505514][T11250] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1391'. [ 481.120274][ T10] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 481.340424][ T10] usb 5-1: device descriptor read/64, error -71 [ 481.625319][ T10] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 481.780349][ T10] usb 5-1: device descriptor read/64, error -71 [ 481.910574][ T10] usb usb5-port1: attempt power cycle [ 482.162555][T11277] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1399'. [ 483.200510][ T49] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 483.350751][ T49] usb 7-1: Using ep0 maxpacket: 8 [ 483.362332][ T49] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 483.514801][ T49] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 483.546853][ T49] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.603322][ T49] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.637448][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.883700][ T49] usb 7-1: Product: syz [ 483.895054][ T49] usb 7-1: Manufacturer: syz [ 483.910897][ T49] usb 7-1: SerialNumber: syz [ 484.128767][ T49] usb 7-1: 0:2 : does not exist [ 484.793367][ T49] usb 7-1: USB disconnect, device number 37 [ 485.827939][T11329] bridge0: port 1(macsec1) entered blocking state [ 485.834702][T11329] bridge0: port 1(macsec1) entered disabled state [ 485.841278][T11329] macsec1: entered allmulticast mode [ 485.846687][T11329] bridge0: entered allmulticast mode [ 485.854053][T11329] macsec1: left allmulticast mode [ 485.859209][T11329] bridge0: left allmulticast mode [ 486.299682][ T49] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 486.501675][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.525626][ T49] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 486.549477][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 486.561287][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 486.572725][ T49] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 486.628716][ T49] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 486.638965][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 486.648629][ T49] usb 7-1: Product: syz [ 486.661469][ T49] usb 7-1: Manufacturer: syz [ 486.666762][ T49] usb 7-1: SerialNumber: syz [ 486.682641][ T49] usb 7-1: config 0 descriptor?? [ 486.809253][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 487.471730][ T49] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 487.475069][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 487.639340][ T49] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 487.695080][ T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 487.705861][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 487.713480][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 487.790591][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 487.793843][ T49] usb 7-1: USB disconnect, device number 38 [ 487.851871][ T10] usb 6-1: device descriptor read/64, error -32 [ 488.001568][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 488.009315][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 488.182733][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 488.250364][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 488.258755][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 488.266247][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 488.343298][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 488.430636][ T10] usb 6-1: device descriptor read/64, error -32 [ 488.592289][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 488.659295][ T10] usb usb6-port1: attempt power cycle [ 488.667188][ T10] raw-gadget.1 gadget.5: failed to queue disconnect event [ 489.244504][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 489.935982][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 489.950827][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 490.060276][ T49] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 490.170445][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 490.203075][ T30] audit: type=1400 audit(1767709666.036:627): avc: denied { wake_alarm } for pid=11384 comm="syz.6.1430" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 490.224432][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 490.236718][ T49] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.240643][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 490.247882][ T49] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.268059][ T30] audit: type=1400 audit(1767709666.096:628): avc: denied { read } for pid=11384 comm="syz.6.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 490.288085][ T49] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 490.293987][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 490.297323][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.304259][ T10] usb 6-1: device descriptor read/8, error -32 [ 490.421049][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 490.428360][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 490.510329][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 490.583289][ T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 490.620731][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 490.627849][ T10] usb 6-1: device descriptor read/8, error -32 [ 490.722873][ T49] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 490.770723][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 490.782571][ T10] usb usb6-port1: unable to enumerate USB device [ 490.907097][T11403] bridge0: port 1(macsec1) entered blocking state [ 490.913626][T11403] bridge0: port 1(macsec1) entered disabled state [ 490.920460][T11403] macsec1: entered allmulticast mode [ 490.925779][T11403] bridge0: entered allmulticast mode [ 491.065785][T11403] macsec1: left allmulticast mode [ 491.070995][T11403] bridge0: left allmulticast mode [ 492.099641][ T5890] usb 5-1: reset high-speed USB device number 58 using dummy_hcd [ 492.371844][ T30] audit: type=1400 audit(1767709668.206:629): avc: denied { read } for pid=11410 comm="syz.6.1437" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 492.394853][ T30] audit: type=1400 audit(1767709668.206:630): avc: denied { open } for pid=11410 comm="syz.6.1437" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 493.188333][ T30] audit: type=1400 audit(1767709669.016:631): avc: denied { mount } for pid=11430 comm="syz.3.1444" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 493.296912][T11433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.306320][T11433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.498690][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 493.507593][T11439] netlink: 'syz.3.1444': attribute type 5 has an invalid length. [ 493.515352][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1444'. [ 493.528304][T11439] geneve2: entered promiscuous mode [ 493.533504][T11439] geneve2: entered allmulticast mode [ 493.545649][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 493.554952][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 493.897143][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 493.909473][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 493.971394][ T49] usb 5-1: USB disconnect, device number 58 [ 494.404827][T11450] syzkaller0: entered promiscuous mode [ 494.437272][T11450] syzkaller0: entered allmulticast mode [ 494.531806][ T6088] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 494.968008][T11466] IPVS: sh: FWM 3 0x00000003 - no destination available [ 494.985170][T11467] fuse: Bad value for 'fd' [ 495.016320][T11466] binder: 11463:11466 ioctl c0306201 2000000003c0 returned -14 [ 495.020938][T11467] fuse: Bad value for 'fd' [ 495.036222][T11467] xt_bpf: check failed: parse error [ 495.123551][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1451'. [ 495.175330][T11473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.193940][T11473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.912679][ T30] audit: type=1400 audit(1767709672.746:632): avc: denied { create } for pid=11469 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 496.954627][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.967549][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.975703][ T30] audit: type=1400 audit(1767709672.766:633): avc: denied { ioctl } for pid=11469 comm="syz.1.1457" path="socket:[32496]" dev="sockfs" ino=32496 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 498.395590][ T30] audit: type=1400 audit(1767709674.226:634): avc: denied { create } for pid=11505 comm="syz.4.1468" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 498.424626][ T30] audit: type=1400 audit(1767709674.256:635): avc: denied { write } for pid=11505 comm="syz.4.1468" name="file0" dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 499.411695][ T30] audit: type=1400 audit(1767709675.246:636): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file0" dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 499.871260][ T30] audit: type=1326 audit(1767709675.706:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11519 comm="syz.5.1471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa5398f749 code=0x0 [ 500.666082][T11532] FAULT_INJECTION: forcing a failure. [ 500.666082][T11532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.718721][T11532] CPU: 1 UID: 0 PID: 11532 Comm: syz.4.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.718751][T11532] Tainted: [L]=SOFTLOCKUP [ 500.718757][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.718768][T11532] Call Trace: [ 500.718774][T11532] [ 500.718781][T11532] dump_stack_lvl+0x16c/0x1f0 [ 500.718809][T11532] should_fail_ex+0x512/0x640 [ 500.718840][T11532] _copy_from_iter+0x2a4/0x16c0 [ 500.718872][T11532] ? _copy_from_iter+0x161/0x16c0 [ 500.718899][T11532] ? __pfx__copy_from_iter+0x10/0x10 [ 500.718929][T11532] ? __pfx__copy_from_iter+0x10/0x10 [ 500.718962][T11532] copy_page_from_iter+0xde/0x180 [ 500.718993][T11532] skb_copy_datagram_from_iter+0x2a0/0x740 [ 500.719031][T11532] tun_get_user+0x1850/0x3cc0 [ 500.719070][T11532] ? __pfx_tun_get_user+0x10/0x10 [ 500.719098][T11532] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 500.719123][T11532] ? find_held_lock+0x2b/0x80 [ 500.719151][T11532] ? tun_get+0x191/0x370 [ 500.719180][T11532] tun_chr_write_iter+0xdc/0x210 [ 500.719209][T11532] vfs_write+0x7d3/0x11d0 [ 500.719234][T11532] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 500.719263][T11532] ? __pfx_vfs_write+0x10/0x10 [ 500.719283][T11532] ? find_held_lock+0x2b/0x80 [ 500.719332][T11532] ksys_write+0x12a/0x250 [ 500.719355][T11532] ? __pfx_ksys_write+0x10/0x10 [ 500.719385][T11532] do_syscall_64+0xcd/0xf80 [ 500.719411][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.719428][T11532] RIP: 0033:0x7f7f89b8e1ff [ 500.719443][T11532] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 500.719461][T11532] RSP: 002b:00007f7f8a9a5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 500.719478][T11532] RAX: ffffffffffffffda RBX: 00007f7f89de5fa0 RCX: 00007f7f89b8e1ff [ 500.719491][T11532] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 500.719502][T11532] RBP: 00007f7f8a9a5090 R08: 0000000000000000 R09: 0000000000000000 [ 500.719513][T11532] R10: 000000000000fef3 R11: 0000000000000293 R12: 0000000000000001 [ 500.719524][T11532] R13: 00007f7f89de6038 R14: 00007f7f89de5fa0 R15: 00007ffffcc89c88 [ 500.719548][T11532] [ 501.122111][ T30] audit: type=1400 audit(1767709676.956:638): avc: denied { accept } for pid=11527 comm="syz.5.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 501.144348][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.155528][ T30] audit: type=1400 audit(1767709676.976:639): avc: denied { shutdown } for pid=11527 comm="syz.5.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 501.221951][ T30] audit: type=1804 audit(1767709677.036:640): pid=11530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.1472" name="bus" dev="ramfs" ino=32554 res=1 errno=0 [ 502.383817][ T30] audit: type=1400 audit(1767709678.206:641): avc: denied { listen } for pid=11550 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 502.436562][ T5829] Bluetooth: hci1: unexpected event for opcode 0x200d [ 503.824740][ T30] audit: type=1400 audit(1767709679.656:642): avc: denied { read } for pid=11566 comm="syz.6.1485" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 503.861212][T11567] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1485'. [ 503.900351][ T30] audit: type=1400 audit(1767709679.676:643): avc: denied { open } for pid=11566 comm="syz.6.1485" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 506.727265][ T30] audit: type=1400 audit(1767709682.556:644): avc: denied { getopt } for pid=11590 comm="syz.3.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 508.932837][T11606] can0: slcan on ttyS3. [ 509.078360][T11606] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1493'. [ 509.088973][T11608] fuse: Bad value for 'fd' [ 509.141650][T11606] 0X: renamed from caif0 [ 509.921968][T11606] 0X: entered allmulticast mode [ 509.927200][T11606] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 511.344170][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 511.533794][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 511.677577][ T10] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 511.695847][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 511.702977][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 511.709811][ T30] audit: type=1400 audit(1767709687.526:645): avc: denied { read open } for pid=11618 comm="syz.5.1497" path="/" dev="configfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 511.770291][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 511.792078][T11606] can0 (unregistered): slcan off ttyS3. [ 511.830429][ T10] usb 6-1: device descriptor read/64, error -32 [ 511.940262][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 511.947656][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 512.030783][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 512.716963][T11629] kthread_run failed with err -4 [ 512.968374][ T10] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 513.000177][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 513.010135][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 513.210247][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 514.082825][ T10] usb 6-1: device descriptor read/64, error -32 [ 514.200802][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 514.208154][ T10] usb usb6-port1: attempt power cycle [ 514.455775][ T10] raw-gadget.1 gadget.5: failed to queue disconnect event [ 514.480494][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 514.781557][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 514.898955][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 515.182222][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 515.211912][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1506'. [ 515.709004][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 515.734604][T11665] bridge0: port 1(macsec1) entered blocking state [ 515.740394][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 515.741133][T11665] bridge0: port 1(macsec1) entered disabled state [ 515.748094][ T10] usb 6-1: device descriptor read/8, error -32 [ 515.754802][T11665] macsec1: entered allmulticast mode [ 515.766121][T11665] bridge0: entered allmulticast mode [ 515.772420][T11665] macsec1: left allmulticast mode [ 515.777437][T11665] bridge0: left allmulticast mode [ 515.895501][T11668] fuse: Bad value for 'fd' [ 515.900293][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 515.907431][ T10] raw-gadget.1 gadget.5: failed to queue reset event [ 516.725921][ T10] raw-gadget.1 gadget.5: failed to queue resume event [ 516.727484][T11675] FAULT_INJECTION: forcing a failure. [ 516.727484][T11675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.747674][T11675] CPU: 1 UID: 0 PID: 11675 Comm: syz.6.1511 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.747701][T11675] Tainted: [L]=SOFTLOCKUP [ 516.747707][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.747718][T11675] Call Trace: [ 516.747724][T11675] [ 516.747731][T11675] dump_stack_lvl+0x16c/0x1f0 [ 516.747759][T11675] should_fail_ex+0x512/0x640 [ 516.747791][T11675] _copy_from_user+0x2e/0xd0 [ 516.747817][T11675] io_register_resize_rings+0x135/0x1440 [ 516.747841][T11675] ? find_held_lock+0x2b/0x80 [ 516.747873][T11675] ? __pfx_io_register_resize_rings+0x10/0x10 [ 516.747900][T11675] ? __pfx___might_resched+0x10/0x10 [ 516.747924][T11675] ? __mutex_lock+0x27b/0x1ca0 [ 516.747968][T11675] ? __fget_files+0x20e/0x3c0 [ 516.748007][T11675] __do_sys_io_uring_register+0x14a0/0x26b0 [ 516.748035][T11675] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 516.748061][T11675] ? __fget_files+0x20e/0x3c0 [ 516.748093][T11675] ? fput+0x70/0xf0 [ 516.748109][T11675] ? ksys_write+0x1ac/0x250 [ 516.748131][T11675] ? __pfx_ksys_write+0x10/0x10 [ 516.748161][T11675] do_syscall_64+0xcd/0xf80 [ 516.748185][T11675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.748203][T11675] RIP: 0033:0x7fa87518f749 [ 516.748218][T11675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.748235][T11675] RSP: 002b:00007fa875ff1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 516.748252][T11675] RAX: ffffffffffffffda RBX: 00007fa8753e5fa0 RCX: 00007fa87518f749 [ 516.748264][T11675] RDX: 0000200000000440 RSI: 0000000000000021 RDI: 0000000000000003 [ 516.748274][T11675] RBP: 00007fa875ff1090 R08: 0000000000000000 R09: 0000000000000000 [ 516.748285][T11675] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 516.748296][T11675] R13: 00007fa8753e6038 R14: 00007fa8753e5fa0 R15: 00007ffc7750c908 [ 516.748322][T11675] [ 517.028232][ T10] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 517.100814][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 517.108208][ T10] usb 6-1: device descriptor read/8, error -32 [ 517.261869][ T10] raw-gadget.1 gadget.5: failed to queue suspend event [ 517.275135][ T10] usb usb6-port1: unable to enumerate USB device [ 517.307045][T11684] program syz.6.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.802690][T11699] program syz.1.1516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.826582][T11701] FAULT_INJECTION: forcing a failure. [ 519.826582][T11701] name failslab, interval 1, probability 0, space 0, times 0 [ 519.839233][T11701] CPU: 0 UID: 0 PID: 11701 Comm: syz.6.1514 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.839261][T11701] Tainted: [L]=SOFTLOCKUP [ 519.839267][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.839283][T11701] Call Trace: [ 519.839290][T11701] [ 519.839297][T11701] dump_stack_lvl+0x16c/0x1f0 [ 519.839326][T11701] should_fail_ex+0x512/0x640 [ 519.839353][T11701] ? fs_reclaim_acquire+0xae/0x150 [ 519.839381][T11701] should_failslab+0xc2/0x120 [ 519.839406][T11701] __kmalloc_noprof+0xeb/0x910 [ 519.839436][T11701] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 519.839466][T11701] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 519.839490][T11701] tomoyo_realpath_from_path+0xc2/0x6e0 [ 519.839518][T11701] ? tomoyo_profile+0x47/0x60 [ 519.839548][T11701] tomoyo_path_number_perm+0x245/0x580 [ 519.839568][T11701] ? tomoyo_path_number_perm+0x237/0x580 [ 519.839591][T11701] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 519.839614][T11701] ? find_held_lock+0x2b/0x80 [ 519.839664][T11701] ? find_held_lock+0x2b/0x80 [ 519.839691][T11701] ? hook_file_ioctl_common+0x144/0x410 [ 519.839725][T11701] ? __fget_files+0x20e/0x3c0 [ 519.839756][T11701] security_file_ioctl+0x9b/0x240 [ 519.839783][T11701] __x64_sys_ioctl+0xb7/0x210 [ 519.839806][T11701] do_syscall_64+0xcd/0xf80 [ 519.839832][T11701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.839850][T11701] RIP: 0033:0x7fa87518f749 [ 519.839864][T11701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.839881][T11701] RSP: 002b:00007fa875faf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.839899][T11701] RAX: ffffffffffffffda RBX: 00007fa8753e6180 RCX: 00007fa87518f749 [ 519.839911][T11701] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000008 [ 519.839921][T11701] RBP: 00007fa875faf090 R08: 0000000000000000 R09: 0000000000000000 [ 519.839932][T11701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.839942][T11701] R13: 00007fa8753e6218 R14: 00007fa8753e6180 R15: 00007ffc7750c908 [ 519.839968][T11701] [ 519.839975][T11701] ERROR: Out of memory at tomoyo_realpath_from_path. [ 520.057975][T11701] program syz.6.1514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.126484][ T30] audit: type=1400 audit(1767709695.956:646): avc: denied { write } for pid=11703 comm="syz.4.1519" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 520.152700][ T5829] Bluetooth: hci2: ACL packet for unknown connection handle 73 [ 521.270628][ T1073] Bluetooth: hci6: Frame reassembly failed (-84) [ 521.471330][T11720] netlink: 416 bytes leftover after parsing attributes in process `syz.3.1523'. [ 521.623450][T11724] sp0: Synchronizing with TNC [ 523.377970][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 523.483856][T11737] fuse: Bad value for 'fd' [ 525.109776][T11774] overlay: filesystem on ./bus not supported [ 525.116772][ T30] audit: type=1400 audit(1767709700.936:647): avc: denied { mounton } for pid=11773 comm="syz.1.1538" path="/310/file1/bus" dev="autofs" ino=33752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 525.984940][T11789] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 526.500139][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1540'. [ 526.530466][ T1073] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 528.028298][ T30] audit: type=1400 audit(1767709703.856:648): avc: denied { sys_module } for pid=11809 comm="syz.5.1547" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 528.588686][T11824] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1551'. [ 528.910294][ T10] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 529.040214][ T5890] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 529.359078][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.377421][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 529.420967][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 529.448338][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 529.482659][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 529.501702][ T5890] usb 7-1: config 0 has an invalid interface number: 140 but max is 0 [ 529.521862][ T5890] usb 7-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 529.532717][ T5890] usb 7-1: config 0 has no interface number 0 [ 529.548493][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 529.604086][ T5890] usb 7-1: too many endpoints for config 0 interface 140 altsetting 164: 145, using maximum allowed: 30 [ 529.609584][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 529.695133][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 529.730403][ T5890] usb 7-1: config 0 interface 140 altsetting 164 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 529.757387][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 529.791034][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.814605][ T10] usb 5-1: Product: syz [ 529.818763][ T10] usb 5-1: Manufacturer: syz [ 529.834839][ T5890] usb 7-1: config 0 interface 140 has no altsetting 0 [ 529.844926][ T10] usb 5-1: SerialNumber: syz [ 529.866569][ T10] usb 5-1: config 0 descriptor?? [ 529.872050][ T5890] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 529.901638][T11824] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 529.910913][T11824] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 529.929121][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 529.936265][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 529.966587][ T5890] usb 7-1: Product: syz [ 529.982979][ T5890] usb 7-1: Manufacturer: syz [ 530.007501][ T5890] usb 7-1: SerialNumber: syz [ 530.017275][ T5890] usb 7-1: config 0 descriptor?? [ 530.082780][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 530.281404][ T49] usb 5-1: USB disconnect, device number 59 [ 530.438139][T11849] overlayfs: failed to clone upperpath [ 530.969104][T11852] macsec0: entered promiscuous mode [ 531.047239][T11853] macsec0: left promiscuous mode [ 531.094206][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 532.177071][ T5890] usb 7-1: USB disconnect, device number 39 [ 532.439776][T11879] xt_hashlimit: max too large, truncated to 1048576 [ 532.632896][T11873] No such timeout policy "syz0" [ 534.067651][T11894] netlink: 'syz.4.1569': attribute type 3 has an invalid length. [ 534.527589][T11908] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1571'. [ 535.129040][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1574'. [ 535.540382][ T5890] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 535.721876][ T5890] usb 5-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 535.786087][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1576'. [ 535.801282][ T5890] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.888030][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 535.941052][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 536.120843][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 536.135756][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1576'. [ 536.172131][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 536.180901][ T5890] usb 5-1: Product: syz [ 536.185120][ T5890] usb 5-1: Manufacturer: syz [ 536.189693][ T5890] usb 5-1: SerialNumber: syz [ 536.202378][ T5890] usb 5-1: config 0 descriptor?? [ 536.754083][ T30] audit: type=1400 audit(1767709712.586:649): avc: denied { ioctl } for pid=11926 comm="syz.5.1579" path="socket:[34268]" dev="sockfs" ino=34268 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 536.821545][ T5890] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 536.843530][ T5890] usb 5-1: USB disconnect, device number 60 [ 537.196981][T11935] SQUASHFS error: Failed to read block 0x0: -5 [ 537.695348][ T30] audit: type=1400 audit(1767709713.516:650): avc: denied { shutdown } for pid=11936 comm="syz.6.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 539.090264][ T5890] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 539.104945][ T7455] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 539.251972][ T5890] usb 7-1: device descriptor read/64, error -71 [ 539.261728][ T7455] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 539.332017][T11961] overlayfs: failed to clone upperpath [ 539.530230][ T5890] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 539.564138][ T7455] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 540.115801][ T5890] usb 7-1: device descriptor read/64, error -71 [ 540.432291][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 540.441067][ T5890] usb usb7-port1: attempt power cycle [ 540.442032][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 540.454285][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 540.462741][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 540.470075][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 540.605435][ T7455] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 540.650566][T11973] fuse: Bad value for 'fd' [ 541.056884][ T5890] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 541.142567][ T5890] usb 7-1: device descriptor read/8, error -71 [ 541.766175][T11984] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16 [ 542.530346][ T5829] Bluetooth: hci1: command tx timeout [ 543.136894][ T7455] bond0 (unregistering): Released all slaves [ 543.344579][ T7455] bond1 (unregistering): Released all slaves [ 543.420778][T11995] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1598'. [ 543.886514][ T7455] hsr_slave_0: left promiscuous mode [ 543.894329][ T7455] hsr_slave_1: left promiscuous mode [ 544.232005][ T49] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 544.500231][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 544.533012][ T49] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 544.551465][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 544.564399][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 544.588752][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 544.612749][ T5829] Bluetooth: hci1: command tx timeout [ 544.632478][ T49] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 544.651364][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.659380][ T49] usb 5-1: Product: syz [ 544.668034][ T49] usb 5-1: Manufacturer: syz [ 544.676978][ T49] usb 5-1: SerialNumber: syz [ 544.694468][ T49] usb 5-1: config 0 descriptor?? [ 544.778952][T12017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.787588][T12017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.894010][T12022] fuse: Bad value for 'fd' [ 545.685908][T11970] chnl_net:caif_netlink_parms(): no params data found [ 545.918361][T11970] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.932660][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.945959][T11970] bridge_slave_0: entered allmulticast mode [ 545.955587][T12026] ALSA: mixer_oss: invalid OSS volume '' [ 545.961325][T12026] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 545.962297][T11970] bridge_slave_0: entered promiscuous mode [ 545.969981][T12026] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 546.125763][T12026] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 546.134257][T12026] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 546.141432][T12027] comedi comedi3: reset error (fatal) [ 546.194187][T11970] bridge_slave_1: entered promiscuous mode [ 546.234197][ T7455] IPVS: stop unused estimator thread 0... [ 546.690492][ T5829] Bluetooth: hci1: command tx timeout [ 546.739109][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1609'. [ 546.748231][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1609'. [ 546.757702][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1609'. [ 546.766699][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1609'. [ 546.793422][ T10] usb 5-1: USB disconnect, device number 61 [ 546.801104][T11970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.904586][T11970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.973181][T11970] team0: Port device team_slave_0 added [ 546.986258][T11970] team0: Port device team_slave_1 added [ 547.029109][T11970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.042390][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.094558][T11970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.110921][T11970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.119987][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.175668][T11970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.302633][T11970] hsr_slave_0: entered promiscuous mode [ 547.323833][T11970] hsr_slave_1: entered promiscuous mode [ 547.336951][T11970] debugfs: 'hsr0' already exists in 'hsr' [ 547.351106][T11970] Cannot create hsr debugfs directory [ 547.719897][T11970] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 547.796671][T11970] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 547.806425][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 548.074128][ T30] audit: type=1400 audit(1767709723.836:651): avc: denied { read } for pid=12057 comm="syz.1.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 548.154563][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 548.165809][T11970] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 548.229725][T12060] mkiss: ax0: crc mode is auto. [ 548.231779][ T5870] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 548.252701][ T30] audit: type=1400 audit(1767709724.076:652): avc: denied { map } for pid=12063 comm="syz.6.1614" path="socket:[34738]" dev="sockfs" ino=34738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 548.315043][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 548.324415][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 548.331558][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 548.340732][T11970] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 548.400238][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 548.552423][ T5870] usb 6-1: device descriptor read/64, error -32 [ 548.670819][T12076] Invalid source name [ 549.126667][ T5829] Bluetooth: hci1: command tx timeout [ 549.584096][ T5870] raw-gadget.1 gadget.5: failed to queue suspend event [ 549.587191][T12065] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 549.610455][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 549.668417][T12065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.675487][T12065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.848218][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 549.863864][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.894626][T12065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.904777][T12065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.911161][T12065] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 549.920328][ T5870] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 549.923658][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.928052][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 549.951951][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 549.963839][T12065] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 549.986053][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.993107][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.020477][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 550.035195][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.042322][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.110911][ T5870] usb 6-1: device descriptor read/64, error -32 [ 550.230321][ T5870] raw-gadget.1 gadget.5: failed to queue suspend event [ 550.243928][ T5870] usb usb6-port1: attempt power cycle [ 550.259208][ T5870] raw-gadget.1 gadget.5: failed to queue disconnect event [ 550.279912][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 550.443443][T11970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.450414][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 550.815176][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 550.823907][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 551.001496][ T10] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 551.999053][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 551.999238][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 552.005350][ T5819] Bluetooth: hci4: command 0x0405 tx timeout [ 552.017150][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 552.033336][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 552.416598][ T10] usb 7-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 552.460251][ T5870] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 552.544295][ T10] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.580287][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 552.586898][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 552.594269][ T5870] usb 6-1: device descriptor read/8, error -32 [ 552.621886][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 552.991592][ T5870] raw-gadget.1 gadget.5: failed to queue suspend event [ 553.000429][ T5870] raw-gadget.1 gadget.5: failed to queue reset event [ 553.012439][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 553.034569][ T10] usb 7-1: Product: syz [ 553.034631][T11970] veth0_vlan: entered promiscuous mode [ 553.043627][ T10] usb 7-1: Manufacturer: syz [ 553.049827][ T10] usb 7-1: SerialNumber: syz [ 553.049929][T11970] veth1_vlan: entered promiscuous mode [ 553.064931][ T10] usb 7-1: config 0 descriptor?? [ 553.091491][ T5870] raw-gadget.1 gadget.5: failed to queue resume event [ 553.102815][T11970] veth0_macvtap: entered promiscuous mode [ 553.111738][ T10] usb 7-1: can't set config #0, error -71 [ 553.115067][T11970] veth1_macvtap: entered promiscuous mode [ 553.136816][ T10] usb 7-1: USB disconnect, device number 44 [ 553.156746][T11970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.160432][ T5870] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 553.178390][T11970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.190560][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 553.205738][ T5870] usb 6-1: device descriptor read/8, error -32 [ 553.208718][ T2110] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.225941][ T2110] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.231036][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 553.243357][ T2110] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.256973][ T2110] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.351420][ T5870] raw-gadget.1 gadget.5: failed to queue suspend event [ 553.371219][ T5870] usb usb6-port1: unable to enumerate USB device [ 553.390372][ T9] usb 5-1: device descriptor read/64, error -71 [ 553.399866][ T6088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.423270][ T6088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.475219][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.487406][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.700750][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 553.887130][ T30] audit: type=1400 audit(1767709729.716:653): avc: denied { read } for pid=12125 comm="syz.1.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 553.970319][ T9] usb 5-1: device descriptor read/64, error -71 [ 554.052367][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 554.080691][ T9] usb usb5-port1: attempt power cycle [ 554.250243][ T5870] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 554.440269][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 554.453647][ T5870] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 554.462417][ T5870] usb 7-1: config 1 has no interface number 0 [ 554.468693][ T5870] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 554.479214][ T9] usb 5-1: device descriptor read/8, error -71 [ 554.487119][ T5870] usb 7-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 554.501160][ T5870] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 554.510528][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.540132][ T5870] usb 7-1: Product: syz [ 554.555924][ T5870] usb 7-1: Manufacturer: syz [ 554.561749][ T5870] usb 7-1: SerialNumber: syz [ 554.658842][T12137] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 554.667372][T12137] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 554.679449][ T5870] usb 7-1: Expected 3 endpoints, found: 2 [ 554.877504][ T30] audit: type=1400 audit(1767709730.606:654): avc: denied { ioctl } for pid=12141 comm="syz.7.1626" path="socket:[37181]" dev="sockfs" ino=37181 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 554.927805][ T790] usb 7-1: USB disconnect, device number 45 [ 554.960528][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 554.981034][ T9] usb 5-1: device descriptor read/8, error -71 [ 555.093952][ T9] usb usb5-port1: unable to enumerate USB device [ 555.306286][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 556.051036][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 556.127008][ T30] audit: type=1400 audit(1767709731.956:655): avc: denied { map } for pid=12163 comm="syz.1.1634" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 556.153205][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 556.260247][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 556.274605][ T30] audit: type=1400 audit(1767709731.986:656): avc: denied { ioctl } for pid=12163 comm="syz.1.1634" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 556.318564][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 556.348111][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.368434][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.395745][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.414915][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.440181][ T9] usb 5-1: Product: syz [ 556.444339][ T9] usb 5-1: Manufacturer: syz [ 556.448900][ T9] usb 5-1: SerialNumber: syz [ 556.540222][ T790] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 556.949082][T12180] bridge0: port 4(macsec1) entered blocking state [ 556.955802][T12180] bridge0: port 4(macsec1) entered disabled state [ 556.962761][T12180] macsec1: entered allmulticast mode [ 556.968082][T12180] bridge0: entered allmulticast mode [ 557.018477][T12181] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1630'. [ 557.120322][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.129794][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.328529][ T790] usb 8-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 557.346444][ T790] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.359539][ T790] usb 8-1: config 0 interface 0 has no altsetting 0 [ 557.375312][T12180] macsec1: left allmulticast mode [ 557.380383][T12180] bridge0: left allmulticast mode [ 557.390049][ T790] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 557.409783][ T790] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 557.424148][ T790] usb 8-1: Product: syz [ 557.442141][ T790] usb 8-1: Manufacturer: syz [ 557.452512][ T790] usb 8-1: SerialNumber: syz [ 557.463328][ T790] usb 8-1: config 0 descriptor?? [ 557.672485][T12169] bridge0: entered promiscuous mode [ 557.834494][T12169] bridge0: entered allmulticast mode [ 557.851702][T12171] vxcan1: entered promiscuous mode [ 557.864414][T12171] team0: Device vxcan1 is of different type [ 557.888454][ T30] audit: type=1326 audit(1767709733.716:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12185 comm="syz.5.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 557.961645][ T30] audit: type=1326 audit(1767709733.746:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12185 comm="syz.5.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 558.137954][ T30] audit: type=1400 audit(1767709733.966:659): avc: denied { accept } for pid=12190 comm="syz.1.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.540003][ T3833] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 558.685922][T12206] bridge0: port 1(macsec1) entered blocking state [ 558.692792][T12206] bridge0: port 1(macsec1) entered disabled state [ 558.699858][T12206] macsec1: entered allmulticast mode [ 558.705199][T12206] bridge0: entered allmulticast mode [ 559.034452][ T9] usb 5-1: 0:2 : does not exist [ 559.047635][T12206] macsec1: left allmulticast mode [ 559.052694][T12206] bridge0: left allmulticast mode [ 559.091752][ T9] usb 5-1: USB disconnect, device number 66 [ 559.100938][ T5971] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 559.123203][ T790] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 559.176211][ T5870] usb 8-1: USB disconnect, device number 2 [ 559.230519][T12214] netlink: 'syz.1.1645': attribute type 1 has an invalid length. [ 559.262037][ T5971] usb 7-1: device descriptor read/64, error -71 [ 559.960199][ T5971] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 560.137849][ T5971] usb 7-1: device descriptor read/64, error -71 [ 560.197191][T12223] JFS: discard option not supported on device [ 560.204168][T12223] Mount JFS Failure: -22 [ 560.208457][T12223] jfs_mount failed w/return code = -22 [ 560.391527][ T5971] usb usb7-port1: attempt power cycle [ 560.800600][ T5971] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 560.881303][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 561.005425][ T5971] usb 7-1: device descriptor read/8, error -71 [ 561.857153][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1652'. [ 562.487107][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.501692][ T5870] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 562.690585][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 562.708130][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.722001][ T5870] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 562.732115][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.171174][ T5870] usb 5-1: Product: syz [ 563.175856][ T5870] usb 5-1: Manufacturer: syz [ 563.180863][ T5870] usb 5-1: SerialNumber: syz [ 563.194204][ T5870] usb 5-1: config 0 descriptor?? [ 563.206089][ T5870] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 563.585042][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1653'. [ 563.595895][T12271] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1656'. [ 563.940311][ T790] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 564.105596][T12246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 564.122447][ T790] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 564.156785][ T790] usb 7-1: config 0 has no interface number 0 [ 564.168755][ T49] usb 5-1: USB disconnect, device number 67 [ 564.179860][ T790] usb 7-1: config 0 interface 41 has no altsetting 0 [ 564.204290][ T790] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 564.227315][ T790] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.240264][ T790] usb 7-1: Product: syz [ 564.250577][ T790] usb 7-1: Manufacturer: syz [ 564.270632][ T790] usb 7-1: SerialNumber: syz [ 564.279340][ T790] usb 7-1: config 0 descriptor?? [ 564.814386][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1663'. [ 565.250353][ T5870] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 565.520197][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 565.526973][ T5870] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 565.600401][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.610776][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.645752][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.669278][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.686055][ T5870] usb 5-1: Product: syz [ 565.696911][ T5870] usb 5-1: Manufacturer: syz [ 565.701683][ T5870] usb 5-1: SerialNumber: syz [ 566.741081][T12309] bridge0: port 4(macsec1) entered blocking state [ 566.747611][T12309] bridge0: port 4(macsec1) entered disabled state [ 566.753880][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.754549][T12309] macsec1: entered allmulticast mode [ 566.762612][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.767637][T12309] bridge0: entered allmulticast mode [ 566.810921][T12309] macsec1: left allmulticast mode [ 566.815974][T12309] bridge0: left allmulticast mode [ 566.982563][ T790] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 567.005845][ T790] usb 7-1: USB disconnect, device number 50 [ 567.495977][T12316] syzkaller0: entered promiscuous mode [ 567.501543][T12316] syzkaller0: entered allmulticast mode [ 567.662638][T12320] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1671'. [ 567.676988][T12320] netlink: 'syz.7.1671': attribute type 1 has an invalid length. [ 567.734480][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1670'. [ 567.773337][ T30] audit: type=1400 audit(1767709743.576:660): avc: denied { accept } for pid=12317 comm="syz.5.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 567.779305][T12321] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1671'. [ 567.830225][ T790] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 567.869184][T12321] netlink: 'syz.7.1671': attribute type 1 has an invalid length. [ 567.991820][ T790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 568.003098][ T790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 64, changing to 7 [ 568.068465][ T5870] usb 5-1: 0:2 : does not exist [ 568.094238][ T790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9974, setting to 1024 [ 568.112043][ T5870] usb 5-1: USB disconnect, device number 68 [ 568.147177][ T790] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 568.156622][ T790] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.165311][ T790] usb 7-1: Product: syz [ 568.169613][ T790] usb 7-1: Manufacturer: syz [ 568.178806][ T790] usb 7-1: SerialNumber: syz [ 568.290312][ T790] usb 7-1: config 0 descriptor?? [ 568.441038][ T790] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 82 [ 568.572956][ T790] usb 7-1: USB disconnect, device number 51 [ 571.287301][T12122] raw-gadget.1 gadget.5: failed to queue reset event [ 571.520454][T12122] raw-gadget.1 gadget.5: failed to queue resume event [ 572.006859][T12122] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 572.016618][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 572.026816][T12122] raw-gadget.1 gadget.5: failed to queue reset event [ 572.110317][T12122] raw-gadget.1 gadget.5: failed to queue resume event [ 572.200216][T12122] usb 6-1: device descriptor read/64, error -32 [ 572.550281][T12122] raw-gadget.1 gadget.5: failed to queue suspend event [ 572.557276][T12122] raw-gadget.1 gadget.5: failed to queue reset event [ 572.633156][T12122] raw-gadget.1 gadget.5: failed to queue resume event [ 572.703384][T12122] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 572.719328][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 572.729939][T12122] raw-gadget.1 gadget.5: failed to queue reset event [ 572.812173][T12122] raw-gadget.1 gadget.5: failed to queue resume event [ 572.882631][T12122] usb 6-1: device descriptor read/64, error -32 [ 573.006718][T12122] raw-gadget.1 gadget.5: failed to queue suspend event [ 573.014632][T12122] usb usb6-port1: attempt power cycle [ 573.021122][T12122] raw-gadget.1 gadget.5: failed to queue disconnect event [ 573.028640][T12122] raw-gadget.1 gadget.5: failed to queue reset event [ 573.120514][T12122] raw-gadget.1 gadget.5: failed to queue resume event [ 573.135451][T12122] raw-gadget.1 gadget.5: failed to queue reset event [ 573.351821][T12122] raw-gadget.1 gadget.5: failed to queue resume event [ 573.363240][ T5870] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 573.432032][T12122] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 573.463360][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 573.470550][T12122] usb 6-1: device descriptor read/8, error -32 [ 573.531057][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 573.537839][ T5870] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 573.546804][ T5870] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.557187][ T5870] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 573.569679][ T5870] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.579539][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.588116][T12122] raw-gadget.1 gadget.5: failed to queue suspend event [ 573.595489][T12122] raw-gadget.1 gadget.5: failed to queue reset event [ 573.602465][ T5870] usb 7-1: Product: syz [ 573.606814][ T5870] usb 7-1: Manufacturer: syz [ 573.612074][ T5870] usb 7-1: SerialNumber: syz [ 573.670409][T12122] raw-gadget.1 gadget.5: failed to queue resume event [ 573.730366][T12122] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 573.750861][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 573.757957][T12122] usb 6-1: device descriptor read/8, error -32 [ 573.974710][T12122] raw-gadget.1 gadget.5: failed to queue suspend event [ 573.992758][T12122] usb usb6-port1: unable to enumerate USB device [ 574.024654][T12383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1685'. [ 574.035435][ T5819] Bluetooth: hci3: ISO packet for unknown connection handle 3104 [ 574.139697][T12386] bridge0: port 3(macsec1) entered blocking state [ 574.146454][T12386] bridge0: port 3(macsec1) entered disabled state [ 574.153337][T12386] macsec1: entered allmulticast mode [ 574.158645][T12386] bridge0: entered allmulticast mode [ 574.224009][T12387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.233707][T12387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.303777][T12386] macsec1: left allmulticast mode [ 574.308859][T12386] bridge0: left allmulticast mode [ 574.816384][T12397] netlink: 'syz.7.1689': attribute type 1 has an invalid length. [ 574.824453][T12397] nbd: illegal input index -1061683192 [ 574.857653][ T30] audit: type=1400 audit(1767709750.686:661): avc: denied { bind } for pid=12398 comm="syz.1.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 575.011340][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 575.140308][ T9] usb 5-1: device descriptor read/64, error -71 [ 575.381555][T12402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1690'. [ 575.637155][T12407] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 575.678255][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 576.382814][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1693'. [ 576.475264][ T9] usb 5-1: device descriptor read/64, error -71 [ 576.688600][ T5870] usb 7-1: 0:2 : does not exist [ 576.725621][ T5870] usb 7-1: USB disconnect, device number 52 [ 577.011472][ T9] usb usb5-port1: attempt power cycle [ 577.337359][T12421] syzkaller0: entered promiscuous mode [ 577.370422][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 577.378300][T12421] syzkaller0: entered allmulticast mode [ 577.429020][ T9] usb 5-1: device descriptor read/8, error -71 [ 577.741999][T12455] input: syz1 as /devices/virtual/input/input20 [ 577.934594][ T30] audit: type=1400 audit(1767709753.766:662): avc: denied { listen } for pid=12461 comm="syz.1.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 578.471659][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1703'. [ 579.322099][ T30] audit: type=1400 audit(1767709754.976:663): avc: denied { nlmsg_read } for pid=12472 comm="syz.1.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 579.720085][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.728820][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.063180][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.072705][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.826284][T12455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1699'. [ 580.835429][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1703'. [ 580.892743][T12471] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.900419][T12471] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.936528][T12482] bridge0: port 3(macsec1) entered blocking state [ 580.943052][T12482] bridge0: port 3(macsec1) entered disabled state [ 580.949572][T12482] macsec1: entered allmulticast mode [ 580.954895][T12482] bridge0: entered allmulticast mode [ 580.972101][T12482] macsec1: left allmulticast mode [ 580.977134][T12482] bridge0: left allmulticast mode [ 581.779167][ T790] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 581.921471][T12508] netlink: 460 bytes leftover after parsing attributes in process `syz.5.1714'. [ 582.102228][ T790] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 582.115665][ T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.130810][ T790] usb 5-1: config 0 descriptor?? [ 582.139272][ T790] cp210x 5-1:0.0: cp210x converter detected [ 582.310259][ T6022] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 582.339422][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.349320][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.363322][ T790] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 582.374541][ T790] cp210x 5-1:0.0: querying part number failed [ 582.384036][ T790] usb 5-1: cp210x converter now attached to ttyUSB0 [ 582.430294][T12301] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 582.472865][ T6022] usb 8-1: Using ep0 maxpacket: 8 [ 582.484635][ T6022] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.507120][ T6022] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 582.520003][ T6022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.529243][ T6022] usb 8-1: config 0 descriptor?? [ 582.591431][T12301] usb 7-1: Using ep0 maxpacket: 16 [ 582.603883][T12301] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 582.619599][T12301] usb 7-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 582.645432][T12301] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 582.654661][T12301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.675446][T12301] usbhid 7-1:128.0: couldn't find an input interrupt endpoint [ 582.786087][ T6022] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 583.035044][T12546] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1722'. [ 586.310943][ T5870] usb 5-1: USB disconnect, device number 73 [ 586.318159][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 586.357220][ T5870] cp210x 5-1:0.0: device disconnected [ 586.498864][T12564] geneve2: entered promiscuous mode [ 586.504788][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.514198][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.524015][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.533906][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.059864][ T5870] usb 7-1: USB disconnect, device number 53 [ 587.072815][T12301] usb 8-1: USB disconnect, device number 3 [ 587.172693][ T9] raw-gadget.1 gadget.5: failed to queue reset event [ 587.240271][ T9] raw-gadget.1 gadget.5: failed to queue resume event [ 587.590216][ T9] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 587.606498][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 587.608222][T12585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1732'. [ 587.628172][ T9] raw-gadget.1 gadget.5: failed to queue reset event [ 588.258808][T12593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12593 comm=syz.4.1732 [ 588.271713][ T9] raw-gadget.1 gadget.5: failed to queue resume event [ 588.348433][T12585] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 588.359819][ T9] usb 6-1: device descriptor read/64, error -32 [ 588.385283][T12577] syzkaller0: entered promiscuous mode [ 588.387185][T12585] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1732'. [ 588.391012][T12577] syzkaller0: entered allmulticast mode [ 588.559056][ T9] raw-gadget.1 gadget.5: failed to queue suspend event [ 588.567047][ T9] raw-gadget.1 gadget.5: failed to queue reset event [ 588.640228][ T9] raw-gadget.1 gadget.5: failed to queue resume event [ 588.710255][ T9] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 588.740386][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 588.750028][ T9] raw-gadget.1 gadget.5: failed to queue reset event [ 588.830397][ T9] raw-gadget.1 gadget.5: failed to queue resume event [ 588.910867][ T9] usb 6-1: device descriptor read/64, error -32 [ 589.216249][ T9] raw-gadget.1 gadget.5: failed to queue suspend event [ 589.227913][ T9] usb usb6-port1: attempt power cycle [ 589.233468][ T9] raw-gadget.1 gadget.5: failed to queue disconnect event [ 589.241097][ T9] raw-gadget.1 gadget.5: failed to queue reset event [ 589.310288][ T9] raw-gadget.1 gadget.5: failed to queue resume event [ 589.327447][ T9] raw-gadget.1 gadget.5: failed to queue reset event [ 589.542852][ T9] raw-gadget.1 gadget.5: failed to queue resume event [ 589.620257][ T9] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 589.641130][ T30] audit: type=1326 audit(1767709765.476:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 589.710355][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 589.717514][ T9] usb 6-1: device descriptor read/8, error -32 [ 589.805207][ T30] audit: type=1326 audit(1767709765.496:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 589.840323][ T9] raw-gadget.1 gadget.5: failed to queue suspend event [ 589.849109][ T9] raw-gadget.1 gadget.5: failed to queue reset event [ 589.959850][ T9] raw-gadget.1 gadget.5: failed to queue resume event [ 589.991932][ T30] audit: type=1326 audit(1767709765.496:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 590.016001][ T30] audit: type=1326 audit(1767709765.496:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 590.050593][ T9] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 590.100555][T12620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.101290][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 590.109125][T12620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.116024][ T9] usb 6-1: device descriptor read/8, error -32 [ 590.142274][ T30] audit: type=1326 audit(1767709765.496:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 590.244435][ T30] audit: type=1326 audit(1767709765.496:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 590.268114][ T9] raw-gadget.1 gadget.5: failed to queue suspend event [ 590.275256][ T9] usb usb6-port1: unable to enumerate USB device [ 590.299474][ T30] audit: type=1326 audit(1767709765.496:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 590.329095][ T30] audit: type=1326 audit(1767709765.496:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 590.353949][ T30] audit: type=1326 audit(1767709765.496:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 590.420659][ T30] audit: type=1326 audit(1767709765.496:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.5.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5398f749 code=0x7ffc0000 [ 590.477476][T12627] futex_wake_op: syz.7.1741 tries to shift op by -1; fix this program [ 590.582625][T12301] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 590.722158][T12301] usb 5-1: device descriptor read/64, error -71 [ 590.960248][T12301] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 591.095224][T12301] usb 5-1: device descriptor read/64, error -71 [ 591.199538][T12632] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 591.247512][T12632] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1742'. [ 591.258167][T12301] usb usb5-port1: attempt power cycle [ 591.612789][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1744'. [ 592.087774][T12301] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 592.114260][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1744'. [ 592.143714][T12301] usb 5-1: device descriptor read/8, error -71 [ 592.400327][T12301] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 592.441259][T12301] usb 5-1: device descriptor read/8, error -71 [ 592.500215][ T790] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 592.570531][T12301] usb usb5-port1: unable to enumerate USB device [ 592.660185][ T790] usb 7-1: Using ep0 maxpacket: 8 [ 592.668939][ T790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 592.685428][ T790] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 592.696566][ T790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.707131][ T790] usb 7-1: config 0 descriptor?? [ 592.763497][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1747'. [ 593.090919][ T31] INFO: task kworker/1:3:5862 blocked for more than 144 seconds. [ 593.098694][ T31] Tainted: G L syzkaller #0 [ 593.105294][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 593.114076][ T31] task:kworker/1:3 state:D stack:22664 pid:5862 tgid:5862 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 593.126420][ T31] Workqueue: usb_hub_wq hub_event [ 593.132143][ T31] Call Trace: [ 593.135966][ T31] [ 593.138954][ T31] ? __schedule+0x10b9/0x6150 [ 593.146110][ T31] __schedule+0x1139/0x6150 [ 593.151102][ T31] ? __pfx___schedule+0x10/0x10 [ 593.156006][ T31] ? find_held_lock+0x2b/0x80 [ 593.162792][ T31] ? schedule+0x2d7/0x3a0 [ 593.169497][ T31] schedule+0xe7/0x3a0 [ 593.179149][ T31] schedule_timeout+0x257/0x290 [ 593.184741][ T790] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 593.186111][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 593.203685][ T31] ? mark_held_locks+0x49/0x80 [ 593.208499][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.213739][ T31] __wait_for_common+0x2fc/0x4e0 [ 593.218682][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 593.224068][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 593.229550][ T31] ? __pfx_device_del+0x10/0x10 [ 593.234460][ T31] ? kobject_put+0xaf/0x6f0 [ 593.239009][ T31] i2c_del_adapter+0x640/0x850 [ 593.243870][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 593.249118][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 593.254573][ T31] ? rcu_is_watching+0x12/0xc0 [ 593.261608][ T31] ? devres_log+0xef/0x330 [ 593.266161][ T31] devres_release_group+0x238/0x3d0 [ 593.271877][ T31] ? __pfx_devres_release_group+0x10/0x10 [ 593.277607][ T31] ? __pfx_mcp2221_remove+0x10/0x10 [ 593.282828][ T31] hid_device_remove+0x107/0x260 [ 593.287773][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 593.293256][ T31] device_remove+0xcb/0x170 [ 593.297768][ T31] device_release_driver_internal+0x44b/0x620 [ 593.303861][ T31] bus_remove_device+0x22f/0x450 [ 593.308804][ T31] device_del+0x396/0x9f0 [ 593.313171][ T31] ? __pfx_device_del+0x10/0x10 [ 593.318028][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 593.323078][ T31] hid_destroy_device+0x19c/0x240 [ 593.328104][ T31] usbhid_disconnect+0xa0/0xe0 [ 593.332954][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 593.338168][ T31] ? device_remove+0x11d/0x170 [ 593.342938][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 593.348638][ T31] device_remove+0x125/0x170 [ 593.353242][ T31] device_release_driver_internal+0x44b/0x620 [ 593.359310][ T31] bus_remove_device+0x22f/0x450 [ 593.364326][ T31] device_del+0x396/0x9f0 [ 593.368664][ T31] ? __pfx_device_del+0x10/0x10 [ 593.373544][ T31] ? kobject_put+0x218/0x6f0 [ 593.378445][ T31] usb_disable_device+0x355/0x820 [ 593.384011][ T31] usb_disconnect+0x2e1/0x9e0 [ 593.388709][ T31] hub_event+0x1d84/0x52f0 [ 593.393173][ T31] ? __lock_acquire+0x436/0x2890 [ 593.398112][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 593.403353][ T31] ? __pfx_hub_event+0x10/0x10 [ 593.408124][ T31] ? put_objects.isra.0+0x100/0x1f0 [ 593.413359][ T31] ? finish_task_switch.isra.0+0x202/0xbd0 [ 593.419181][ T31] ? rcu_is_watching+0x12/0xc0 [ 593.423965][ T31] process_one_work+0x9ba/0x1b20 [ 593.428909][ T31] ? __pfx_process_one_work+0x10/0x10 [ 593.434276][ T31] ? assign_work+0x1a0/0x250 [ 593.438845][ T31] worker_thread+0x6c8/0xf10 [ 593.443481][ T31] ? __kthread_parkme+0x19e/0x250 [ 593.448483][ T31] ? __pfx_worker_thread+0x10/0x10 [ 593.453772][ T31] kthread+0x3c5/0x780 [ 593.457998][ T31] ? __pfx_kthread+0x10/0x10 [ 593.462702][ T31] ? rcu_is_watching+0x12/0xc0 [ 593.467449][ T31] ? __pfx_kthread+0x10/0x10 [ 593.472123][ T31] ret_from_fork+0x983/0xb10 [ 593.476917][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 593.482046][ T31] ? __switch_to+0x7af/0x10d0 [ 593.486711][ T31] ? __pfx_kthread+0x10/0x10 [ 593.491343][ T31] ret_from_fork_asm+0x1a/0x30 [ 593.496099][ T31] [ 593.499157][ T31] [ 593.499157][ T31] Showing all locks held in the system: [ 593.511480][ T31] 1 lock held by ksoftirqd/1/23: [ 593.516418][ T31] 1 lock held by khungtaskd/31: [ 593.521284][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 593.532428][ T31] 2 locks held by getty/5573: [ 593.537081][ T31] #0: ffff88814d3f30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 593.546821][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 593.556970][ T31] 6 locks held by kworker/1:3/5862: [ 593.562185][ T31] #0: ffff88823be12f48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 593.572992][ T31] #1: ffffc900044bfc90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 593.584427][ T31] #2: ffff888143f69198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 593.593342][ T31] #3: ffff88804a534198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9e0 [ 593.602552][ T31] #4: ffff888047b95160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 593.613145][ T31] #5: ffff888035a01a20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 593.623674][ T31] 2 locks held by kworker/u8:19/7455: [ 593.629013][ T31] #0: ffff88813ff69148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 593.640168][ T31] #1: ffffc90005a0fc90 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 593.652285][ T31] 3 locks held by kworker/u8:28/9667: [ 593.657641][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 593.667605][ T31] #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 593.676285][ T31] #2: ffff8880b85262d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 593.685757][ T31] 2 locks held by syz.6.1745/12643: [ 593.691029][ T31] #0: ffffffff90142028 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 593.700004][ T31] #1: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 593.710034][ T31] [ 593.712377][ T31] ============================================= [ 593.712377][ T31] [ 593.720817][ T31] NMI backtrace for cpu 0 [ 593.720835][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 593.720860][ T31] Tainted: [L]=SOFTLOCKUP [ 593.720867][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.720876][ T31] Call Trace: [ 593.720882][ T31] [ 593.720889][ T31] dump_stack_lvl+0x116/0x1f0 [ 593.720915][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 593.720942][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 593.720960][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 593.720994][ T31] sys_info+0x133/0x180 [ 593.721017][ T31] watchdog+0xe66/0x1180 [ 593.721042][ T31] ? rcu_is_watching+0x12/0xc0 [ 593.721057][ T31] ? __pfx_watchdog+0x10/0x10 [ 593.721071][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 593.721094][ T31] ? __kthread_parkme+0x19e/0x250 [ 593.721113][ T31] ? __pfx_watchdog+0x10/0x10 [ 593.721131][ T31] kthread+0x3c5/0x780 [ 593.721147][ T31] ? __pfx_kthread+0x10/0x10 [ 593.721160][ T31] ? rcu_is_watching+0x12/0xc0 [ 593.721170][ T31] ? __pfx_kthread+0x10/0x10 [ 593.721183][ T31] ret_from_fork+0x983/0xb10 [ 593.721196][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 593.721209][ T31] ? __switch_to+0x7af/0x10d0 [ 593.721225][ T31] ? __pfx_kthread+0x10/0x10 [ 593.721238][ T31] ret_from_fork_asm+0x1a/0x30 [ 593.721261][ T31] [ 593.721268][ T31] Sending NMI from CPU 0 to CPUs 1: [ 593.860757][ C1] NMI backtrace for cpu 1 [ 593.860772][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.860792][ C1] Tainted: [L]=SOFTLOCKUP [ 593.860796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.860805][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 593.860827][ C1] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 593.860840][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 593.860852][ C1] RAX: 0000000002803d63 RBX: 0000000000000001 RCX: ffffffff8b7826d9 [ 593.860861][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 593.860870][ C1] RBP: ffffed1003b57498 R08: 0000000000000001 R09: ffffed10170a673d [ 593.860880][ C1] R10: ffff8880b85339eb R11: ffff88801dabaff0 R12: 0000000000000001 [ 593.860888][ C1] R13: ffff88801daba4c0 R14: ffffffff9088bad0 R15: 0000000000000000 [ 593.860897][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 593.860911][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 593.860920][ C1] CR2: 0000200000006040 CR3: 000000004387d000 CR4: 00000000003526f0 [ 593.860929][ C1] Call Trace: [ 593.860934][ C1] [ 593.860939][ C1] default_idle+0x13/0x20 [ 593.860957][ C1] default_idle_call+0x6c/0xb0 [ 593.860975][ C1] do_idle+0x38d/0x510 [ 593.860996][ C1] ? __pfx_do_idle+0x10/0x10 [ 593.861017][ C1] cpu_startup_entry+0x4f/0x60 [ 593.861036][ C1] start_secondary+0x21d/0x2d0 [ 593.861050][ C1] ? __pfx_start_secondary+0x10/0x10 [ 593.861065][ C1] common_startup_64+0x13e/0x148 [ 593.861086][ C1] [ 594.032254][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 594.039089][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 594.049732][ T31] Tainted: [L]=SOFTLOCKUP [ 594.054024][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.064051][ T31] Call Trace: [ 594.067303][ T31] [ 594.070213][ T31] dump_stack_lvl+0x3d/0x1f0 [ 594.074812][ T31] vpanic+0x640/0x6f0 [ 594.078774][ T31] panic+0xca/0xd0 [ 594.082475][ T31] ? __pfx_panic+0x10/0x10 [ 594.086865][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 594.092834][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 594.098971][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 594.105104][ T31] ? watchdog+0xe83/0x1180 [ 594.109492][ T31] ? watchdog+0xe76/0x1180 [ 594.113882][ T31] watchdog+0xe94/0x1180 [ 594.118099][ T31] ? rcu_is_watching+0x12/0xc0 [ 594.122835][ T31] ? __pfx_watchdog+0x10/0x10 [ 594.127483][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 594.132656][ T31] ? __kthread_parkme+0x19e/0x250 [ 594.137664][ T31] ? __pfx_watchdog+0x10/0x10 [ 594.142321][ T31] kthread+0x3c5/0x780 [ 594.146397][ T31] ? __pfx_kthread+0x10/0x10 [ 594.150977][ T31] ? rcu_is_watching+0x12/0xc0 [ 594.155719][ T31] ? __pfx_kthread+0x10/0x10 [ 594.160291][ T31] ret_from_fork+0x983/0xb10 [ 594.164866][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 594.169964][ T31] ? __switch_to+0x7af/0x10d0 [ 594.174628][ T31] ? __pfx_kthread+0x10/0x10 [ 594.179203][ T31] ret_from_fork_asm+0x1a/0x30 [ 594.183971][ T31] [ 594.187234][ T31] Kernel Offset: disabled [ 594.191532][ T31] Rebooting in 86400 seconds..