last executing test programs: 5m16.407101872s ago: executing program 1 (id=252): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b04000000000000000002"], 0x54}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25010117800c00030008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={r2, 0xc1, 0x80, 0x34325240, 0x2, [0x2], [0x80ffff, 0x0, 0xfffffffe, 0x40006f13], [0x0, 0x44, 0x81, 0x1], [0x400000000000004, 0x0, 0x7f]}) r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0xa, @pix={0x7, 0x3, 0x59565955, 0x1, 0x800000c0, 0x4, 0x2, 0x3, 0x0, 0x8, 0x3, 0x3}}) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000000)={0x0, @frame_sync}) 5m15.257607397s ago: executing program 1 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x8, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x14c2348, 0x40, 0x1, 0xfffffff2, 0x3, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x8004ad, 0x6, 0xff, 0x1, 0x5, "090000300296b5000001000000000200000200", 0x1, 0x200}) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 5m14.934427881s ago: executing program 1 (id=257): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b0096"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r6, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000000400000008000005000000000000000040709142ee8bba85cdb574650c86540458eacbf64ad58e0baf4c719d62256f2eaf063f07ba595e528c9d53a2458ff519a638c7697c9ae3a1fd5dba48cc5ebe877b354972314be6cbcf3de39e0270f197b5ad151892f2da295cb8f500449deff7ed73508c7465d17507fc8add1ad472a32e39abb7eb445f487d7cdfadac00d0864ab91087d04b4aa631008eb3802f1be7e72652", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) (fail_nth: 5) socket$nl_route(0x10, 0x3, 0x0) 5m11.556762967s ago: executing program 1 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x84084) 5m11.294367249s ago: executing program 1 (id=268): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x184) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x28b103, 0x3}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000061c0)="c0f61a5fb77193bea0c6599de09cf570067192ff7d5bf191681878eb121895cd4c4052feb0a5196b61ab6e28d35aec54bb2aee6802a27f50c4e8f36a2b1bb12d93dbcd320ed338fd1a8ed43a2dcb2bf11c773ae982800321c7dcd67fa8930472eee2990090cc2a92f3373d898573a2cd1712c18ea624e82422c96f0d8895bfc4541911ff3662cd28fd55d795d1a5f31c92defbed88d48db688f899fe88997b057ce3e898eaf9eb2e76a59c1d2c10610768b3296595221c2b063ca2aa664fa0a5456c4e2bcddc7f856e2e29ce1b8852997a4d24f918408bfa9969074de495dd4cc9591e48287d78a2b3e0de09b48eb5b6bf78c6afd134b09770c164000d1f300c92877afe8be5d381c38da3b5fb9bd540c2f43c7dd2ec8dcff2af3517ba839c827866d10608964445bdead091df1264f5591e91d2f31b2015dff1b3b7ff0a5dc8b15748278849ddf4389ca7112ec1ca45957e2809b3d763e336f7051ac4e832ec61d1b95b9266565293806933dd8e3b65eaa1b4fe7946056703426674379ccec7abff1c459b91248f3a1d9e8103ae395aa86dd4235a5c16d9bd12dcb1ea9565a7c3d58d247a51db6d9077ecf47152d0733d79a5c449480c40b1cf8e115df4de3404b73ad06ac4c0d03f3b51d1b89b05ded082a5db1f5fbd8d351015b93862b2cc0995fb318609237e404e8d78d8982af761c27ad1fbc8f4693194c5e6b99edcb7a6e9dd261a386d8ed4420a7c12cbdcc86ab19f4e7a6c0c9b80fa3f0549ae57b38a93f669a87584b81e56211b34263db87c2d244e422878aa93e2c24260c71d06f75da33079b48b7072859669c128ba03d1487336a4a04167f2a3fa928d002c8b3cafdedf7a479604aa8f94e6b7ba58395df3d136b783f7be6b0b6b7b4b735c88a53da064a493b16713726b39ce23f08af19a671fe81be1e9772d87ca9cb5dccc35759fe3f7935a3167924d0a7d1586821ffebe0fa57e72a24967f7958875c4bf56d779369074db0077ee58138400c2f646c645e0f453e9e39aaf48da67775f59f8e282db3dec88bbe20ca6e65e2c7e44ab0583840513bfab76d94d1512549ea6db4a5a64cbe6f76b0ecdb2f1f71aa6446bcf4f7249366474cb77ed70ccb2702134b9dc6c2bfaf27ac9a9c85b8d9c48d100ae8c0eaa34701d2125a405b1117307119b754ccbbbcb2c8b71eb76d1157ddc7fbe0c75652a4cfc31d785a489f2344d8b4c47ff1b772104f49658f62d6241ef7f782db0cc071788b3dfa74e69533cd0a02ffadacdfbc8b5a83b9d4b8db068b5a7370f947fc4a99158c6296a442beba2e23ac1ef68c50f19851f3fb68b67fb714a5e7e53bb5a7690286cac12f2b002e854d8595075fbd00622b29bd423c3dbaf600ad6f37c96dcde43de6290b053c76df5620ce17118e2230039304c88a0d207c7cd05dd3854c545cdbebe907cc4d3411a382afed5e080502363cebe68e2c8dc1f800ea4add827a83a9cdf0fe6d54eabfca5a0ba370a06a4af1c49a60cd19141a4d994fbcce888278ade6300bd40685267fcdf1317cdb3b06cae9e7d9edb08d5c98b6d7115c025fcc05058a515adcc23c65ce526aed3b8203f3c54986f65ba9ffe2a9bc26b2813a1fe339ba2a58515cb8375e2d62550bf35dfd4fbdb75a70bb9fdc47d3d0346a65b986b7efd12aab760124b6888480b341b16ef2fea93fe2fbdeb55706690aa2c02bd80b1ccb7b8f23720283df89b515e2020bc5364cc4aea5fdc250f10d46db93c128e2de7477f4c80ec016f7a872efdef50ae1730b3a1deb8085d82f4fd53015a518803cd02646c087d67b0fd7092852dd81ac93ca60346f23fd847cf7c4883cab81af956342da21fb399b69e1988d89f9693b0630fa8cc95714285940d20eda153f8f7b01e6b2b892327b5d1e754a36a3430c5c22c3b841357eb80e526d7792a8ab9c4b1d23d82e31f23ef38580c2b33ca72424fbfbbf237f315cf2e5d134783982cad204be087ef58da96c6bc5da2dc4bc78f293eed56157a10848c0a956de15b83daacede9ae1c54731149f9ce7231cd84e14f128f87361e1fc0cdb2940766f39c93b9ddc74bba0a32548cddb1ae20981576de2ef8a772b04ed90900b2da11ffc70bbdb7091b8b8ed600dc0c9d236277afd9bb97b035f3b8fc95ef3f30c056b67a195c5c9f44c0f2ca4debba0d6d8779903e8e34fdd6b766fbba6b57e722ad9a852dbbeca8eb9acb9929bdcb4d4fa57d54ef1c1a0fdc032a898d3334f5671c7df82361b7d616c1f87e23f7adf043edda83458051f073f2562904ed25ad9a7129f3c14286007c9e4c81ea56c6a7289d8e58782d949a19a2642dc89d107fb465d0a98128250e66eedd93cf063963b7f7a0e1d3b9f1dd212cc9edd662af45852dbbaec84c69a640be115a239b5abd46d990fa007988f6be78a8c1e426091ecb33822529f7fddfb34d9304466ea06bb546a34735021e98674ae4a5f5c0b4f153ad5434b81c6343c42ae79224fe5abfe8b9e6fba38164c3c318500c130323b2f9bbcdf6aceb664e10483e2084defa744cd745e565ac5a8b5c30166330dd95e70f2a072a5cf5462635f7e0a4f455bcb607426aede9fa06d708c7c0daaafe2b84896134ab3b379c6690c9049903156232e5b7ca9529d602968f1e1f7a73214aaf4a9575dd5147e5bef8f05907267580abdb728cf32f6845cdf3bc779451669e4972e0b787afac5a36bacc3c1bcce125e91e4bf9810d91d1f1a3d8316328dd2626040af09892f1241c6645537ebfbeb752afba5e8171f487edba97aa92404973d4e8d09254abd2b70bdadd9b98fa3c33355295a5c474e9b2f017a6636233a382e8ef4e73506880e2a588bf257b6bb11e57cd9e75e45ef609ba583f3a6b1f2f94c7a0443dc0a8906a13e0188b61550cd296e4c63faf45bf7aed852f68ffed377302da3f73d89e4274a64667636bf00e8e4408a8407e098aeeed98e545b9aef40896c8070a76aaa0042162979ec0b7b69b4ee701100d66d3e7d25a48c59989424522889b32e4f18676475782e86d652d2eb836c326b46b8544bb755eeb14727e5ca25875f7b9ae1c113068be55a1521cb4edefef34a7a4cabc3639e456c94f01d78c059c441ce2c468e7b39b56555ad5cd6a14df8e3518e4e1970fbd6f586ce46c51c4d9ad20c3f7f5048c071994e807f19b7176290a82406dd0ad3f0b64350bbce79b223f27ed99f819def43a33696c0739e09030460a5a5d04d251adfbde1af7a485894d3d30c79d49796a9a5e077aeddba1303f3e3a3187298c88da70885e2a9dc966eb69a6439e2d3b1934ae6e8ea328497d87a9dbbddbdbf12b0c582ca4ffe1f25cdcf89a6ccdb31880776ab808b4f050ae02adf70f64c73ab2a3b1c4da69950ab4f7bcf9cc22f81b99694a7783b792facd8197904c12d3776de5184afa143ee23eee82aab2ac79b25503e0692f3463e5c363e0b4b5f31af82898009f7da13d4f249a70de40314c003e7e59dfb233bc44d0316df3e45af806d216ca76a58417ff8abcdf7cfea2da8868c496cdec8f47c451ccdc8908c5e8c1039b6bfa8751637c29fdd9b7dc76279dea5ad7455af4db3394a34cb9be8b9bf1105862108f920c44d029c3372e77c44a25d06cba956da65ee40abe32b8b557e123fddaa87b4ed5ab3485eb11f13c61072720d4adbb937c336f2b60525933b6d49e7c6751f0769377bdcef02abe63639b17a6780a4afccc8067403aeea42726f253ec97994dcf55358e6faa3e622344dfc613f8be96714d5c49633d7b74b9a72883985782ea8691d26da620d905f3583adbd9d527d93f1ce623bcf70d98a0455ff80fb1d472c6fc6bf0390e81b8d755b196e94fb73bcc883f5f310043c5138c95c5d7079c24d5bc5876b422f46a2bb17aee407bf7a55dbbdb253e2865c1b91839737c37142a8fe8bdbc0a7bf89a392da717a5ed87af754052b1d0a1a37313b00cf3b4aad91ce7fa7777b1851121a63e374865b238ddf9a7ebd20641a719c68682b97e3c5126e732800c04cdb627bd415efbb7e5e19917bf4bd53f072b7ec2eaa0128b56e069a32e9f729718fa4a7212ab0fd1e5d3582a5723a704d84a88c235b44812849301ee8155cea471028beea1918cb1f4118728718674cca9dcc58bafcdb9379c57e9333ab348b30a801aa2f5c05c3107e52613cf0f591781ddb5e1e4844633057a26bb3179c31b5664db4bb8c6d762c7b9886317ab6e9e301de67f12085547ad2a20d1d63d361c2bcd66be2e25fe104f8b53b7cf89d90d456f063da31f60078b760ce340f9c9a8e8da113b6c6e3c53e666488d75ab209dbe31ecb531553f17446a29edc465ed22aee2d4c013ee8a4d935c0cd92bcba9e5a56a6c19ac114d12db58bcf5f931a7b282404af34fee464f4c28e16dab834de98dd57b107e45fa66b26c32fd94e848aef6e4a2a65fd4fbead1b1d445d6c343bf50d785e664220371e27566646e284c6a3b07c14c0c5b84b5cd1a01a84d655f8dd72ab8e3d0c48e67596f605cd4a50b5fde9b182792d7ee8ee457eb6666aadea80563b4d176933cc482f75cb98a8dde4a414041187cfb2abe3e5077f23c98bafd0afb8b023e0cb26efc1488dd98a51a19dc93412b5fd91c4e06439b6d2d20a174989f860de6b1be55923a11e5893d30fae74a625f777ef9362e64b529c964b5c0b5817a579a647ded28582c45f965e52e1f76084267c73f8fce8037b22c2496ee6674f56056d9c691eab831c831a27fccd90f961e949a51c90a80b677d11e70d01744f9632cc26b7e6476b8c92a688ec8e1280ea8b795eae7ee61e2735045b9ea516af752b35388a6c3ed98cfbc4e74c8d0717dc31eac87b6a9c06f0d4f412e8e1155ce48cec6d9c106f3013329596a2d43ffe7f942cb7b7449f38620a8a9e5138b5d5d03c8a563446e4dfb1905d841f7a350d6c67d85652297db21b3dd3291b795c90276ccc50eaf513f3ff9480b3d2c0096e92c93cbbea680833cfa630d72c4f5a21ef0f81910b8a5ef77d62175d3abf5b3417cce43e3c53bb84ee1f5e354b2d79c2b46e3bdb2ffb15420e7a28c800c2591cd331d71c645a6b1bc43f06703164c05f61b4abc0fecbaee510def6340c2bbcc32248655e9161c3e6f01520bb0c53be04c3a3ef4a2dc401663f6719ac758aa297f65d1681652e4ad042d754b054df9cede3ffef7ad2f52184ea6d93d6867cc262b0a413da11c02d0c7c49a663319333d8b29d56cbf630e66b6683ff7f3b1ce5c481d37151626eae761adb77642f802bf0f663f3c322ee17cf01a09f058dbf82d04bdd7c48f34f54392d1dd489891ce28373ae980f74897fe3f90db2a9ccdbe56160fd2517adbc953e88c5fa8981456b87ab9f122321816e0df119f6f6c505f0dcab1c8e6a7f4109055dd80001dd90ea984b80f0b0766bd9772d96ed42d95f219b4a8420d7cf04f28475d7f5d8a8a07b0930c40d0dfc2592f8f54e90a80e0a98d3055f4660b1530565c7f2d91d7d96142da19d644aa7c512e24f83e8305970f9d3fc3b9382ad141f63f2d5b265b7cda258119ca4f553fab11f2fd925a7a24c4021045073d867bb089ca7bcb702bcedbc28781e408cf8bd43498f8661a320d28c95c1fc42635c9e4c4de8787afc70bf5c8bf75e0a2937a9ca2b08c15453f24211168c7fb2a24218fc3f04160c2daaa46ef7fb710606a53228e134f20511169034cec55e77037a108060b8fd10ab9ae228d9ee4d5ab1380cfcb8611e6c9d5dc143db2bc856d967b0b9d0187ba8483f7adbd1092562b2b16420baa5ab6c1f7c02ae56f013e752d9f41df4b4f0b008bc25ff58f816e50bdce308e219068bc898a21f1dd26d7fe7760459629f3615bcf7582c87d296f041fb005a72c7ef4013ccd8ca3bea85db90ae6349f101adb9235dd343be423816b37db2661dde2b9db33800da7599e8a9194fcf06755e2659670c62aba1d5a01172a416a0296bade0b32e69b0ee60dd6cd1eecca4335eb0416df6ded75049a14660276df47bb4f224e087235742e90ddf6f57827a0cf26d71b9338f2ff5166bea85a7639de6ac97ec829a7d071fac1f4b27c6c23e952adb5536b45a68e75c1c1a6d44508be6f4b87c5bb880a6baad5faecd1fd6730783d8729c2d89b23a3f2f9b79b78f7fcb70a7812607b25b17ae857e65f205ad5dd87a34e52c6e9611f588236bdc59d816f277aa8cd4a19750461d3e82c8621181b803900d1df439babcf4909168d4125a7c962ceac2f834d79460f17f92f415a85ad7e12da4b76105bceb4641fc87da7797fee092828f6e9e42631fd5c87046ebe5c4044663a31a1b39a6f6a53ee2b7fbc3eede57619535b1011c10d2d5a97c781c44bb6e493287528bc5281496f1aee3c746e09aeef0b2d38bdd33e37446c1f7516767ecbe298b78ef8e03336a08a1a9e62805140573b034459a445240aff04593539aa97056957f3dec9c43e50a1bce1b9c8e860940e03ae39e8f76fb80ae746f7fa4ed0b050c9e08a788e666e9f18bc8e83c64ee3ea04eb9f1c1dd92b3be73d18cc53bca76ba4688b48c13982ae6d25fdd9b5b85612d5b706c9b9d7c6cca91141313356f0d7b859da0de669fb52a829014a0fdde51df658303ce085222a42ad624ee6c659ec94e0d0713b2d3c3becb53c6f76d30530e6129943e20361a7c9f7847f79cb871d866b5277eecc8c1626fe2719c9cf872c0fc78a98e6ca998555721e9abd5bf9e2d1848016e0bd3202c44575c688837136e71e85765d677e0f2b081707a4e7e22bef50b9280a1a5ea549022ef2a9fed989f156198975302608dffd03f8f1186a12585d4670ce868f0c96be37416b9132144f65c9abe8b00894d7a7e6d0a8554e09139ec2a0eb6d4f00c637684602c106257f5abe816e068e0f6f3e94a916ff41e23b6baa4876931209a6b0bce1f6fa8d1965665d3dc42e5c6b011bdb5144fa5fe4879779ac9dffe0843cf49806ecbb615b818e54c6dfe4d12ccae5b12b0ce87909c1e852e8d7587d1ee24c2575af61eb0b667c37b6d15b88121974598ac23cbc66503f95cf01a7a1e217f0712c4cc4e5fc22e83e3aa375eda531a73828eba91223d7de1194af730bbf2c1ed5ec47ecdf465b1794971010ff8c8771c488a1d3f98292b5d2ea9625e52589aaf7212fcdddcc0f1681b785911fcc64a6427358e4307a3d8bc583dd635ba5c41eeae96e0b6bc5236a1f539d291e568d5a0aee25ffbaa73d0cb84bf558cbf6d04b16ef7e97617b42d07100d82fda6f75dcade611e459bdb4773bf2b70e90a8add2bfe6ea6d3a4427940fef6c81931762dbea6678fc63e50c4430227b15cf184dbae4c3b2d8096292c17f701c560ac7cb33efe7d79d0c2a3c0c06e22d4e84e9e959697879f0d27df460046fc20394655cfa19793256cd9074f1c5f8ef530af537164e0e43184f921d56094fa7c7744af35821a5833c9b9d56fcf525a39fc795cf33f14705d0c7087c081bf11ad29e4d6c8f6cbbb3a0d873262b89cfc54d4cec42c3e13a5ba604df942bf8b4eef7cdae1c0e2970edb7ea6437618e6f8312a745ca8bbf0c42df103f42c824ab4e77e8b118e2b9a84568ed3d4aa3800011d02be29c032192719635a1c6c28315b27368f6ffe852bbd661c351cbfbf97b1b36d52371a4ce57e5eb6e4b13cd01b022de1770a5b1cab0fe548092a16e04de76fb8d29d69a1c55f8aa11b34bd6f018d283a9a7c0338b8c1900e21c0054616ade6b56d0fe3379f1a8dec38b85fa8e74e9bb5df4287d037f77bad30de89ea87b03d40c3a1618db1073c07032f6d22f8a264cbf0c1113689308a2fcd7299603a64f884cb03f8c5f0e61e4981d2baac3d50975cb917b815efe2f7eda88f1cef1f34997f0819a92051c1d9eac3ef05de25a2b4d5f65619b4ea377180c541f2afbfa5c8fdae59f8e3a7635d2b30c4c759c32e570b8d9ec03b4aab65503e81e545dd41f593615cfedcf009424ae4854de3a9111115cb254608bc2666b18c85698ac193a9799f1a1f6098288b42dd2684db37e0d3b023ac9b417263b1566acd6d951df147e83db8e909b39bb6a1aa3fcc1c1a20795521b84e0884254b2524ebf0321e5709e7a79f2d62309247b7b24ec71553a9ab9daccacac1a8bd6019b7703c0ed468379640ac6e764ededb2fefaa2f88e15fc97ec6f16007f540cd7a57c7726f4aa9ff6640cc7f5d71a6c12048f98a9071ffd594f17e42e7336ab6d0fd429328df1238e5eb4ebe4f9d8ef01fbcfe8f53eb3f6defd4c7cb40b3772ea2f2130b655d2ad3643977cafa991bbc6aa2aaa2879a3c2d1dace3ec034beb3d06f0a09429b3fd1ac06870dde4ab97b7d5d7ff1394577a6bea7a3a53ca883a16c98d574ddad00de5dfe9f75369be7686a4badf44f4d9b110846b6ffca67f63973186433f6bc3691b580cdc689c159064c55a974fb849f56fd2f9cbe4738e0a1a8a764467dc1d3723278ee1ea573fad98a5318104218d359d89579614592fa6ae7cc4720e6ed71706fdc4c707b03ff77454daf4505700f249aea0abc909763416d44a069a6d605118ac0c20a325577fe1d8af053673fc72e489d24405281f01b4e2e05e4fa14e68a53294e4b5d201c146ff994cfb7a776ad80828732ee647092c20fe46d917142880318136557c47ff7e31d26f35f407c1e6d4254aae442b233b89dd4c0adcfc92b0f821a5a9dce95a24bed9bb5cd17a5b59d3e82086cdd7a3755064e4de22d8f0f973f4235aa58c6214dab89325638d94d3dc25f3ac4d912ff74be6ad8ef49aa2becede5453a409cc8ed8065dacf28a1a7498f6dd07a3478af093574fdd2d0a4f98d12fe898e47cd0550f1fc42810ed2e4cfe5cc4faa67d965f252aab1bd5c536bf2c936706bc71aae98b93494d364faac72a9a60188a23f15ddf1238896e4848da876789b57ca53cd5b1041612a49de9a64a545a39375aa2a516c4af4744daf65a9c28ffb635ba56b96731b763934afa0651fd6fb65e9f71eb0e6fd54bcfd2bf0118b486e97db512290bdb1dcfca76ed974722e13e5acd0569d5f944de70adf728379094981ffaec43848367ec8cdcc227b266649ced47a03b22016ce42be3a33135229670244cc7b3325ee448c95236d0de4bbf641e1cbb0516edb3f8829e60f91d43f0fe45595d8a99e699252930c7b05ba2ba679f8f46c38f789a7750ffa4eaed19c4c1a33aff60c8926ae42497662a130b83b3211e9399e2565d9f082ec30e26e5b02ea91cf43b0a046f9fe596e5bb2a9c800d761008dc7fced2a510af6b02d3f702fc3e1a98c6a87661f0d353b81bc4435c0d4376cfc74c057bf23febb101252c4eb168d4e347e697c8d0c48a687fb2224d58e5dc68c38de930164aba51e7cb19051fe64603c6b602c02c5cc22c6da1c47d906fa1cbf67312658b201b8f89a377d61695daaeee18eb2fb8caf38280fa8b95cca721afdf33d2c3092af57204bca72c46aeae9e9fc46f0ce76b96bbbb59a8517cb72d68f8b189280b6ce1e2686204913bac1d9aecd77623b7f05475352e57f245197894d767e5f17611bbf1bfe2015c9750e9b3f5ad4ad57be1ac4988c30d90829946b05fc5bd709dbd2590da2e3666294f83336e52758bc12c9d02af342a91fdcfc9144021a783643a9845a4898ee03417329ee0e2dd7bd53f3b23f3f9a10ea643b91b3c2df8438efb22fc894bbcdc408a13dbded7002d9cef6e38bf6dfa16f52f0f24087281a3ae95fb4995131938f9ca80c5f466c7367665e5717c823b318f43e7a3e2e8fe9c2e74959ca3d53b79fa45ac778d0a99351a1919b1c9ddfda10d61487fc5a2b8227493b14e2ea9fa41db870deb1700eb46665424fbc3f21c5d7ad61089ad0f99aadcca2a97d46fd091cf21d95674c3cf48f2724a89299b5342ebf8b18770e61c449455f77cacc5b2e0123005cc296acfc28e42e3d3b426469e39def114d6071a3f015f94dd8eab597dc4cf6109f2aeba0639ffe3f66f15ddaa74460a884a5c067e1e6f8d961ff32518e7571d53ae36badcaca50258a15743e67fb35e062e697d44ccd4e416010dbe62a1d13319d3ce88dc7826514d0f84cf7ffd5f1dbdbe3534af35bba26c5f951e18b012234a3e1cd22199358ba66421a326af09d36d45c3497c4725c0e8557395376fa9dcbe4c595aef7f822cb160e72138cd610563c382769b64f5da2ae6f62cbf09d24490565d7b88f6fefc30f050e74327b7efc168f040f18110a61cc6ecf73c43c0e9e73fafcfc6079ee68839a8ed710160fdcfd987394a790e01c42c916169e8c6a7af905c15d51f87e88877386b8f8743efe4fffc2dc8fd73b4e8905b428d4cd87d90e93513f19a981b5037370cd634f23859cb7bd6b5632bd25c6873b7195691e0f76fb07fce6e72d4b2b467e57a325febf4bb842820fe6896b23aa2a3eb37697753a3693ee936692e6cd91eae410bf89192df913f2689adc73b7b35eaf8bf80928c0023b105cbd2be51a08a371be88926636bd590466c218b203fe311d73dd1a8b440133f1ebb8249b4e1f6723b7b18b508dc34acd9da927ea60d2dc361c2d14cd43ad3b0137ac32e8988d11d11de19065d02e8012a2ee24891541989d11da87de4383036b757769222af022e86803b64ccd03e4bfe3a9d3b8a5d6522d7b6ade88aca72bc436382cfcba22a426ecb21366d42588e9a68c0d61722617a4706852ef6e5eb42842d127f88dabcb8cd635d621a9082efe0cbb52fffb017c8cbf80e48ad1d8ac4c927bda50be7bbb6a302081951dd7c05142465ef8188774807ba482c155f7b56b663d24c4ad88140ddba388e4d6abda83048db46ad18328c63006d02844189a769167d94265148e06f3eca08dcd81691df655968de44c5931e62f5dcc4aa16b24ceb6e7a2c8783d9918a9be7c72dcd57fbf39f985ac29069241cbe3298d7651124f03bef8e2adcadb0c0e08efb096f72e5df2d3f8e2ea6f9cd2401533469e5099a6faa98acc2f73028eae115b3a771bc7ddd186ee7a634398e206ce9b1262b1dbb80575eac718eade048bc01ac1d410e21393dada6c1ced94c411fc19ccacdd175996501d66819b491fef65697f736ecc3a4c32f3675d1f90c8e4d44a1ba6048e77fa24d6998ad88da3cf5de223446d53dd72981c19d5915af69b9a7b9bdf35114ac1cee66b9f3f6df4b9a2d2c017d44443a28badca61b1e8db627d967827ebf32c8642b7de41508c15538b6cdf0284f1a94e8d9fcaa086236f11fb1689d57d500423a0c1d362a4fd57e5efa8858c237a0b58210b4df2b6f10fb01ff8b305cb69e65120c716970e1752cae51022a068b9ac2b7775ac415c56d31536c9f1eca654ec89d7ed00855b2d2564a74bf1a0a3b75cbeadad89fd4ce7e0a83a565c6d69077f026dd40ee186fb496d575c5f5d2f4f84e0efd6bca34f070b185903c7fcd6478f467b73687dee0b765477cc474cbe7f067d1f655efe1fac24a6cda9ed82dee343a36f5ce3894587937f31a14dff66e8384bb3c9adebb753f782570a894e09a38c096f523fbdfb7e0c09026fa023c8dc9e5822410d8343afd647a91130744017166a9b195996ee871eb284279fa725f7af7f853eb85bce100cfade5d458c4e166c839e4c1a86", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x9, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'L-', 0x7fffffffffffffff}, 0x16, 0x1) 5m10.654969264s ago: executing program 1 (id=271): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0xca, 0x7, 0x635, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x1, 0x8000, 0x8, 0xfffff4bf}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x41, 0x24, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x0, 0xfffa}, {0x5, 0x6}, {0x9, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x7}, @qdisc_kind_options=@q_rr={{}, {0x0, 0x2, {0xb1f, "a22edcd5f79e9f570dd696e2e58e034a"}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019003c000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000680)="480100001a000708ab0925040900070002ab0700a90100001d60369321001d000a800000000000000000000000039815fa2c1ec28656aaa79bb97438c5e42bbaa7af6263c0129968f14b46fe000000bc00030026000000140000270400117c22ebc205a70bf52426e4cef1ad87a9214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad", 0xf1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000002280)=0x10000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x1}) (async, rerun: 32) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) (async) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xb, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000090) 4m55.364261297s ago: executing program 32 (id=271): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0xca, 0x7, 0x635, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x1, 0x8000, 0x8, 0xfffff4bf}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x41, 0x24, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x0, 0xfffa}, {0x5, 0x6}, {0x9, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x7}, @qdisc_kind_options=@q_rr={{}, {0x0, 0x2, {0xb1f, "a22edcd5f79e9f570dd696e2e58e034a"}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019003c000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000680)="480100001a000708ab0925040900070002ab0700a90100001d60369321001d000a800000000000000000000000039815fa2c1ec28656aaa79bb97438c5e42bbaa7af6263c0129968f14b46fe000000bc00030026000000140000270400117c22ebc205a70bf52426e4cef1ad87a9214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad", 0xf1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000002280)=0x10000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x1}) (async, rerun: 32) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) (async) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xb, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000090) 3m55.309836771s ago: executing program 4 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x101]}, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000d92000/0x4000)=nil, 0x4000, 0x40000000) madvise(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x12) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) 3m49.136208703s ago: executing program 4 (id=365): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3671b04, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x101}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}}) 3m48.668808608s ago: executing program 4 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(0x0, 0x1ff, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x8, 0x1, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2866e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f000061ac00000000000000f500", "90be8b1c55f96400", [0x8a2, 0x1]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) 3m44.939069599s ago: executing program 4 (id=372): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@local}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "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"}) r0 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="103819000f14010027bd7000fcdbdfa10cd01cc06b44af428fb8c822b9e28f7961cac741afab6c1bacb7b7032e2a8e692472c62eb5ba01a2595219dd50b82152987347815ec51d96735f9c963d737bcaba6f01a9ba2cd67027f4886ca5466247023b73e36f"], 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) r4 = eventfd2(0x81, 0x124b5da1287eb991) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000300)={0x4, r4, 0x1}) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000040), &(0x7f0000000080)=0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = socket(0x2b, 0x80801, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000540), &(0x7f0000000580)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r8], 0x9) 3m39.844857226s ago: executing program 4 (id=382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, 0x0) 3m36.487022296s ago: executing program 4 (id=386): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x68000000) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) 3m20.900079496s ago: executing program 33 (id=386): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x68000000) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) 51.35986764s ago: executing program 6 (id=837): open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000540)="676fb1e5d747c954889f7e913270f25cf26eb256141f3218583694ba7b132dde6a6d683820e18d00d0c723f8ea2f883d51c2be23df456f24e6e5210c5f04cd2b798f794738284c922386e5775ad770e6156f527723a9011f19440aa21e10bbd817b71dcb275d0e0bfcfa049afe46e825d379dfbdaa3b552de50a15b3b5819087ac59f31a59e59810ac02eee768edb32a852604a7f5b18ebdf14648860f2f5d17cdba44c936bcc3ea606a564b4b109c3e15c0a90db6fb37f7871f7b02d38dd4251a0c6e2137f2232cbe6e1a834f9ab012631510ca5d4907c4a767a8b11e51c9d7644977a8a6f0e936198bd303b6fdf4bd8746095f885fcd37034842685b3a54f91bfc3c6d25ca117beb650438d82a30ea7704e89608c190e28813dd557d67598109259985e6b956f3c06c4f6001da8e0b9d74c42073bab554064df8989fb3ff9c63a8e8cd7b895fee1451fc18041958", &(0x7f00000000c0)=@udp6=r4, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 49.932873347s ago: executing program 6 (id=839): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r2, 0x8b32, &(0x7f0000000040)) (async) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 48.978552258s ago: executing program 6 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0xc0, &(0x7f00000000c0)=ANY=[@ANYBLOB='quota,grpquota']) (async) close(0xffffffffffffffff) (async) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 48.978008058s ago: executing program 6 (id=845): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x87, @dev={0xac, 0x14, 0x14, 0x31}, 0x4e20, 0x0, 'ovf\x00', 0x39, 0x9, 0x1f}, 0x2c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}], 0xa, "376cb1b36b1d025225b0ebd5f9f6751f1cbdb39ec194697bead759b8af7eab2135436eec7b64815abfb2901081ce0f9e1af08fc9c251ab830fd8c42fcde14829415d52de210f7ce4748bac567350c011a2873d46aa695e63c1d6db196884d7bf701a799424564f2cabd82f38132f407013"}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 48.818653814s ago: executing program 6 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x1, @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) timer_getoverrun(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) 47.041085711s ago: executing program 6 (id=856): syz_io_uring_setup(0xa57, &(0x7f0000000040)={0x0, 0xf95, 0x2000, 0x1, 0x3cc}, &(0x7f00000000c0), &(0x7f0000000240)) (async) syz_io_uring_setup(0xa57, &(0x7f0000000040)={0x0, 0xf95, 0x2000, 0x1, 0x3cc}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r2 = syz_io_uring_complete(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x2}}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x48280, 0x28) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xcc580) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xcc580) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x5, 0x7, 0x5, 0x5, 0x9, 0x6}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x40305828, 0x0) io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x10}) (async) r8 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x10}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x12, 0x20000019, 0x0) write$FUSE_WRITE(r7, 0x0, 0x0) (async) write$FUSE_WRITE(r7, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36]}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36]}}]}) 30.863150462s ago: executing program 34 (id=856): syz_io_uring_setup(0xa57, &(0x7f0000000040)={0x0, 0xf95, 0x2000, 0x1, 0x3cc}, &(0x7f00000000c0), &(0x7f0000000240)) (async) syz_io_uring_setup(0xa57, &(0x7f0000000040)={0x0, 0xf95, 0x2000, 0x1, 0x3cc}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r2 = syz_io_uring_complete(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x2}}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x48280, 0x28) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xcc580) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xcc580) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x5, 0x7, 0x5, 0x5, 0x9, 0x6}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x40305828, 0x0) io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x10}) (async) r8 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x10}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x12, 0x20000019, 0x0) write$FUSE_WRITE(r7, 0x0, 0x0) (async) write$FUSE_WRITE(r7, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36]}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36]}}]}) 22.023783374s ago: executing program 5 (id=954): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socket$kcm(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="3a03001218002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 21.186180339s ago: executing program 5 (id=956): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) syz_open_procfs$userns(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002400)=""/102400, 0x19000) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) creat(&(0x7f0000000000)='./file0\x00', 0xd1) r3 = openat(0xffffffffffffff9c, 0x0, 0x40140, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x0) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x8000}) r7 = eventfd(0x2) write$eventfd(r7, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) read$eventfd(r7, &(0x7f00000012c0), 0x8) socket(0xa, 0x3, 0xff) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 19.131196806s ago: executing program 5 (id=958): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000dc4009040000010300000009210900000122a0"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='a') 13.767751666s ago: executing program 5 (id=968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) mkdir(&(0x7f0000001040)='./file0\x00', 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 12.282184811s ago: executing program 5 (id=972): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='cifs.spnego\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3ff) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) write$binfmt_format(r1, &(0x7f0000000700)='1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) fspick(r2, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) 11.091228259s ago: executing program 0 (id=975): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRES8, @ANYRES8=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x8801) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xfb) close(r3) r4 = fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) read$FUSE(0xffffffffffffffff, &(0x7f000000a200)={0x2020}, 0xfffffe88) 10.941145933s ago: executing program 5 (id=976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockname$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="38001d70eec01bf5787dba44cec410000c14000129bd7000fcdbdf2500003d0002000000080008000000000008003d001600000008003d00030000000800014000000000"], 0xffb5}, 0x1, 0x0, 0x0, 0x80040}, 0x20004800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="0a0006"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0xa71b3742016f6be8) 10.874667371s ago: executing program 0 (id=978): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$video(0x0, 0x101, 0xab02) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0xffffffffffffffff, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0x10000], 0xffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000100)='limits\x00') setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "4ec97e01", "12772541f8eb02bb"}, 0x28) shutdown(r6, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r8, 0x0, 0xffdffffe) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0xf7, 0x8, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x20, 0x2e8e, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='k\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf250d0000006c000180140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=r9, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x0) 8.604537434s ago: executing program 0 (id=980): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x448800, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x1, 0x64, "b4101e564d4c13498c14552d07aaf53bc2abc40b1aa21ec02ec1dc9918af963131c28c02a8efbcd315374a51ea6512948bdd33d9cd21cb9a88fde86a17c990d36eb98c3b9cf1460e95e9fb3c1fc4b196ed28f597a20ffd1d53efba674877f62a9c1e2b40"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000440)={{r0}, {@void, @max}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000138bd7000fbdbdf250200000008000400070000001c000280060002004e200000080005007f00000008000400000100000800050049000000"], 0x40}, 0x1, 0x0, 0x0, 0x1001}, 0x4008014) 8.408551003s ago: executing program 7 (id=982): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x10002003) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f00000003c0)=""/91, 0x5b}], 0x2, &(0x7f0000000a00)=""/4096, 0x1000}, 0xf3f5}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/200, 0xc8}], 0x1, &(0x7f0000001a00)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000003ac0)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)=""/106, 0x6a}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/77, 0x4d}, {&(0x7f0000000880)=""/185, 0xb9}], 0x4, &(0x7f0000000940)=""/64, 0x40}, 0x80000001}], 0x3, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x138}, 0x4081) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) 8.352100699s ago: executing program 0 (id=983): syz_usb_connect(0x6, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x80, 0x30, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x7f, 0x4}, {0x6, 0x24, 0x1a, 0x7fff, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7d, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x8, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x0, 0x6}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0x10, 0x6, 0x10, 0x20, 0xf8}, 0x10c, &(0x7f0000000880)={0x5, 0xf, 0x10c, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x0, 0x2, 0x9, 0x4}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0xf, [0x3f, 0x30]}, @generic={0xd0, 0x10, 0x0, "b8f6d6b2c0f36b6e4831840b268c806e3fa14fa0e7a5ae403bee92bfb3d70db9a76658a07e12689e11730c3ee887d86976e87db27fe955664f71c1aa2c8bfb69eaa2b53771da138a816b5d260ad8adca62c439815864361a955a91b63cd3c210bcd0fa425700b7196e54b6b7de7ea5c4b23ddf5f81dc2456389a43e1aee7105d17b3d1122c77fa64761a373707504fb8aa3c16fd499cc63e6e1b4d3ede03fe479537a822309b527d520b32da12781e728fc3728b133b83aa8ecf6f50e0cfbf65ef38c5d3d0606983c1d1e126a5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xae, 0x0, 0xb7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x34, 0x2, 0x4, 0x3df, 0x4}]}, 0x3, [{0x6d, &(0x7f0000000640)=@string={0x6d, 0x3, "cae27f689c011226f80db53ad5a1c58a5c88970fb49e5573cd894d82da843774b7f14187a9bf0aa8a8cb1b556a6906109810d74f5363a7b822462fceba259414c40f0b9a330350df405bc365ab746238079e3df82f22588ba9d02984c27fb9a7a879edcefee06087c22d32"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1401}}, {0x32, &(0x7f0000000a00)=@string={0x32, 0x3, "19ebdc5579c141fe1c2e51b5f3f8e60ddd9ffd89ca5a7c677e0e94af7c35e02473b329c913a5a03dc64a73052ded9378"}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000800)={0x0, 0x4e292, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x4}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000500)=0xff, 0x0, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0}) syz_usb_connect$uac1(0x5, 0xdf, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x7f, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x6}, [@selector_unit={0x6, 0x24, 0x5, 0x6, 0x7f, "de"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0xa, "a664fd1f57"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xfffc, 0x2, 0x34, "a74fb139d5bd5970"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x10, 0x1e, '\x00\x00\x00\x00'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x8a, "0f63"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x87, 0x7f, 0x3b, {0x7, 0x25, 0x1, 0x102, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x4, 0x8, "bbf988"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xf4, 0x2, 0x2, 0x2, "ef4f8c"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x0, 0x3}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x6, 0x9, "ecd1bc2ff2"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf, 0x3, 0x3d, 0x91, "1ef310", "6692"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x3, 0x2, {0x7, 0x25, 0x1, 0x81, 0x6, 0x40}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x4, 0x2b, 0x9, 0x20, 0x6}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x88, 0x1, 0x6, 0xf0f, 0xb9b, [0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x7, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x84, 0x6, 0x9, 0x3}, @ptm_cap={0x3}]}, 0x2, [{0xcc, &(0x7f0000000700)=@string={0xcc, 0x3, "429772698f811b6020e1aca9b1f211598b98141a6897a10c0e76e23ee48a369adc8833d841c0e38a853a0feb453fa3c3a2fe299a5358c0fc259442fe8be69900bd9c9bffe779f8466349fb710be27ca59c001c07eeac5d162cc24c0cffcdc221df1edde9cb5e85744639326995a8da5c55300aefc608bf781dae227e9e1d68c1510cf68a091c04175ad8bfbcab536daf18a1a7aaa2e349a455fef95d60c285116807fa99b332cba8b189560d38fdd34f76e4e3c8102a35cf69681d33d68df628e1c5ef1bf744666b84dc"}}, {0xd0, &(0x7f0000000380)=@string={0xd0, 0x3, "af74fca4d52b698309a88b167078bd3d4e96e3303c13b5ff43e3dbb69bbddb8dd5fee8fdfcd476d0051587444b47175c112aa79476db027ad7069df15b79e190baea173fb093a0a01fd74a6941e39985f05bba53cf591e6824440f260d3c6d9d3775e8c78d003dc7f32752d8cc79d6b2cdd69e126dd12417a90488a1f87af6bf5d52a0ce53a459466877de6bade1a894a4c41d5953ca8cce1beb616332e8942e7ee1dbc38c38e724d8a497520b005186a3e8fca6b339942fc67de20c5e7327a9067374038773e9d2a35181472ff8"}}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x1000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r9, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv6_deladdr={0x50, 0x15, 0x400, 0x70bd28, 0x25dfdbfc, {0xa, 0x78, 0x10, 0xff, r9}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x82}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0xb16, 0xda, 0x2, 0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14000000}, 0x40080) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.446340129s ago: executing program 7 (id=985): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async) r1 = syz_io_uring_setup(0x1011, &(0x7f0000000000)={0x0, 0x141e, 0x2, 0x2, 0x149}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r2 = syz_open_dev$midi(&(0x7f0000000100), 0x45dd41f4, 0x42000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x7, 0xfffffffc, 0x1475}) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}}, 0x4048000) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (rerun: 32) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000040) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r2, r0, r0, r0, r4, r0, 0xffffffffffffffff], 0x7) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32) 7.393032296s ago: executing program 7 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006007272000008000800"], 0x54}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000955fa19fb444a9c82bb7ad14ab9627cd16c757f734ee9d6869f1d6eaaeb504f1ec829cc6adacf64a9b1b6914d121e08f6c4eaeb8b46548080c706971c924386180c89ab0b348b47c0aed89ed89bceabeb1ef74f508ecc5d3fd5288ecf6a02950ded0bdeca002950c775279c3d602587cc7569ff54dfbcb8737b1f6e046eee981f4edf9fa4660b6b0d541c9ab4687172effb931333f6a6e8f25733729e2c2367a85385ad9a46ecf856270a9bb4a560a4b231c2d7b7ceb840000000000", @ANYRES16=r1, @ANYBLOB="000229bd7000fbdbdf2505000000080004000900000008000500030000000c000280080009000700000008000400ff070000080004000000000008000600dc0000005c000380060007004e24000008000300040000000500080000000000080003000400000014000600200100000000000000000000000000010800010002000000140002007465616d5f736c6176655f300000000008000100020000000800050008000000"], 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @remote, 0x7}, 0x1) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0xb4, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc49}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) 7.153520466s ago: executing program 7 (id=988): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x20000000, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019240)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, 0x0, 0x80) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = dup(r6) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast1, 0x4e23, 0x7, 0x4e20, 0x8, 0x2, 0x20, 0xa0, 0xc}, {0x0, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0xe19}, {0x80, 0x4, 0x6, 0x9}, 0x6e2b, 0x6e6bb2, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d4, 0x32}, 0x2, @in=@multicast2, 0x3503, 0x3, 0x0, 0xd, 0xc, 0xffffffcf, 0x5}}, 0xe8) 6.946418296s ago: executing program 2 (id=989): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x100000}, 0x0) 5.272134267s ago: executing program 2 (id=992): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000100)=0x4) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYRES8=0x0]) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d0109005000118049003780d237a5562658dec4cf9e08a3b19be99e74ce70b4e220a9e627302801adb664d0a5f023189527c0db80dc95bf7fb4bfd92396de768f8b5d8e1c994b69895cdb44211156f2840000004d0012803b6f2811032d68bea0610f2044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71d2273b51a037"], 0xb4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 5.042613786s ago: executing program 2 (id=993): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d00"/90, 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3, 0x0, 0x0, 0x15}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0xd1, 0xf3, &(0x7f00000004c0)="ec6048b975d6c999f76bb0e924a0088c13af02552c0ff570431c72bdd229c10cc0ceb0a4ecff90e9309e93faf7e0cb785514a6f65afa6b785ba9e43131c6fa295fae67177de3db6d5e20f329428c7c100b44ce0353cce8623c936a2cf0acbe72a93d1016ed972cfb3456f8448ac326a3a076e146434cb67d7303b85f9f7887fb0a89b3b3112623a3f4f3a848b39191f18cc2f3d2f3ec982d55ddb73304f09c656663deb232d8237714800e18ddf08f36a4038c68ca3079cbb24495ebfd607d1c83f49c3090f955576212269e5d115e73b5", &(0x7f00000005c0)=""/243, 0x2, 0x0, 0x27, 0x3f, &(0x7f0000000080)="fcbfb324aa26e63f8a1a47b079a6a06681612e1f870e2c66c76b180575e53194a9d2c3ef4aa735", &(0x7f0000000380)="a498b1e731a78d27ba3eed3f4a5ce1d7a7219846d1400715828b4c2b6d95679266113c04e2dfbbc25d8f5759f1f4e6bc8a7ff6f8791e0c974aacdbe08392d8", 0x1, 0x0, 0x4}, 0x50) 4.351565509s ago: executing program 7 (id=995): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5df6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040022, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}, {}]}) 4.304945583s ago: executing program 0 (id=996): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5df6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040022, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x4}}, {}]}) 4.114263786s ago: executing program 3 (id=997): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e21, @empty}], 0x30) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000119c0), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000011b00)={0x0, 0x0, &(0x7f0000011ac0)={&(0x7f0000011a80)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40840) 3.957550221s ago: executing program 3 (id=998): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) getrlimit(0x6, &(0x7f0000000240)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)="c7", 0x1}], 0x1}}], 0x1, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) getpriority(0x2, r3) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000040000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006c7a7300"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="f000000010000100000000000000000020010000000000000000000000000002e000000200000000000000000000000000000000fffe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000008a000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000050000000000000a0000004000000000000000"], 0xf0}}, 0x40000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b"], 0x28}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@deltaction={0x17c, 0x31, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10006}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x56, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ea20636}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x71d}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff80}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) 3.807274683s ago: executing program 3 (id=999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/174) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) keyctl$chown(0x4, 0x0, 0xee00, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 3.51102584s ago: executing program 2 (id=1000): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xece0, 0x0, 0x2, 0xbfdfffdc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = msgget$private(0x0, 0x3d2) msgsnd(r6, &(0x7f0000000d80)=ANY=[@ANYBLOB="02"], 0xe1, 0x0) msgrcv(r6, 0xffffffffffffffff, 0x0, 0x0, 0x1800) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_format(r8, &(0x7f0000000800)='-1\x00', 0x3) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000003c80)=ANY=[@ANYBLOB="c4140000", @ANYRES16=r9, @ANYBLOB="000827bd7000fddbdf25080000005c020280080002000100008008000200030000002e0004009fbd4b458a1dc1ee0af32d4867ce8dc9beeeb17953aec8a2155856941604a45f9b397831073409f65efe0000000103801c00018004000300040003000d00020063626328736d34290000000024000180080001000900000008000100050000000d000200736b6369706865720000000004ff0180080001000800000008000100000800000900020040285c2e00000000040003000800010005000000080002005c7d7b0008000100f5000000060002002f0000000400030038000180040003000d00020063626328736d34290000000004000300080001000400000004000300080001000000000008000100040000003c0001800800010009000000040003000d000200736b636970686572000000000500020000000000070002002cbc00000a00020025235e152d0000008d00040086dc43c10a011b8e4e8fe0b759993e3b03ad61ae2ee3f9422c7397c14595f85cb25864470aced00dd8e0deb6915071c25030aeba0734008730acb784a82f30237193d87da4b899a76c5d3b932a52ef496c783266c2fad1bb1c3e3f7e7fb027e88dfd96637cbd622e1f290a6f3e0e2e09ab180370aec374fa77eaf1b70c5cb267d63f3becd2cb8c9e3e00000020000400faa8a3b5893d8837d5d1716358e53ec6a421ee6b49dfa5e237a2eccb5a000500c7d803473ba856d90982eb176829ecd478448215e7ab7dc80bd368330e5a5bc8e4bf5a8bf5dfd3e8b3d0f00ef74b80ba71da63633da947e892342b045474fcdc39cebd67d85af9fc2870d6c4a47154a570f40101bb8f00000800020005000000040001001400018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x14c4}, 0x1, 0x0, 0x0, 0x80}, 0x2404c801) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept4(r7, 0x0, 0x0, 0x800) 2.828482652s ago: executing program 3 (id=1001): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) syz_open_dev$vcsn(&(0x7f0000000080), 0x40, 0x2040) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x2000008b, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r6 = dup(r5) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r6, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) read$FUSE(r6, &(0x7f00000015c0)={0x2020}, 0x2020) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.862727728s ago: executing program 3 (id=1002): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) syz_open_dev$vcsn(&(0x7f0000000080), 0x40, 0x2040) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x2000008b, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r6 = dup(r5) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r6, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r7, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.113301875s ago: executing program 2 (id=1003): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="747282737465640e7400"], &(0x7f0000000300)=""/131, 0x83) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000a80)={0x3, @win={{0x5, 0xff, 0x6, 0x9}, 0x6, 0x16, &(0x7f0000000280)={{0x8000, 0x800, 0x8a34, 0x3}, &(0x7f0000000100)={{0x1, 0x815, 0x6, 0x1}, &(0x7f00000002c0)={{0x182f, 0x7, 0x5, 0x2}}}}, 0xb6ad, &(0x7f0000000580)="00e8517b4b3ac9d2d875d0f6f784f71446149a1f2cf3b72f8bd8423ff795f463c907ca58d81749976c66a398a0fd50a7eff90da0179734a2584e69c861cac165294491f314b6e59b20249a466f592353225f334eb4fc815caccd20272c4683ec502aeacb5562c883723d544599b3dc2339000000000000000000", 0xfa}}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000640)={@null, 0x7, 'geneve1\x00'}) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000037c0), 0x80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) chdir(&(0x7f0000000140)='./file1\x00') (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r10, 0x80000300, 0x0, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 875.91637ms ago: executing program 3 (id=1004): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setgroups(0x24, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) r2 = getpid() sched_setattr(r2, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r5, 0x401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 503.866763ms ago: executing program 2 (id=1005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2$9p(&(0x7f00000003c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x5417}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffca5, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000380)=@req3={0x7813, 0x1ff, 0x2, 0x81, 0xd28, 0x1, 0x1}, 0xf) recvmsg$unix(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r11, 0x1, 0x25, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r10, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x401}}}]}, 0x38}}, 0x1000c0c4) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xa, 0xf2ff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 360.692777ms ago: executing program 0 (id=1006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x560, 0x0, 0x3ff}]}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x11d, 0xf, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x2, 0x4, 0x1, '\x00', 0xfff}) socket$inet(0x2, 0x80000, 0xffffff3d) 0s ago: executing program 7 (id=1007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_setup(0x13, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x8b8e, 0x800, 0x803, 0x8}, &(0x7f0000000340), 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, 0x0, 0x0, 0xadc) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000000)="05004305", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r11}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) kernel console output (not intermixed with test programs): rs specified [ 337.105328][ T8364] [U] [ 337.108953][ T24] usb 1-1: USB disconnect, device number 34 [ 337.170050][ T5930] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 337.331448][ T5930] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.351924][ T5930] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.371419][ T5930] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.385766][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.451163][ T8435] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 337.478417][ T5930] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.033772][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 338.067313][ T8444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.081404][ T8444] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 338.094188][ T8448] netlink: 32 bytes leftover after parsing attributes in process `syz.2.558'. [ 338.121607][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.6.554'. [ 338.158290][ T8444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.180136][ T8444] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 338.227563][ T8444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 338.238914][ T8444] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 338.262966][ T8444] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 338.289757][ T8444] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 338.318444][ T8444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.332237][ T8444] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 338.410919][ T8455] netlink: 52 bytes leftover after parsing attributes in process `syz.2.559'. [ 338.421211][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 338.436160][ T8455] netlink: 52 bytes leftover after parsing attributes in process `syz.2.559'. [ 338.463233][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 338.476244][ T8455] netlink: 52 bytes leftover after parsing attributes in process `syz.2.559'. [ 338.633755][ T8455] netlink: 52 bytes leftover after parsing attributes in process `syz.2.559'. [ 338.837320][ T6018] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 338.911111][ T793] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 339.079918][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 339.284349][ T6018] usb 1-1: config 0 has an invalid interface number: 199 but max is 0 [ 339.296901][ T793] usb 4-1: config 32 has an invalid interface number: 85 but max is 0 [ 339.313078][ T6018] usb 1-1: config 0 has no interface number 0 [ 339.323857][ T793] usb 4-1: config 32 has no interface number 0 [ 339.337277][ T6018] usb 1-1: config 0 interface 199 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 339.359198][ T793] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.373267][ T6018] usb 1-1: config 0 interface 199 has no altsetting 0 [ 339.380805][ T793] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.395836][ T6018] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 339.406669][ T793] usb 4-1: config 32 interface 85 has no altsetting 0 [ 339.414253][ T6018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.426279][ T793] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 339.438994][ T6018] usb 1-1: config 0 descriptor?? [ 339.448613][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.460961][ T793] usb 4-1: Product: syz [ 339.466316][ T793] usb 4-1: Manufacturer: syz [ 339.471953][ T793] usb 4-1: SerialNumber: syz [ 339.700493][ T6018] usb 1-1: string descriptor 0 read error: -71 [ 339.708269][ T6018] cp210x 1-1:0.199: cp210x converter detected [ 339.719927][ T30] audit: type=1400 audit(1767530020.615:477): avc: denied { connect } for pid=8468 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 339.750912][ T6018] cp210x 1-1:0.199: failed to get vendor val 0x370b size 1: -71 [ 339.759345][ T6018] cp210x 1-1:0.199: querying part number failed [ 339.768282][ T6191] usb 7-1: USB disconnect, device number 3 [ 339.833491][ T6018] usb 1-1: cp210x converter now attached to ttyUSB0 [ 339.878907][ T6018] usb 1-1: USB disconnect, device number 35 [ 339.912872][ T6018] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 339.931701][ T30] audit: type=1400 audit(1767530020.835:478): avc: denied { ioctl } for pid=8472 comm="syz.2.566" path="socket:[21351]" dev="sockfs" ino=21351 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 339.964549][ T6018] cp210x 1-1:0.199: device disconnected [ 340.116608][ T793] appletouch 4-1:32.85: Failed to request geyser raw mode [ 340.160508][ T793] appletouch 4-1:32.85: probe with driver appletouch failed with error -5 [ 340.175341][ T793] usb 4-1: USB disconnect, device number 16 [ 340.310439][ T4766] Bluetooth: Error in BCSP hdr checksum [ 340.598681][ T3747] Bluetooth: Error in BCSP hdr checksum [ 340.720732][ T30] audit: type=1400 audit(1767530021.615:479): avc: denied { set_context_mgr } for pid=8497 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 340.850271][ T1158] Bluetooth: Error in BCSP hdr checksum [ 341.765690][ T202] Bluetooth: Error in BCSP hdr checksum [ 342.080198][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 342.281737][ T50] Bluetooth: Error in BCSP hdr checksum [ 342.404104][ T2955] Bluetooth: Error in BCSP hdr checksum [ 342.540086][ T793] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 342.650803][ T65] Bluetooth: Error in BCSP hdr checksum [ 342.840294][ T793] usb 3-1: Using ep0 maxpacket: 16 [ 342.852416][ T793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.869858][ T793] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.912297][ T8147] Bluetooth: Error in BCSP hdr checksum [ 343.359967][ T793] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 343.369941][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.373537][ T4110] Bluetooth: Error in BCSP hdr checksum [ 343.392499][ T793] usb 3-1: config 0 descriptor?? [ 343.440049][ T4110] Bluetooth: Error in BCSP hdr checksum [ 343.575846][ T8545] __nla_validate_parse: 9 callbacks suppressed [ 343.575862][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.583'. [ 343.603863][ T30] audit: type=1400 audit(1767530024.505:480): avc: denied { ioctl } for pid=8547 comm="syz.6.584" path="socket:[21697]" dev="sockfs" ino=21697 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 343.639256][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.665864][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.679135][ T30] audit: type=1400 audit(1767530024.545:481): avc: denied { bind } for pid=8547 comm="syz.6.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 343.710608][ T8519] usb 3-1: USB disconnect, device number 14 [ 343.752342][ T30] audit: type=1400 audit(1767530024.655:482): avc: denied { load_policy } for pid=8556 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 343.752640][ T8557] SELinux: policydb string length 0 does not match expected length 8 [ 343.787209][ T8557] SELinux: failed to load policy [ 343.789616][ T8558] 9p: Bad value for 'rfdno' [ 344.047129][ T6018] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 344.055640][ T793] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 344.569857][ T6018] usb 4-1: Using ep0 maxpacket: 8 [ 344.576887][ T6018] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 344.587942][ T6018] usb 4-1: config 167 has an invalid descriptor of length 0, skipping remainder of the config [ 344.605450][ T6018] usb 4-1: config 167 has 0 interfaces, different from the descriptor's value: 202 [ 344.624145][ T6018] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 344.635514][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.649503][ T6018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.669897][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 344.681968][ T6018] usb 4-1: Product: syz [ 344.686576][ T6018] usb 4-1: Manufacturer: syz [ 344.691726][ T6018] usb 4-1: SerialNumber: syz [ 344.696878][ T793] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 344.709624][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.729752][ T793] usb 7-1: config 0 descriptor?? [ 344.931909][ T8577] kvm: kvm [8576]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 345.140277][ T8519] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 345.478157][ T793] ath6kl: Failed to submit usb control message: -71 [ 345.496381][ T793] ath6kl: unable to send the bmi data to the device: -71 [ 345.511171][ T793] ath6kl: Unable to send get target info: -71 [ 345.546642][ T793] ath6kl: Failed to init ath6kl core: -71 [ 345.570694][ T793] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 345.645846][ T793] usb 7-1: USB disconnect, device number 4 [ 345.695397][ T30] audit: type=1326 audit(1767530026.595:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.2.594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87bf38f749 code=0x0 [ 345.779780][ T6018] usb 4-1: USB disconnect, device number 17 [ 346.938023][ T8624] SELinux: security_context_str_to_sid () failed with errno=-22 [ 346.981317][ T30] audit: type=1400 audit(1767530027.875:484): avc: denied { shutdown } for pid=8623 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.018215][ T30] audit: type=1400 audit(1767530027.885:485): avc: denied { read } for pid=8623 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.069930][ T8519] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 347.240975][ T8519] usb 3-1: Using ep0 maxpacket: 8 [ 347.258407][ T8519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.277653][ T8519] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 347.290921][ T8519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.305410][ T8519] usb 3-1: config 0 descriptor?? [ 348.126966][ T8645] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 348.202798][ T8519] usbhid 3-1:0.0: can't add hid device: -71 [ 348.212448][ T8519] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 348.230362][ T8519] usb 3-1: USB disconnect, device number 15 [ 348.300071][ T5885] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 348.453568][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 348.466853][ T5885] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 348.506346][ T5885] usb 7-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 348.538692][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.553631][ T5885] usb 7-1: Product: syz [ 348.558271][ T5885] usb 7-1: Manufacturer: syz [ 348.564328][ T5885] usb 7-1: SerialNumber: syz [ 348.572796][ T5885] usb 7-1: config 0 descriptor?? [ 348.580818][ T5885] usb 7-1: bad CDC descriptors [ 348.634878][ T30] audit: type=1400 audit(1767530029.535:486): avc: denied { map } for pid=8651 comm="syz.0.613" path="socket:[21931]" dev="sockfs" ino=21931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 348.666429][ T30] audit: type=1400 audit(1767530029.535:487): avc: denied { accept } for pid=8651 comm="syz.0.613" path="socket:[21931]" dev="sockfs" ino=21931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 348.768851][ T8654] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 348.778796][ T8654] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 348.834249][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.851570][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.869253][ T8656] netlink: 35 bytes leftover after parsing attributes in process `syz.0.613'. [ 349.116235][ T5943] usb 7-1: USB disconnect, device number 5 [ 349.206713][ T30] audit: type=1400 audit(1767530030.105:488): avc: denied { ioctl } for pid=8664 comm="syz.6.616" path="socket:[21943]" dev="sockfs" ino=21943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.240073][ T6018] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 349.308252][ T30] audit: type=1400 audit(1767530030.105:489): avc: denied { map } for pid=8664 comm="syz.6.616" path="socket:[21943]" dev="sockfs" ino=21943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.375986][ T8668] ocfs2: Bad value for 'barrier' [ 349.397013][ T8675] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 349.428802][ T8675] CIFS mount error: No usable UNC path provided in device string! [ 349.428802][ T8675] [ 349.440109][ T8675] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 349.539876][ T6018] usb 1-1: Using ep0 maxpacket: 32 [ 349.649247][ T30] audit: type=1400 audit(1767530030.105:490): avc: denied { accept } for pid=8664 comm="syz.6.616" path="socket:[21943]" dev="sockfs" ino=21943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.785459][ T30] audit: type=1400 audit(1767530030.195:491): avc: denied { bind } for pid=8671 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.808809][ T6018] usb 1-1: config 250 has an invalid interface number: 106 but max is 2 [ 349.819833][ T6018] usb 1-1: config 250 has an invalid interface number: 82 but max is 2 [ 349.829352][ T6018] usb 1-1: config 250 has an invalid descriptor of length 36, skipping remainder of the config [ 349.899863][ T5885] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 349.930242][ T6018] usb 1-1: config 250 has 2 interfaces, different from the descriptor's value: 3 [ 349.948792][ T6018] usb 1-1: config 250 has no interface number 0 [ 349.956142][ T6018] usb 1-1: config 250 has no interface number 1 [ 350.090175][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 350.118043][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 350.127220][ T5885] usb 7-1: can't read configurations, error -61 [ 350.269919][ T5885] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 350.279478][ T6018] usb 1-1: config 250 interface 106 altsetting 4 bulk endpoint 0xA has invalid maxpacket 1024 [ 350.395016][ T6018] usb 1-1: config 250 interface 106 has no altsetting 0 [ 350.429504][ T6018] usb 1-1: config 250 interface 82 has no altsetting 0 [ 350.440085][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 350.459179][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 350.469853][ T5885] usb 7-1: can't read configurations, error -61 [ 350.477597][ T5885] usb usb7-port1: attempt power cycle [ 350.723252][ T6018] usb 1-1: New USB device found, idVendor=1630, idProduct=0005, bcdDevice=59.0c [ 350.778558][ T6018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.820893][ T6018] usb 1-1: Product: ࠝ [ 350.825536][ T6018] usb 1-1: Manufacturer: 톁溤椼秡ድ磷ꎦ燎ᶨ甶캸홖ꧢ엲鍦틽ꃈᩈꎾ [ 350.836150][ T6018] usb 1-1: SerialNumber: 쿳軋鞑⿠까퐠提ㆀꌽ朎쪋뙟껃獱䵈検뎚Ⓖﭿ孭詎꥓䷴멫၄薁쐊챖 [ 350.852172][ T5885] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 350.868195][ T8654] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.910363][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 350.921159][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 350.932079][ T5885] usb 7-1: can't read configurations, error -61 [ 351.069885][ T5885] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 351.082476][ T8653] netlink: 76 bytes leftover after parsing attributes in process `syz.0.613'. [ 351.132842][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 351.141983][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 351.153375][ T5885] usb 7-1: can't read configurations, error -61 [ 351.164169][ T5885] usb usb7-port1: unable to enumerate USB device [ 351.192823][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.626'. [ 351.278133][ T8705] binder: 8704:8705 ioctl c0306201 2000000001c0 returned -14 [ 351.283743][ T30] audit: type=1400 audit(1767530032.175:492): avc: denied { connect } for pid=8704 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 351.311203][ T30] audit: type=1400 audit(1767530032.175:493): avc: denied { read } for pid=8704 comm="syz.5.627" laddr=fe80::b847:11ff:fe41:17a8 lport=49594 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 351.339698][ T30] audit: type=1400 audit(1767530032.175:494): avc: denied { map } for pid=8704 comm="syz.5.627" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 351.366351][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 351.397957][ T30] audit: type=1400 audit(1767530032.175:495): avc: denied { execute } for pid=8704 comm="syz.5.627" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 351.539892][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 351.547052][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.601689][ T9] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 351.614662][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.634266][ T9] usb 4-1: config 0 descriptor?? [ 352.231977][ T6018] usb 1-1: USB disconnect, device number 36 [ 352.327511][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 352.337076][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 352.361407][ T9] usb 4-1: USB disconnect, device number 18 [ 352.898577][ T30] audit: type=1400 audit(1767530033.795:496): avc: denied { listen } for pid=8723 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 352.956107][ T30] audit: type=1400 audit(1767530033.795:497): avc: denied { accept } for pid=8723 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 352.981868][ T30] audit: type=1400 audit(1767530033.835:498): avc: denied { append } for pid=8732 comm="syz.6.638" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 353.029935][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 353.179911][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 353.188458][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.198205][ T9] usb 1-1: config 8 has an invalid interface number: 163 but max is 0 [ 353.207627][ T9] usb 1-1: config 8 has no interface number 0 [ 353.214602][ T9] usb 1-1: config 8 interface 163 has no altsetting 0 [ 353.224502][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=72.33 [ 353.234913][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.243821][ T9] usb 1-1: Product: syz [ 353.248462][ T9] usb 1-1: Manufacturer: syz [ 353.253621][ T9] usb 1-1: SerialNumber: syz [ 353.291206][ T30] audit: type=1400 audit(1767530034.195:499): avc: denied { listen } for pid=8737 comm="syz.3.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 353.314241][ T8739] sd 0:0:1:0: device reset [ 353.321027][ T30] audit: type=1326 audit(1767530034.225:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8737 comm="syz.3.639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fb578f749 code=0x0 [ 353.478655][ T9] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 353.488810][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 353.496156][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 353.507565][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 353.513951][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 353.528128][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.584538][ T9] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 353.595430][ T9] usb 1-1: media controller created [ 353.615746][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.637019][ T9] ttusb2: set interface to alts=3 failed [ 353.971338][ T9] DVB: Unable to find symbol tda10086_attach() [ 353.978548][ T9] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 354.061841][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 354.068153][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 354.110001][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 354.126501][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 354.175999][ T9] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 354.391355][ T9] usb 1-1: USB disconnect, device number 37 [ 355.275505][ T30] audit: type=1400 audit(1767530036.065:501): avc: denied { name_bind } for pid=8747 comm="syz.2.643" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 355.518088][ T9] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 355.836331][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 355.979989][ T9] usb 1-1: device descriptor read/64, error -71 [ 356.229896][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 356.394684][ T9] usb 1-1: device descriptor read/64, error -71 [ 357.369494][ T8802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8802 comm=syz.2.654 [ 357.390076][ T9] usb usb1-port1: attempt power cycle [ 357.884587][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 357.884603][ T30] audit: type=1400 audit(1767530038.785:504): avc: denied { sys_module } for pid=8805 comm="syz.5.660" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 358.348188][ T30] audit: type=1400 audit(1767530039.245:505): avc: denied { getopt } for pid=8829 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 358.585064][ T8841] affs: No valid root block on device nullb0 [ 358.628400][ T30] audit: type=1400 audit(1767530039.525:506): avc: denied { create } for pid=8837 comm="syz.6.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 358.718710][ T30] audit: type=1400 audit(1767530039.555:507): avc: denied { write } for pid=8837 comm="syz.6.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 358.749966][ T5885] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 358.929840][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 359.061691][ T5885] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 359.082659][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.124613][ T5885] usb 3-1: config 0 descriptor?? [ 359.342172][ T5885] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 359.376621][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.415621][ T5885] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 359.447721][ T5885] usb 3-1: media controller created [ 359.511074][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.596356][ T5885] az6027: usb out operation failed. (-71) [ 359.650656][ T30] audit: type=1400 audit(1767530040.555:508): avc: denied { listen } for pid=8852 comm="syz.5.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 359.704628][ T30] audit: type=1400 audit(1767530040.555:509): avc: denied { accept } for pid=8852 comm="syz.5.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 359.851761][ T5885] az6027: usb out operation failed. (-71) [ 359.858053][ T5885] stb0899_attach: Driver disabled by Kconfig [ 360.157122][ T5885] az6027: no front-end attached [ 360.157122][ T5885] [ 360.638347][ T8866] Can't find a SQUASHFS superblock on nullb0 [ 360.656109][ T5885] az6027: usb out operation failed. (-71) [ 360.662446][ T5885] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 360.734609][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 360.792240][ T5885] dvb-usb: schedule remote query interval to 400 msecs. [ 360.905821][ T5885] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 361.419856][ T5885] usb 3-1: USB disconnect, device number 16 [ 361.459586][ T7926] udevd[7926]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 361.669959][ T7926] udevd[7926]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 362.005892][ T5885] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 362.069854][ T8519] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 362.091551][ T8888] xt_cgroup: path and classid specified [ 362.314789][ T8519] usb 4-1: Using ep0 maxpacket: 8 [ 362.375880][ T8519] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 362.396215][ T8519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.511584][ T8519] pvrusb2: Hardware description: Terratec Grabster AV400 [ 362.529670][ T8519] pvrusb2: ********** [ 362.552062][ T8519] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 362.572149][ T8519] pvrusb2: Important functionality might not be entirely working. [ 362.621493][ T8519] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 362.659275][ T8519] pvrusb2: ********** [ 362.710263][ T2329] pvrusb2: Invalid write control endpoint [ 362.785890][ T2329] pvrusb2: Invalid write control endpoint [ 362.801736][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 362.827409][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 362.848201][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 362.883482][ T2329] pvrusb2: Device being rendered inoperable [ 362.903745][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 363.031457][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 363.040412][ T2329] pvrusb2: Attached sub-driver cx25840 [ 363.046397][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 363.063893][ T8879] pvrusb2: Attempted to execute control transfer when device not ok [ 363.099192][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 363.382480][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 363.510865][ T30] audit: type=1400 audit(1767530044.305:510): avc: denied { accept } for pid=8901 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 364.300062][ T30] audit: type=1400 audit(1767530045.165:511): avc: denied { mounton } for pid=8908 comm="syz.5.687" path=2F33382F66696C6530202864656C6574656429 dev="proc" ino=4026534057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 364.649902][ T5923] usb 4-1: USB disconnect, device number 19 [ 364.661284][ T8917] netlink: 'syz.6.688': attribute type 10 has an invalid length. [ 364.670537][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.678740][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.692997][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.700815][ T8917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.708923][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.716743][ T8917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.879324][ T30] audit: type=1400 audit(1767530045.775:512): avc: denied { unmount } for pid=7807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 364.904103][ T8917] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 366.329594][ T8945] netlink: 96 bytes leftover after parsing attributes in process `syz.3.697'. [ 366.339680][ T8947] netlink: 96 bytes leftover after parsing attributes in process `syz.3.697'. [ 366.487247][ T8952] syzkaller0: entered promiscuous mode [ 366.496173][ T8952] syzkaller0: entered allmulticast mode [ 367.120181][ T6017] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 367.280262][ T6017] usb 7-1: device descriptor read/64, error -71 [ 367.651677][ T6017] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 367.793589][ T6017] usb 7-1: device descriptor read/64, error -71 [ 368.127622][ T6017] usb usb7-port1: attempt power cycle [ 368.142647][ T8986] netlink: 35 bytes leftover after parsing attributes in process `syz.2.709'. [ 368.169909][ T6018] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 368.341953][ T6018] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.357481][ T6018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 368.370866][ T6018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 368.383323][ T6018] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.397758][ T6018] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.430063][ T6018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.458291][ T6018] usb 4-1: config 0 descriptor?? [ 368.476994][ T8981] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 368.490842][ T6017] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 368.518032][ T8147] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.533134][ T6017] usb 7-1: device descriptor read/8, error -71 [ 368.877592][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 369.002651][ T6017] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 369.183746][ T6017] usb 7-1: device descriptor read/8, error -71 [ 369.339522][ T6017] usb usb7-port1: unable to enumerate USB device [ 369.403223][ T8147] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.578493][ T8147] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.613861][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.624956][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.633656][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.642762][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.642969][ T8147] batman_adv: batadv0: Removing interface: netdevsim0 [ 369.651959][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.672917][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.681052][ T8147] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.695616][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.703615][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.716909][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.726080][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.799893][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 369.960380][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 369.971718][ T5923] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.987094][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 370.005369][ T5923] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 370.015651][ T8147] bridge_slave_1: left allmulticast mode [ 370.022249][ T8147] bridge_slave_1: left promiscuous mode [ 370.028539][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.037133][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.050921][ T8147] bridge_slave_0: left allmulticast mode [ 370.059354][ T5923] usb 3-1: config 0 descriptor?? [ 370.067706][ T8147] bridge_slave_0: left promiscuous mode [ 370.078633][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.121090][ T6018] usbhid 4-1:0.0: can't add hid device: -71 [ 371.132531][ T5923] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 371.163170][ T9032] tipc: Can't bind to reserved service type 2 [ 371.179880][ T6018] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 371.217663][ T6018] usb 4-1: USB disconnect, device number 20 [ 371.282701][ T8519] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 371.450669][ T9041] netlink: 'syz.3.719': attribute type 10 has an invalid length. [ 371.586084][ T8519] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 371.637420][ T8519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.718216][ T8147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.718310][ T8519] usb 1-1: config 0 descriptor?? [ 371.737039][ T8147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.751737][ T8147] bond0 (unregistering): Released all slaves [ 371.783488][ T52] Bluetooth: hci0: command tx timeout [ 372.019995][ T9005] chnl_net:caif_netlink_parms(): no params data found [ 372.483546][ T8147] hsr_slave_0: left promiscuous mode [ 372.517211][ T8147] hsr_slave_1: left promiscuous mode [ 372.537064][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.574264][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.612267][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.630934][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.685969][ T8147] veth1_macvtap: left promiscuous mode [ 372.705703][ T8147] veth0_macvtap: left promiscuous mode [ 372.712121][ T8147] veth1_vlan: left promiscuous mode [ 372.728056][ T8147] veth0_vlan: left promiscuous mode [ 373.066193][ T793] usb 3-1: USB disconnect, device number 17 [ 373.385517][ T8147] team0 (unregistering): Port device team_slave_1 removed [ 373.416361][ T8147] team0 (unregistering): Port device team_slave_0 removed [ 373.532643][ T8519] usbhid 1-1:0.0: can't add hid device: -71 [ 373.542543][ T8519] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 373.554633][ T8519] usb 1-1: USB disconnect, device number 41 [ 373.849897][ T52] Bluetooth: hci0: command tx timeout [ 374.210965][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.254652][ T9005] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.290666][ T9005] bridge_slave_0: entered allmulticast mode [ 374.318431][ T9005] bridge_slave_0: entered promiscuous mode [ 374.334165][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.352277][ T9005] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.371604][ T9005] bridge_slave_1: entered allmulticast mode [ 374.382852][ T9005] bridge_slave_1: entered promiscuous mode [ 374.390807][ T9097] xt_socket: unknown flags 0x4 [ 374.491282][ T9100] netlink: 'syz.6.727': attribute type 1 has an invalid length. [ 374.500301][ T9100] netlink: 480 bytes leftover after parsing attributes in process `syz.6.727'. [ 374.526671][ T9100] loop5: detected capacity change from 0 to 7 [ 374.546421][ T9100] Dev loop5: unable to read RDB block 7 [ 374.553853][ T9100] loop5: unable to read partition table [ 374.607441][ T9100] loop5: partition table beyond EOD, truncated [ 374.615975][ T9100] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 374.736527][ T9005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.789358][ T9005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.834849][ T793] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 374.870112][ T24] IPVS: starting estimator thread 0... [ 374.896225][ T9005] team0: Port device team_slave_0 added [ 374.906221][ T9005] team0: Port device team_slave_1 added [ 374.983700][ T9107] IPVS: using max 50 ests per chain, 120000 per kthread [ 375.033697][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 375.041451][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.049058][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.055939][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.121270][ T793] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 375.142481][ T9005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.144932][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.311788][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.324818][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.835868][ T793] usb 4-1: config 0 descriptor?? [ 375.868251][ T9005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.920478][ T52] Bluetooth: hci0: command tx timeout [ 376.091262][ T9005] hsr_slave_0: entered promiscuous mode [ 376.121189][ T9005] hsr_slave_1: entered promiscuous mode [ 376.542947][ T793] usbhid 4-1:0.0: can't add hid device: -71 [ 376.553287][ T793] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 376.579194][ T793] usb 4-1: USB disconnect, device number 21 [ 377.116099][ T9150] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 377.123277][ T9150] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 377.167079][ T9150] vhci_hcd vhci_hcd.0: Device attached [ 377.188465][ T9005] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 377.236332][ T9005] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 377.272998][ T9005] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 377.400059][ T793] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 377.430330][ T9153] vhci_hcd: connection closed [ 377.434313][ T65] vhci_hcd vhci_hcd.0: stop threads [ 377.439241][ T9005] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.463820][ T65] vhci_hcd vhci_hcd.0: release socket [ 377.482447][ T65] vhci_hcd vhci_hcd.0: disconnect device [ 378.000069][ T52] Bluetooth: hci0: command tx timeout [ 378.043585][ T9005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.085507][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.092484][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.195741][ T9005] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.263077][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.270911][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.378854][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.386699][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.690095][ T5923] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 378.702927][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 379.259860][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 379.270160][ T5923] usb 3-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 379.409934][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.706371][ T9207] netlink: 'syz.3.743': attribute type 3 has an invalid length. [ 379.877129][ T5923] usb 3-1: config 0 descriptor?? [ 379.917644][ T9214] FAULT_INJECTION: forcing a failure. [ 379.917644][ T9214] name failslab, interval 1, probability 0, space 0, times 0 [ 379.942258][ T9214] CPU: 1 UID: 0 PID: 9214 Comm: syz.0.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.942285][ T9214] Tainted: [L]=SOFTLOCKUP [ 379.942291][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 379.942300][ T9214] Call Trace: [ 379.942305][ T9214] [ 379.942312][ T9214] dump_stack_lvl+0x16c/0x1f0 [ 379.942337][ T9214] should_fail_ex+0x512/0x640 [ 379.942362][ T9214] ? __kmalloc_cache_noprof+0x5f/0x800 [ 379.942393][ T9214] should_failslab+0xc2/0x120 [ 379.942416][ T9214] __kmalloc_cache_noprof+0x80/0x800 [ 379.942444][ T9214] ? ovs_nla_get_identifier+0x81/0xf0 [ 379.942474][ T9214] ? ovs_nla_get_identifier+0x81/0xf0 [ 379.942499][ T9214] ovs_nla_get_identifier+0x81/0xf0 [ 379.942525][ T9214] ovs_flow_cmd_new+0x3ff/0xe30 [ 379.942549][ T9214] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 379.942566][ T9214] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 379.942594][ T9214] ? genl_rcv_msg+0x55c/0x800 [ 379.942616][ T9214] ? netlink_rcv_skb+0x158/0x420 [ 379.942635][ T9214] ? genl_rcv+0x28/0x40 [ 379.942657][ T9214] ? ___sys_sendmsg+0x134/0x1d0 [ 379.942673][ T9214] ? __sys_sendmsg+0x16d/0x220 [ 379.942687][ T9214] ? do_syscall_64+0xcd/0xf80 [ 379.942708][ T9214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.942768][ T9214] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 379.942794][ T9214] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 379.942824][ T9214] genl_family_rcv_msg_doit+0x209/0x2f0 [ 379.942851][ T9214] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 379.942885][ T9214] ? bpf_lsm_capable+0x9/0x10 [ 379.942904][ T9214] ? security_capable+0x7e/0x260 [ 379.942925][ T9214] ? ns_capable+0xd7/0x110 [ 379.942952][ T9214] genl_rcv_msg+0x55c/0x800 [ 379.942978][ T9214] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.943004][ T9214] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 379.943033][ T9214] netlink_rcv_skb+0x158/0x420 [ 379.943055][ T9214] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.943081][ T9214] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.943122][ T9214] ? netlink_deliver_tap+0x1ae/0xd30 [ 379.943147][ T9214] genl_rcv+0x28/0x40 [ 379.943168][ T9214] netlink_unicast+0x5aa/0x870 [ 379.943193][ T9214] ? __pfx_netlink_unicast+0x10/0x10 [ 379.943225][ T9214] netlink_sendmsg+0x8c8/0xdd0 [ 379.943251][ T9214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.943283][ T9214] ____sys_sendmsg+0xa5d/0xc30 [ 379.943308][ T9214] ? copy_msghdr_from_user+0x10a/0x160 [ 379.943326][ T9214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.943360][ T9214] ___sys_sendmsg+0x134/0x1d0 [ 379.943380][ T9214] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.943430][ T9214] __sys_sendmsg+0x16d/0x220 [ 379.943449][ T9214] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.943484][ T9214] do_syscall_64+0xcd/0xf80 [ 379.943508][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.943526][ T9214] RIP: 0033:0x7f6e2d18f749 [ 379.943540][ T9214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.943557][ T9214] RSP: 002b:00007f6e2e041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.943575][ T9214] RAX: ffffffffffffffda RBX: 00007f6e2d3e5fa0 RCX: 00007f6e2d18f749 [ 379.943587][ T9214] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 379.943598][ T9214] RBP: 00007f6e2e041090 R08: 0000000000000000 R09: 0000000000000000 [ 379.943608][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 379.943618][ T9214] R13: 00007f6e2d3e6038 R14: 00007f6e2d3e5fa0 R15: 00007ffc468a07d8 [ 379.943642][ T9214] [ 379.986156][ T9005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.009874][ T5878] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 380.419864][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 380.590154][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 380.604573][ T5878] usb 4-1: device descriptor read/64, error -71 [ 380.615322][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.624846][ T9005] veth0_vlan: entered promiscuous mode [ 380.635428][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.638806][ T9005] veth1_vlan: entered promiscuous mode [ 380.667391][ T24] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 380.689329][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.700431][ T9005] veth0_macvtap: entered promiscuous mode [ 380.738066][ T24] usb 7-1: config 0 descriptor?? [ 380.747645][ T9005] veth1_macvtap: entered promiscuous mode [ 380.820638][ T9005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.851321][ T9005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.859304][ T5878] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 380.913522][ T4228] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.935177][ T4228] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.948810][ T4228] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.994338][ T4228] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.005377][ T5923] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 381.022266][ T5923] usb 3-1: USB disconnect, device number 18 [ 381.022630][ T5878] usb 4-1: device descriptor read/64, error -71 [ 381.121521][ T387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.140965][ T387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.161517][ T5878] usb usb4-port1: attempt power cycle [ 381.175482][ T387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.187280][ T24] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 381.205537][ T387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.214709][ T24] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 381.234437][ T24] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 381.251031][ T24] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 381.265950][ T24] saitek 0003:06A3:0621.000A: unknown main item tag 0x0 [ 381.282046][ T24] saitek 0003:06A3:0621.000A: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.6-1/input0 [ 381.388470][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.6.744'. [ 381.533215][ T5878] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 381.863790][ T5878] usb 4-1: device descriptor read/8, error -71 [ 381.904102][ T6017] usb 7-1: USB disconnect, device number 14 [ 382.150493][ T5878] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 382.242987][ T5923] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 382.327317][ T9277] netlink: 'syz.6.750': attribute type 10 has an invalid length. [ 382.338780][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.346674][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.358752][ T5878] usb 4-1: device descriptor read/8, error -71 [ 382.448033][ T5923] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.467759][ T5923] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.480363][ T5878] usb usb4-port1: unable to enumerate USB device [ 382.562099][ T793] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 382.949482][ T30] audit: type=1326 audit(1767530063.605:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 383.088302][ T5923] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 383.178442][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.193957][ T30] audit: type=1326 audit(1767530063.605:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 383.249360][ T9267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 383.322612][ T5923] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.340833][ T30] audit: type=1326 audit(1767530063.615:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 383.442044][ T30] audit: type=1326 audit(1767530063.615:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 383.850797][ T6018] usb 6-1: USB disconnect, device number 4 [ 384.118757][ T30] audit: type=1326 audit(1767530063.615:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 384.178216][ T30] audit: type=1326 audit(1767530063.615:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 384.347322][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 384.408386][ T30] audit: type=1326 audit(1767530063.685:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 384.496247][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.754'. [ 384.612137][ T30] audit: type=1326 audit(1767530063.685:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 384.673621][ T30] audit: type=1326 audit(1767530063.795:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 384.736715][ T30] audit: type=1326 audit(1767530063.915:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 386.139867][ T5878] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 386.161215][ T6018] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 386.299842][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 386.305735][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 386.321282][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.345680][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.378988][ T5878] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 386.421172][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.461630][ T5878] usb 6-1: config 0 descriptor?? [ 386.852399][ T9345] Falling back ldisc for ttyS3. [ 386.901125][ T5878] usbhid 6-1:0.0: can't add hid device: -71 [ 386.916829][ T5878] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 386.928939][ T5878] usb 6-1: USB disconnect, device number 5 [ 387.179919][ T6018] usb 1-1: device descriptor read/64, error -71 [ 387.468996][ T6018] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 387.782542][ T6018] usb 1-1: Using ep0 maxpacket: 32 [ 387.824421][ T9373] syz_tun: entered allmulticast mode [ 387.850548][ T6018] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 387.876651][ T6018] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 387.895315][ T6018] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 387.909853][ T6018] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.935759][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 387.954976][ T6018] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 387.983973][ T6018] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 387.985364][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 388.049288][ T6018] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 388.067670][ T6018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.126546][ T6018] usb 1-1: config 0 descriptor?? [ 388.383508][ T6018] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 388.886817][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 388.886832][ T30] audit: type=1400 audit(1767530069.785:532): avc: denied { append } for pid=9351 comm="syz.3.771" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 388.926723][ T6018] usb 1-1: USB disconnect, device number 43 [ 388.935338][ T6018] usblp0: removed [ 389.120342][ T30] audit: type=1400 audit(1767530070.025:533): avc: denied { read write } for pid=9005 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.197261][ T30] audit: type=1400 audit(1767530070.025:534): avc: denied { open } for pid=9005 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.240476][ T6018] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 389.312693][ T30] audit: type=1400 audit(1767530070.025:535): avc: denied { ioctl } for pid=9005 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.421694][ T30] audit: type=1400 audit(1767530070.325:536): avc: denied { call } for pid=9387 comm="syz.6.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 389.443770][ T9388] xt_ipcomp: unknown flags 1D [ 389.450794][ T30] audit: type=1400 audit(1767530070.355:537): avc: denied { setopt } for pid=9387 comm="syz.6.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 389.472027][ T6018] usb 1-1: Using ep0 maxpacket: 32 [ 389.497470][ T30] audit: type=1400 audit(1767530070.355:538): avc: denied { write } for pid=9387 comm="syz.6.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 389.528683][ T6018] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 389.537998][ T6191] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 389.568359][ T6018] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 389.577968][ T6018] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 389.591989][ T6018] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 389.603669][ T6018] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 389.615891][ T6018] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 389.639975][ T6018] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 389.650478][ T6018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.673416][ T6018] usb 1-1: config 0 descriptor?? [ 389.733983][ T6191] usb 6-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 389.755499][ T6191] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.783320][ T6018] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 389.798381][ T6191] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 389.829198][ T6191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.838251][ T6018] usb 1-1: USB disconnect, device number 44 [ 389.861724][ T6018] usblp0: removed [ 389.882510][ T6191] usb 6-1: config 0 descriptor?? [ 389.899831][ T30] audit: type=1400 audit(1767530070.795:539): avc: denied { mounton } for pid=9391 comm="syz.0.780" path="/proc/570/cgroup" dev="proc" ino=26077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 389.909443][ T9395] FAULT_INJECTION: forcing a failure. [ 389.909443][ T9395] name failslab, interval 1, probability 0, space 0, times 0 [ 389.940390][ T24] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 389.941638][ T6191] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 389.967161][ T9395] CPU: 1 UID: 0 PID: 9395 Comm: syz.3.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.967188][ T9395] Tainted: [L]=SOFTLOCKUP [ 389.967194][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.967204][ T9395] Call Trace: [ 389.967210][ T9395] [ 389.967216][ T9395] dump_stack_lvl+0x16c/0x1f0 [ 389.967245][ T9395] should_fail_ex+0x512/0x640 [ 389.967271][ T9395] ? fs_reclaim_acquire+0xae/0x150 [ 389.967299][ T9395] should_failslab+0xc2/0x120 [ 389.967323][ T9395] __kmalloc_noprof+0xeb/0x910 [ 389.967350][ T9395] ? tomoyo_encode2+0x100/0x3e0 [ 389.967379][ T9395] ? tomoyo_encode2+0x100/0x3e0 [ 389.967401][ T9395] tomoyo_encode2+0x100/0x3e0 [ 389.967429][ T9395] tomoyo_encode+0x29/0x50 [ 389.967452][ T9395] tomoyo_realpath_from_path+0x18f/0x6e0 [ 389.967484][ T9395] tomoyo_path_number_perm+0x245/0x580 [ 389.967504][ T9395] ? tomoyo_path_number_perm+0x237/0x580 [ 389.967527][ T9395] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 389.967547][ T9395] ? find_held_lock+0x2b/0x80 [ 389.967595][ T9395] ? find_held_lock+0x2b/0x80 [ 389.967619][ T9395] ? hook_file_ioctl_common+0x144/0x410 [ 389.967651][ T9395] ? __fget_files+0x20e/0x3c0 [ 389.967683][ T9395] security_file_ioctl+0x9b/0x240 [ 389.967708][ T9395] __x64_sys_ioctl+0xb7/0x210 [ 389.967731][ T9395] do_syscall_64+0xcd/0xf80 [ 389.967756][ T9395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.967773][ T9395] RIP: 0033:0x7f1fb578f749 [ 389.967788][ T9395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.967805][ T9395] RSP: 002b:00007f1fb65fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.967822][ T9395] RAX: ffffffffffffffda RBX: 00007f1fb59e5fa0 RCX: 00007f1fb578f749 [ 389.967834][ T9395] RDX: 0000200000000dc0 RSI: 00000000c02064b9 RDI: 0000000000000003 [ 389.967844][ T9395] RBP: 00007f1fb65fe090 R08: 0000000000000000 R09: 0000000000000000 [ 389.967854][ T9395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.967865][ T9395] R13: 00007f1fb59e6038 R14: 00007f1fb59e5fa0 R15: 00007ffdcd073488 [ 389.967889][ T9395] [ 389.968307][ T9395] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.291228][ T24] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 390.300392][ T24] usb 7-1: config 0 has no interface number 0 [ 390.307079][ T24] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 390.324020][ T24] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.336856][ T24] usb 7-1: config 0 interface 113 has no altsetting 0 [ 390.346214][ T24] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 390.356419][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.365790][ T24] usb 7-1: Product: syz [ 390.384158][ T24] usb 7-1: Manufacturer: syz [ 390.389210][ T24] usb 7-1: SerialNumber: syz [ 390.396364][ T24] usb 7-1: config 0 descriptor?? [ 390.409575][ C1] usb 7-1: NFC: Urb failure (status -71) [ 390.418123][ T24] usb 7-1: NFC: Unable to get FW version [ 390.446220][ T24] pn533_usb 7-1:0.113: probe with driver pn533_usb failed with error -90 [ 390.574051][ T6912] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 390.595220][ T30] audit: type=1400 audit(1767530071.495:540): avc: denied { listen } for pid=9407 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.621409][ T9390] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 390.632704][ T24] usb 7-1: USB disconnect, device number 15 [ 391.371935][ T6912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.389814][ T6912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.422168][ T6912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.474667][ T6912] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 391.505035][ T6912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.525429][ T30] audit: type=1400 audit(1767530072.425:541): avc: denied { getopt } for pid=9417 comm="syz.0.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 391.703548][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 391.750827][ T6912] usb 4-1: config 0 descriptor?? [ 392.398972][ T9423] netlink: 40 bytes leftover after parsing attributes in process `syz.6.790'. [ 392.410561][ T9423] netlink: 40 bytes leftover after parsing attributes in process `syz.6.790'. [ 392.420080][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 392.428155][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.444950][ T9423] net_ratelimit: 13903 callbacks suppressed [ 392.444985][ T9423] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 392.468707][ T5885] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 392.478911][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.502803][ T5885] usb 3-1: config 0 descriptor?? [ 392.741552][ T6912] usbhid 4-1:0.0: can't add hid device: -71 [ 392.755170][ T6912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 392.782995][ T6912] usb 4-1: USB disconnect, device number 26 [ 392.886050][ T6018] usb 6-1: USB disconnect, device number 6 [ 393.527099][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 393.543869][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 394.105794][ T5885] usb 3-1: USB disconnect, device number 19 [ 394.389543][ T30] audit: type=1400 audit(1767530075.285:542): avc: denied { setopt } for pid=9445 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 394.438241][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.446583][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.794647][ T9461] input: syz1 as /devices/virtual/input/input18 [ 394.908835][ T9449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.969118][ T9449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.227993][ T9469] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 395.293749][ T30] audit: type=1400 audit(1767530076.155:543): avc: denied { create } for pid=9465 comm="syz.6.802" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 395.580168][ T30] audit: type=1400 audit(1767530076.165:544): avc: denied { link } for pid=9465 comm="syz.6.802" name="file1" dev="ramfs" ino=27132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 395.738347][ T30] audit: type=1400 audit(1767530076.165:545): avc: denied { rename } for pid=9465 comm="syz.6.802" name="file1" dev="overlay" ino=27132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 395.783224][ T30] audit: type=1400 audit(1767530076.165:546): avc: denied { unlink } for pid=9465 comm="syz.6.802" name="file0" dev="overlay" ino=27132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 395.808752][ T30] audit: type=1400 audit(1767530076.175:547): avc: denied { setattr } for pid=9465 comm="syz.6.802" name="#b" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 395.838259][ T30] audit: type=1400 audit(1767530076.195:548): avc: denied { map } for pid=9465 comm="syz.6.802" path="/64/file0" dev="ramfs" ino=27131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 395.915367][ T30] audit: type=1400 audit(1767530076.815:549): avc: denied { unmount } for pid=7589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 397.076443][ T9480] FAULT_INJECTION: forcing a failure. [ 397.076443][ T9480] name failslab, interval 1, probability 0, space 0, times 0 [ 397.090677][ T9480] CPU: 0 UID: 0 PID: 9480 Comm: syz.2.804 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.090702][ T9480] Tainted: [L]=SOFTLOCKUP [ 397.090706][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.090712][ T9480] Call Trace: [ 397.090716][ T9480] [ 397.090720][ T9480] dump_stack_lvl+0x16c/0x1f0 [ 397.090738][ T9480] should_fail_ex+0x512/0x640 [ 397.090755][ T9480] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 397.090768][ T9480] should_failslab+0xc2/0x120 [ 397.090783][ T9480] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 397.090795][ T9480] ? __d_alloc+0x35/0xa80 [ 397.090807][ T9480] ? __d_alloc+0x35/0xa80 [ 397.090815][ T9480] ? preempt_schedule_thunk+0x16/0x30 [ 397.090826][ T9480] __d_alloc+0x35/0xa80 [ 397.090837][ T9480] d_alloc_pseudo+0x1c/0xc0 [ 397.090849][ T9480] alloc_file_pseudo+0xcf/0x230 [ 397.090861][ T9480] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 397.090872][ T9480] ? alloc_fd+0x471/0x7d0 [ 397.090890][ T9480] sock_alloc_file+0x50/0x210 [ 397.090903][ T9480] __sys_socket+0x1c0/0x260 [ 397.090918][ T9480] ? __pfx___sys_socket+0x10/0x10 [ 397.090937][ T9480] __x64_sys_socket+0x72/0xb0 [ 397.090952][ T9480] do_syscall_64+0xcd/0xf80 [ 397.090967][ T9480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.090978][ T9480] RIP: 0033:0x7f87bf38f749 [ 397.090987][ T9480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.090998][ T9480] RSP: 002b:00007f87c025d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 397.091009][ T9480] RAX: ffffffffffffffda RBX: 00007f87bf5e6180 RCX: 00007f87bf38f749 [ 397.091016][ T9480] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 397.091022][ T9480] RBP: 00007f87c025d090 R08: 0000000000000000 R09: 0000000000000000 [ 397.091028][ T9480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.091035][ T9480] R13: 00007f87bf5e6218 R14: 00007f87bf5e6180 R15: 00007ffc616614b8 [ 397.091048][ T9480] [ 397.508209][ T4110] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.518035][ T4110] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.540069][ T4110] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.621543][ T4110] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.676914][ T30] audit: type=1400 audit(1767530078.575:550): avc: granted { setsecparam } for pid=9484 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 398.419705][ T6018] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 398.651272][ T6018] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.662605][ T6018] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.674923][ T6018] usb 6-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 398.687240][ T6018] usb 6-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 398.702092][ T6018] usb 6-1: config 1 interface 1 has no altsetting 0 [ 398.711792][ T6018] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.721939][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.731134][ T6018] usb 6-1: Product: syz [ 398.735762][ T6018] usb 6-1: Manufacturer: syz [ 398.741100][ T6018] usb 6-1: SerialNumber: syz [ 398.772143][ T30] audit: type=1326 audit(1767530079.675:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb578f749 code=0x7ffc0000 [ 398.818132][ T6018] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 398.976475][ T9511] hfsplus: unable to find HFS+ superblock [ 399.020571][ T6018] usb 6-1: USB disconnect, device number 7 [ 399.080892][ T9505] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 400.035346][ T9530] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 400.155947][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 400.155964][ T30] audit: type=1400 audit(1767530087.064:623): avc: denied { read } for pid=9538 comm="syz.3.822" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 402.319883][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 402.326562][ T9539] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 403.158863][ T9539] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 403.185686][ T9539] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 403.218018][ T9540] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 403.559874][ T6191] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 403.669847][ T6912] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 403.830500][ T6191] usb 4-1: Using ep0 maxpacket: 8 [ 403.837517][ T6191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.850104][ T6191] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 403.860447][ T6191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.328884][ T6191] usb 4-1: config 0 descriptor?? [ 404.419817][ T6912] usb 6-1: Using ep0 maxpacket: 8 [ 404.462529][ T6912] usb 6-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 404.509867][ T6912] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.035427][ T6912] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 405.049870][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 405.103264][ T6912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.146047][ T6912] usb 6-1: config 0 descriptor?? [ 405.323985][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'. [ 405.534627][ T6912] usb 6-1: string descriptor 0 read error: -71 [ 405.551309][ T6912] usb 6-1: USB disconnect, device number 8 [ 405.581971][ T6191] usbhid 4-1:0.0: can't add hid device: -71 [ 405.594678][ T6191] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 405.610093][ T5943] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 405.619705][ T6191] usb 4-1: USB disconnect, device number 27 [ 405.669608][ T30] audit: type=1400 audit(1767530092.574:624): avc: denied { append } for pid=9607 comm="syz.2.843" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 405.771233][ T5943] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.784360][ T5943] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 405.794835][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.803642][ T5943] usb 1-1: Product: syz [ 405.811282][ T5943] usb 1-1: Manufacturer: syz [ 405.816912][ T5943] usb 1-1: SerialNumber: syz [ 405.823944][ T5943] usb 1-1: config 0 descriptor?? [ 405.832443][ T5943] cytherm 1-1:0.0: Cypress thermometer device now attached [ 406.078181][ T9618] IPVS: set_ctl: invalid protocol: 135 172.20.20.49:20000 [ 406.189407][ T30] audit: type=1400 audit(1767530093.094:625): avc: denied { mount } for pid=9627 comm="syz.6.848" name="/" dev="autofs" ino=26411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 406.234266][ T30] audit: type=1400 audit(1767530093.134:626): avc: denied { mounton } for pid=9627 comm="syz.6.848" path="/75/file1/file0" dev="autofs" ino=27391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 406.261284][ T30] audit: type=1400 audit(1767530093.144:627): avc: denied { mount } for pid=9627 comm="syz.6.848" name="/" dev="hugetlbfs" ino=27392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 406.479864][ T5943] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 406.488051][ T6191] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 406.501133][ T5981] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 406.649857][ T5943] usb 6-1: device descriptor read/64, error -71 [ 406.670186][ T6191] usb 7-1: Using ep0 maxpacket: 16 [ 406.680856][ T5981] usb 4-1: unable to get BOS descriptor or descriptor too short [ 406.696240][ T6191] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 406.756621][ T5981] usb 4-1: not running at top speed; connect to a high speed hub [ 406.769857][ T6191] usb 7-1: config 0 has no interface number 0 [ 406.782511][ T5981] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.794102][ T6191] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 406.806301][ T5981] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 406.816466][ T6191] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 406.828026][ T5981] usb 4-1: config 1 has no interface number 1 [ 406.847373][ T6191] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 406.862118][ T5981] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 406.875012][ T6191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.885631][ T6191] usb 7-1: Product: syz [ 406.893082][ T6191] usb 7-1: Manufacturer: syz [ 406.905979][ T5981] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.916770][ T6191] usb 7-1: SerialNumber: syz [ 406.922063][ T5943] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 406.930963][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.939730][ T5981] usb 4-1: Product: syz [ 406.945586][ T5981] usb 4-1: Manufacturer: syz [ 406.953235][ T5981] usb 4-1: SerialNumber: syz [ 406.958379][ T6191] usb 7-1: config 0 descriptor?? [ 406.964447][ T9628] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 406.972829][ T9628] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 407.079813][ T5943] usb 6-1: device descriptor read/64, error -71 [ 407.119887][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 407.186201][ T9628] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 407.188735][ T5981] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 407.194422][ T9628] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 407.201149][ T5943] usb usb6-port1: attempt power cycle [ 407.226353][ T5981] usb 4-1: USB disconnect, device number 28 [ 407.253967][ T7923] udevd[7923]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.420409][ T6191] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 407.442004][ T6191] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 407.458405][ T6191] asix 7-1:0.251: probe with driver asix failed with error -5 [ 407.471669][ T6191] usb 7-1: USB disconnect, device number 16 [ 407.517775][ T30] audit: type=1400 audit(1767530094.424:628): avc: denied { ioctl } for pid=9640 comm="syz.2.853" path="socket:[27418]" dev="sockfs" ino=27418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.517968][ T9641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.853'. [ 407.564290][ T9641] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=9641 comm=syz.2.853 [ 407.581483][ T9641] netlink: 104 bytes leftover after parsing attributes in process `syz.2.853'. [ 407.591883][ T30] audit: type=1400 audit(1767530094.494:629): avc: denied { nlmsg_read } for pid=9640 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.620041][ T5943] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 407.640252][ T5943] usb 6-1: device descriptor read/8, error -71 [ 407.889981][ T5943] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 407.909894][ T5885] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 407.910353][ T5943] usb 6-1: device descriptor read/8, error -71 [ 407.949866][ T6191] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 407.968856][ T30] audit: type=1400 audit(1767530094.874:630): avc: denied { unmount } for pid=7589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 407.991326][ T30] audit: type=1400 audit(1767530094.884:631): avc: denied { unmount } for pid=7589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 408.030067][ T5943] usb usb6-port1: unable to enumerate USB device [ 408.089994][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 408.096938][ T5885] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 408.099862][ T6191] usb 4-1: Using ep0 maxpacket: 8 [ 408.107155][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.116834][ T6191] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 408.122997][ T5885] usb 3-1: config 0 descriptor?? [ 408.134104][ T6191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.146125][ T6191] usb 4-1: Product: syz [ 408.151026][ T6191] usb 4-1: Manufacturer: syz [ 408.156188][ T6191] usb 4-1: SerialNumber: syz [ 408.163350][ T6191] usb 4-1: config 0 descriptor?? [ 408.172171][ T6191] gspca_main: sq930x-2.14.0 probing 2770:930c [ 408.325939][ T5981] usb 1-1: USB disconnect, device number 45 [ 408.333050][ T5981] cytherm 1-1:0.0: Cypress thermometer now disconnected [ 408.364099][ T5885] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 408.384198][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 408.399453][ T5885] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 408.407606][ T5885] usb 3-1: media controller created [ 408.422696][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.516480][ T9649] tipc: Enabling of bearer rejected, failed to enable media [ 408.588768][ T30] audit: type=1400 audit(1767530095.494:632): avc: denied { execute } for pid=9644 comm="syz.3.855" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 408.589891][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.628566][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.656017][ T5885] az6027: usb out operation failed. (-71) [ 408.664150][ T5885] az6027: usb out operation failed. (-71) [ 408.674968][ T5885] stb0899_attach: Driver disabled by Kconfig [ 408.681579][ T5885] az6027: no front-end attached [ 408.681579][ T5885] [ 408.689722][ T5885] az6027: usb out operation failed. (-71) [ 408.697005][ T5885] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 408.709041][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 408.743305][ T5885] dvb-usb: schedule remote query interval to 400 msecs. [ 408.751414][ T5885] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 408.765632][ T5885] usb 3-1: USB disconnect, device number 20 [ 408.809045][ T5885] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 408.994766][ T9645] Bluetooth: (null): Invalid header checksum [ 409.135387][ T30] audit: type=1326 audit(1767530096.044:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2d18f749 code=0x7ffc0000 [ 409.141193][ T6191] gspca_sq930x: ucbus_write failed -71 [ 409.167922][ T6191] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 409.187986][ T6191] usb 4-1: USB disconnect, device number 29 [ 409.209839][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 409.253478][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.269849][ T5943] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 410.440000][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 410.446700][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.458712][ T5943] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 410.468887][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.480094][ T5943] usb 4-1: config 0 descriptor?? [ 410.569930][ T5885] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 410.699822][ T5885] usb 3-1: device descriptor read/64, error -71 [ 410.950155][ T5885] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 411.079824][ T5885] usb 3-1: device descriptor read/64, error -71 [ 411.141635][ T5943] usbhid 4-1:0.0: can't add hid device: -71 [ 411.148199][ T5943] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 411.160526][ T6191] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 411.177719][ T5943] usb 4-1: USB disconnect, device number 30 [ 411.190270][ T5885] usb usb3-port1: attempt power cycle [ 411.326551][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 411.326563][ T30] audit: type=1400 audit(1767530098.234:647): avc: denied { mounton } for pid=9690 comm="syz.5.871" path="/22/file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 411.341994][ T9691] fuse: Unknown parameter 'rootmodE' [ 411.367260][ T6191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.379355][ T6191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.390389][ T6191] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.404784][ T6191] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.414959][ T6191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.441435][ T6191] usb 1-1: config 0 descriptor?? [ 411.549947][ T5885] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 411.570962][ T5885] usb 3-1: device descriptor read/8, error -71 [ 411.714463][ T30] audit: type=1400 audit(1767530098.624:648): avc: denied { connect } for pid=9706 comm="syz.5.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 411.811103][ T5885] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 411.840367][ T5885] usb 3-1: device descriptor read/8, error -71 [ 411.863825][ T6191] usbhid 1-1:0.0: can't add hid device: -71 [ 411.870441][ T6191] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 411.881929][ T6191] usb 1-1: USB disconnect, device number 46 [ 411.950117][ T5885] usb usb3-port1: unable to enumerate USB device [ 412.009857][ T5923] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 412.160656][ T5943] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 412.170525][ T5923] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 412.180491][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.191256][ T5923] usb 4-1: config 0 descriptor?? [ 412.321135][ T5943] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 412.330380][ T5943] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 412.340229][ T5943] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 412.351798][ T5943] usb 6-1: config 220 has no interface number 2 [ 412.358707][ T5943] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 412.373176][ T5943] usb 6-1: config 220 interface 0 has no altsetting 0 [ 412.380676][ T5943] usb 6-1: config 220 interface 76 has no altsetting 0 [ 412.388209][ T5943] usb 6-1: config 220 interface 1 has no altsetting 0 [ 412.400680][ T5943] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 412.412187][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.421553][ T5943] usb 6-1: Product: syz [ 412.426415][ T5943] usb 6-1: Manufacturer: syz [ 412.431519][ T5943] usb 6-1: SerialNumber: syz [ 412.449514][ T9718] bond0: (slave bridge0): Releasing backup interface [ 412.457913][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.469647][ T9718] bridge_slave_0: left promiscuous mode [ 412.476362][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.485748][ T9718] bridge_slave_1: left allmulticast mode [ 412.493283][ T9718] bridge_slave_1: left promiscuous mode [ 412.499574][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.511342][ T9718] bond0: (slave bond_slave_0): Releasing backup interface [ 412.521667][ T9718] bond0: (slave bond_slave_1): Releasing backup interface [ 412.535269][ T9718] team0: Port device team_slave_0 removed [ 412.545245][ T9718] team0: Port device team_slave_1 removed [ 412.553580][ T9718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.562144][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.572465][ T9718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.580899][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.589801][ T9718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 412.615730][ T5923] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 412.824019][ T5923] playstation 0003:054C:0DF2.000B: Invalid byte count transferred, expected 20 got 0 [ 412.835132][ T5923] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -22 [ 412.846211][ T5923] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 412.856005][ T5923] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 412.883211][ T5923] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -22 [ 413.368711][ T30] audit: type=1400 audit(1767530100.274:649): avc: denied { write } for pid=9708 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 413.617447][ T5923] usb 4-1: USB disconnect, device number 31 [ 414.785507][ T9748] FAULT_INJECTION: forcing a failure. [ 414.785507][ T9748] name failslab, interval 1, probability 0, space 0, times 0 [ 414.799460][ T9748] CPU: 1 UID: 0 PID: 9748 Comm: syz.2.887 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.799487][ T9748] Tainted: [L]=SOFTLOCKUP [ 414.799492][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.799501][ T9748] Call Trace: [ 414.799506][ T9748] [ 414.799511][ T9748] dump_stack_lvl+0x16c/0x1f0 [ 414.799539][ T9748] should_fail_ex+0x512/0x640 [ 414.799564][ T9748] ? fs_reclaim_acquire+0xae/0x150 [ 414.799589][ T9748] should_failslab+0xc2/0x120 [ 414.799611][ T9748] __kmalloc_noprof+0xeb/0x910 [ 414.799629][ T9748] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.799648][ T9748] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.799667][ T9748] tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.799693][ T9748] ? tomoyo_profile+0x47/0x60 [ 414.799720][ T9748] tomoyo_path_number_perm+0x245/0x580 [ 414.799737][ T9748] ? tomoyo_path_number_perm+0x237/0x580 [ 414.799751][ T9748] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 414.799775][ T9748] ? find_held_lock+0x2b/0x80 [ 414.799822][ T9748] ? find_held_lock+0x2b/0x80 [ 414.799847][ T9748] ? hook_file_ioctl_common+0x144/0x410 [ 414.799879][ T9748] ? __fget_files+0x20e/0x3c0 [ 414.799908][ T9748] security_file_ioctl+0x9b/0x240 [ 414.799932][ T9748] __x64_sys_ioctl+0xb7/0x210 [ 414.799954][ T9748] do_syscall_64+0xcd/0xf80 [ 414.799976][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.799992][ T9748] RIP: 0033:0x7f87bf38f749 [ 414.800001][ T9748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.800012][ T9748] RSP: 002b:00007f87c029f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.800024][ T9748] RAX: ffffffffffffffda RBX: 00007f87bf5e5fa0 RCX: 00007f87bf38f749 [ 414.800034][ T9748] RDX: 0000200000000540 RSI: 00000000000007a4 RDI: 0000000000000003 [ 414.800045][ T9748] RBP: 00007f87c029f090 R08: 0000000000000000 R09: 0000000000000000 [ 414.800055][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.800063][ T9748] R13: 00007f87bf5e6038 R14: 00007f87bf5e5fa0 R15: 00007ffc616614b8 [ 414.800087][ T9748] [ 415.030920][ T5981] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 415.049883][ T9748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.105026][ T5943] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 415.122168][ T5943] uvcvideo 6-1:220.0: No valid video chain found. [ 415.169701][ T5943] usb 6-1: selecting invalid altsetting 0 [ 415.189956][ T5981] usb 4-1: Using ep0 maxpacket: 8 [ 415.198122][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.226868][ T5943] usb 6-1: selecting invalid altsetting 0 [ 415.238089][ T5981] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 415.268420][ T5943] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 415.277509][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.300070][ T5943] usb 6-1: USB disconnect, device number 13 [ 415.321070][ T5981] usb 4-1: config 0 descriptor?? [ 415.686819][ T9760] input: syz1 as /devices/virtual/input/input20 [ 416.152805][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 416.174609][ T9762] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 416.199039][ T9757] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 416.210214][ T9762] block device autoloading is deprecated and will be removed. [ 416.230467][ T9757] block device autoloading is deprecated and will be removed. [ 416.240370][ T30] audit: type=1400 audit(1767530103.154:650): avc: denied { map_create } for pid=9755 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 416.264239][ T30] audit: type=1400 audit(1767530103.174:651): avc: denied { bpf } for pid=9755 comm="syz.0.891" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 416.286834][ T30] audit: type=1400 audit(1767530103.174:652): avc: denied { map_read map_write } for pid=9755 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 416.308650][ T30] audit: type=1400 audit(1767530103.174:653): avc: denied { prog_load } for pid=9755 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 416.332013][ T30] audit: type=1400 audit(1767530103.174:654): avc: denied { perfmon } for pid=9755 comm="syz.0.891" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 416.419908][ T30] audit: type=1400 audit(1767530103.184:655): avc: denied { prog_run } for pid=9755 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 416.547162][ T5981] usbhid 4-1:0.0: can't add hid device: -71 [ 416.769958][ T6912] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 416.959370][ T6912] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 416.969708][ T5885] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 416.997354][ T6912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.153975][ T6912] pwc: Logitech ViewPort AV 100 webcam detected. [ 417.163933][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.176901][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.188043][ T5885] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 417.198338][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.214119][ T5885] usb 1-1: config 0 descriptor?? [ 417.493502][ T5981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 417.504216][ T5981] usb 4-1: USB disconnect, device number 32 [ 417.626483][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 417.649353][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 417.679480][ T5885] usb 1-1: USB disconnect, device number 47 [ 417.751007][ T6912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 417.759033][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.790125][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.851401][ T6912] pwc: recv_control_msg error -71 req 02 val 2700 [ 417.859401][ T6912] pwc: recv_control_msg error -71 req 04 val 1600 [ 417.867510][ T6912] pwc: recv_control_msg error -71 req 02 val 2c00 [ 417.877368][ T6912] pwc: recv_control_msg error -71 req 04 val 1000 [ 417.885909][ T6912] pwc: recv_control_msg error -71 req 04 val 1300 [ 417.902024][ T6912] pwc: recv_control_msg error -71 req 04 val 1400 [ 417.917485][ T6912] pwc: recv_control_msg error -71 req 02 val 2000 [ 417.940904][ T6912] pwc: recv_control_msg error -71 req 02 val 2100 [ 417.952039][ T6912] pwc: recv_control_msg error -71 req 06 val 0600 [ 417.971118][ T6912] pwc: recv_control_msg error -71 req 04 val 1500 [ 417.980632][ T6912] pwc: recv_control_msg error -71 req 02 val 2500 [ 417.988562][ T6912] pwc: recv_control_msg error -71 req 02 val 2400 [ 417.996251][ T6912] pwc: recv_control_msg error -71 req 02 val 2600 [ 418.003840][ T6912] pwc: recv_control_msg error -71 req 02 val 2900 [ 418.011745][ T6912] pwc: recv_control_msg error -71 req 02 val 2800 [ 418.019906][ T6912] pwc: recv_control_msg error -71 req 04 val 1100 [ 418.028910][ T6912] pwc: recv_control_msg error -71 req 04 val 1200 [ 418.043892][ T6912] pwc: Registered as video103. [ 418.049493][ T9787] netlink: 56 bytes leftover after parsing attributes in process `syz.5.897'. [ 418.070577][ T6912] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 418.121603][ T6912] usb 3-1: USB disconnect, device number 25 [ 418.459910][ T30] audit: type=1400 audit(1767530105.294:656): avc: denied { ioctl } for pid=9796 comm="syz.0.900" path="socket:[28057]" dev="sockfs" ino=28057 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 419.398456][ T30] audit: type=1400 audit(1767530105.434:657): avc: denied { ioctl } for pid=9794 comm="syz.5.901" path="socket:[28063]" dev="sockfs" ino=28063 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.448772][ T9809] fuse: Unknown parameter 'smackfsdef' [ 419.549881][ T30] audit: type=1400 audit(1767530106.444:658): avc: denied { setopt } for pid=9812 comm="syz.5.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 419.611351][ T9821] tmpfs: Bad value for 'huge' [ 419.816603][ T9829] FAULT_INJECTION: forcing a failure. [ 419.816603][ T9829] name failslab, interval 1, probability 0, space 0, times 0 [ 419.831963][ T9829] CPU: 1 UID: 0 PID: 9829 Comm: syz.3.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.831992][ T9829] Tainted: [L]=SOFTLOCKUP [ 419.831999][ T9829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.832010][ T9829] Call Trace: [ 419.832016][ T9829] [ 419.832023][ T9829] dump_stack_lvl+0x16c/0x1f0 [ 419.832050][ T9829] should_fail_ex+0x512/0x640 [ 419.832081][ T9829] should_failslab+0xc2/0x120 [ 419.832105][ T9829] __kmalloc_cache_noprof+0x80/0x800 [ 419.832136][ T9829] ? sctp_add_bind_addr+0xae/0x3f0 [ 419.832161][ T9829] ? sctp_add_bind_addr+0xae/0x3f0 [ 419.832179][ T9829] sctp_add_bind_addr+0xae/0x3f0 [ 419.832202][ T9829] sctp_copy_local_addr_list+0x349/0x550 [ 419.832230][ T9829] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 419.832257][ T9829] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 419.832284][ T9829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.832306][ T9829] sctp_bind_addr_copy+0xe0/0x530 [ 419.832332][ T9829] sctp_connect_new_asoc+0x1c9/0x770 [ 419.832362][ T9829] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 419.832400][ T9829] sctp_sendmsg+0x157c/0x1e20 [ 419.832436][ T9829] ? __pfx_sctp_sendmsg+0x10/0x10 [ 419.832470][ T9829] ? __pfx_sock_has_perm+0x10/0x10 [ 419.832505][ T9829] ? __pfx_sctp_sendmsg+0x10/0x10 [ 419.832534][ T9829] inet_sendmsg+0x11c/0x140 [ 419.832560][ T9829] __sys_sendto+0x43c/0x520 [ 419.832589][ T9829] ? __pfx___sys_sendto+0x10/0x10 [ 419.832639][ T9829] ? ksys_write+0x1ac/0x250 [ 419.832663][ T9829] ? __pfx_ksys_write+0x10/0x10 [ 419.832690][ T9829] __x64_sys_sendto+0xe0/0x1c0 [ 419.832717][ T9829] ? do_syscall_64+0x91/0xf80 [ 419.832740][ T9829] ? lockdep_hardirqs_on+0x7c/0x110 [ 419.832763][ T9829] do_syscall_64+0xcd/0xf80 [ 419.832787][ T9829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.832805][ T9829] RIP: 0033:0x7f1fb578f749 [ 419.832821][ T9829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.832837][ T9829] RSP: 002b:00007f1fb65fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 419.832855][ T9829] RAX: ffffffffffffffda RBX: 00007f1fb59e5fa0 RCX: 00007f1fb578f749 [ 419.832866][ T9829] RDX: 000000000000ff04 RSI: 0000200000000000 RDI: 0000000000000004 [ 419.832877][ T9829] RBP: 00007f1fb65fe090 R08: 0000200000000280 R09: 0000000000000010 [ 419.832888][ T9829] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000002 [ 419.832898][ T9829] R13: 00007f1fb59e6038 R14: 00007f1fb59e5fa0 R15: 00007ffdcd073488 [ 419.832924][ T9829] [ 421.000144][ T5885] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 421.237251][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 421.253738][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.289578][ T5885] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 421.315063][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.337922][ T5885] usb 3-1: config 0 descriptor?? [ 421.620780][ T9851] fuse: Bad value for 'user_id' [ 421.626133][ T9851] fuse: Bad value for 'user_id' [ 421.652885][ T9853] raw_sendmsg: syz.5.919 forgot to set AF_INET. Fix it! [ 422.443329][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 422.450033][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 422.459812][ T30] audit: type=1400 audit(1767530108.894:659): avc: denied { watch } for pid=9855 comm="syz.3.921" path="/208/file0" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 422.486799][ T5885] usb 3-1: USB disconnect, device number 26 [ 422.497136][ T30] audit: type=1400 audit(1767530108.894:660): avc: denied { watch_sb watch_reads } for pid=9855 comm="syz.3.921" path="/208/file0" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 422.665456][ T30] audit: type=1400 audit(1767530109.574:661): avc: denied { connect } for pid=9861 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 422.753007][ T30] audit: type=1400 audit(1767530109.664:662): avc: denied { setopt } for pid=9861 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 424.449009][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.458455][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.467743][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.476518][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.497341][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.850402][ T30] audit: type=1400 audit(1767530111.764:663): avc: denied { listen } for pid=9888 comm="syz.0.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 424.911635][ T7589] syz_tun (unregistering): left allmulticast mode [ 424.946549][ T9880] chnl_net:caif_netlink_parms(): no params data found [ 425.151981][ T30] audit: type=1400 audit(1767530112.064:664): avc: denied { block_suspend } for pid=9892 comm="syz.3.932" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 425.327639][ T4110] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.384080][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.395345][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.415658][ T9880] bridge_slave_0: entered allmulticast mode [ 425.428371][ T9880] bridge_slave_0: entered promiscuous mode [ 425.458033][ T4110] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.492187][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.506654][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.519393][ T9880] bridge_slave_1: entered allmulticast mode [ 425.532370][ T9880] bridge_slave_1: entered promiscuous mode [ 425.700375][ T4110] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.833024][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 425.945541][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.928'. [ 425.955459][ T9918] netlink: 'syz.5.928': attribute type 12 has an invalid length. [ 426.309925][ T852] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 426.472919][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.928'. [ 426.483032][ T9918] netlink: 'syz.5.928': attribute type 12 has an invalid length. [ 426.503187][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.526771][ T4110] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.577751][ T852] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 426.601268][ T5833] Bluetooth: hci2: command tx timeout [ 426.603360][ T852] usb 1-1: config 0 has no interface number 0 [ 426.727431][ T852] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 426.753688][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.899860][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.910074][ T852] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.930120][ T65] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.930146][ T852] usb 1-1: config 0 interface 113 has no altsetting 0 [ 426.939675][ T65] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.447088][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.502738][ T852] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 427.507679][ T9880] team0: Port device team_slave_0 added [ 427.513122][ T852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.522542][ T9880] team0: Port device team_slave_1 added [ 427.528141][ T852] usb 1-1: Product: syz [ 427.544468][ T852] usb 1-1: Manufacturer: syz [ 427.549565][ T852] usb 1-1: SerialNumber: syz [ 427.556892][ T852] usb 1-1: config 0 descriptor?? [ 427.570451][ C1] usb 1-1: NFC: Urb failure (status -71) [ 427.577801][ T852] usb 1-1: NFC: Unable to get FW version [ 427.584489][ T852] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 427.697401][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.715297][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.749903][ T5923] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 427.799956][ T9880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.834765][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.854933][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.920364][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 427.926308][ T9915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9915 comm=syz.0.934 [ 427.940390][ T9880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.966491][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.990504][ T5923] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 428.013467][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.047346][ T9920] can0: slcan on ttynull. [ 428.047733][ T5923] usb 4-1: config 0 descriptor?? [ 428.134497][ T9934] syzkaller0: entered promiscuous mode [ 428.142371][ T9934] syzkaller0: entered allmulticast mode [ 428.287637][ T9880] hsr_slave_0: entered promiscuous mode [ 428.296004][ T9912] can0 (unregistered): slcan off ttynull. [ 428.304099][ T9880] hsr_slave_1: entered promiscuous mode [ 428.311688][ T6191] usb 1-1: USB disconnect, device number 48 [ 428.334845][ T9880] debugfs: 'hsr0' already exists in 'hsr' [ 428.348866][ T9880] Cannot create hsr debugfs directory [ 428.367586][ T4110] bridge_slave_1: left allmulticast mode [ 428.380217][ T4110] bridge_slave_1: left promiscuous mode [ 428.386567][ T4110] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.407977][ T4110] bridge_slave_0: left allmulticast mode [ 428.416338][ T4110] bridge_slave_0: left promiscuous mode [ 428.423673][ T4110] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.439077][ T4110] batman_adv: batadv0: Interface deactivated: gretap1 [ 428.640269][ T5833] Bluetooth: hci2: command tx timeout [ 428.649466][ T4110] batman_adv: batadv0: Removing interface: gretap1 [ 428.696672][ T4110] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 428.828609][ T4110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.840575][ T4110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.851224][ T4110] bond0 (unregistering): Released all slaves [ 428.916799][ T9947] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 428.988054][ T30] audit: type=1400 audit(1767530115.894:665): avc: denied { create } for pid=9946 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 430.411985][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 430.418558][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 430.447515][ T5923] usb 4-1: USB disconnect, device number 33 [ 430.637561][ T4110] hsr_slave_0: left promiscuous mode [ 430.721159][ T5833] Bluetooth: hci2: command tx timeout [ 430.782725][ T4110] hsr_slave_1: left promiscuous mode [ 431.338134][ T852] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 431.369482][ T4110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.399683][ T4110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.451946][ T4110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.465469][ T4110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.677929][ T4110] veth1_macvtap: left promiscuous mode [ 431.685131][ T852] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 431.685159][ T852] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 431.685192][ T852] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 431.685210][ T852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.690485][ T9958] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 431.709694][ T852] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.732796][ T4110] veth0_macvtap: left promiscuous mode [ 431.732945][ T4110] veth1_vlan: left promiscuous mode [ 431.732989][ T4110] veth0_vlan: left promiscuous mode [ 431.894728][ T9958] overlayfs: failed to resolve './file0': -2 [ 431.902616][ T5923] usb 6-1: USB disconnect, device number 14 [ 432.257102][ T4110] team0 (unregistering): Port device team_slave_1 removed [ 432.284502][ T4110] team0 (unregistering): Port device team_slave_0 removed [ 432.817296][ T9974] infiniband syz2: set down [ 432.822377][ T9974] infiniband syz2: added ipvlan0 [ 432.830856][ T9974] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 432.832893][ T9974] infiniband syz2: Couldn't open port 1 [ 432.859862][ T5833] Bluetooth: hci2: command tx timeout [ 432.875808][ T9974] RDS/IB: syz2: added [ 432.880467][ T9974] smc: adding ib device syz2 with port count 1 [ 432.887267][ T9974] smc: ib device syz2 port 1 has no pnetid [ 434.411968][T10022] 9p: Bad value for 'rfdno' [ 434.969237][T10030] random: crng reseeded on system resumption [ 435.916560][ T9880] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 436.161601][ T9880] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 436.274236][T10043] ip6gre1: entered promiscuous mode [ 436.281147][T10043] ip6gre1: entered allmulticast mode [ 436.300154][ T852] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 436.321577][ T9880] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 436.358998][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 436.422516][T10045] veth0_macvtap: left promiscuous mode [ 436.455958][ T9880] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.467366][ T852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.509934][ T852] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 436.542032][ T852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.544203][ T30] audit: type=1400 audit(1767530123.444:666): avc: denied { mount } for pid=10044 comm="syz.2.961" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 436.584541][ T852] usb 6-1: config 0 descriptor?? [ 436.602785][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.649352][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.661661][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.669452][ T7049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.754743][ T3071] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.762677][ T3071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.844969][ T852] usbhid 6-1:0.0: can't add hid device: -71 [ 436.887318][ T852] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 436.948035][ T852] usb 6-1: USB disconnect, device number 15 [ 438.293176][ T852] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 438.302777][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.460411][ T852] usb 6-1: Using ep0 maxpacket: 16 [ 438.473217][ T5885] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 438.492663][ T852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.510043][ T852] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 438.556768][ T852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.603299][ T852] usb 6-1: config 0 descriptor?? [ 438.642899][ T5885] usb 4-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 438.673542][ T5885] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.709810][ T5885] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=b0.a7 [ 438.731309][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.751198][ T5885] usb 4-1: config 0 descriptor?? [ 438.847612][ T9880] veth0_vlan: entered promiscuous mode [ 438.871878][ T9880] veth1_vlan: entered promiscuous mode [ 438.939326][ T9880] veth0_macvtap: entered promiscuous mode [ 438.962644][ T9880] veth1_macvtap: entered promiscuous mode [ 438.995292][ T5885] usb 4-1: USB disconnect, device number 34 [ 439.090545][ T852] kye 0003:0458:5016.000C: control desc unexpectedly large [ 439.125198][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.136601][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.147714][ T852] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.000C/input/input22 [ 439.531034][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.538020][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.592239][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.629139][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.662416][ T852] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.000C/input/input23 [ 439.691672][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.703906][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.746350][ T852] kye 0003:0458:5016.000C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 440.016056][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.182665][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.814707][ T5885] usb 6-1: USB disconnect, device number 16 [ 440.922915][ T387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.993812][ T387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.141721][T10136] input: syz0 as /devices/virtual/input/input24 [ 443.829813][ T30] audit: type=1400 audit(1767530130.734:667): avc: denied { ioctl } for pid=10152 comm="syz.5.972" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 444.008778][T10163] 9p: Bad value for 'rfdno' [ 444.191892][ T30] audit: type=1400 audit(1767530131.104:668): avc: denied { override_creds } for pid=10165 comm="syz.7.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 444.214126][ T30] audit: type=1400 audit(1767530131.104:669): avc: denied { read } for pid=10165 comm="syz.7.977" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 444.389690][T10175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=10175 comm=syz.7.977 [ 446.282682][ T30] audit: type=1400 audit(1767530132.794:670): avc: denied { setopt } for pid=10184 comm="syz.3.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 446.460222][ T5878] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 446.554751][T10190] hugetlbfs: syz.0.980 (10190): Using mlock ulimits for SHM_HUGETLB is obsolete [ 446.637063][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 446.656910][ T5878] usb 4-1: not running at top speed; connect to a high speed hub [ 446.696747][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.739083][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.755138][ T5878] usb 4-1: string descriptor 0 read error: -22 [ 446.762042][ T5878] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.772296][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.808673][ T5878] usb 4-1: 0:2 : does not exist [ 447.019830][ T793] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 447.312200][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 447.351182][ T793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 447.380022][ T793] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 447.391100][ T793] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 447.409850][ T793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.420627][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.429479][ T793] usb 1-1: Product: 嗜셹﹁⸜땑෦鿝觽嫊杼๾꾔㕼ⓠ덳줩ꔓ㶠䫆ճ碓 [ 447.452221][ T793] usb 1-1: Manufacturer: ᐁ [ 447.457353][ T793] usb 1-1: SerialNumber: syz [ 447.582056][T10203] "syz.7.985" (10203) uses obsolete ecb(arc4) skcipher [ 447.662851][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.986'. [ 447.680748][ T6912] IPVS: starting estimator thread 0... [ 447.700837][ T30] audit: type=1400 audit(1767530134.614:671): avc: denied { getopt } for pid=10194 comm="syz.0.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 447.710730][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.790043][T10213] IPVS: using max 41 ests per chain, 98400 per kthread [ 447.823448][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.480087][ T5878] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 449.503165][ T5878] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 449.541717][ T5878] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 449.658158][ T5878] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 449.721048][ T5878] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 449.765641][ T5878] usb 4-1: USB disconnect, device number 35 [ 450.442091][ T30] audit: type=1400 audit(1767530136.914:672): avc: denied { setattr } for pid=10235 comm="syz.3.991" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 450.709963][ T793] cdc_ncm 1-1:1.0: bind() failure [ 450.732754][ T793] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 450.762207][ T793] cdc_ncm 1-1:1.1: bind() failure [ 450.784026][ T793] usb 1-1: USB disconnect, device number 49 [ 450.954961][T10250] input: syz0 as /devices/virtual/input/input25 [ 451.114920][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'. [ 452.933267][ T30] audit: type=1400 audit(1767530139.454:673): avc: denied { prog_load } for pid=10267 comm="syz.3.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 453.007958][ T30] audit: type=1400 audit(1767530139.454:674): avc: denied { bpf } for pid=10267 comm="syz.3.1001" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.152034][ T30] audit: type=1400 audit(1767530139.454:675): avc: denied { perfmon } for pid=10267 comm="syz.3.1001" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.191422][ T30] audit: type=1400 audit(1767530139.454:676): avc: denied { prog_run } for pid=10267 comm="syz.3.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 453.298163][ T30] audit: type=1400 audit(1767530139.464:677): avc: denied { name_bind } for pid=10267 comm="syz.3.1001" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 453.324214][ T30] audit: type=1400 audit(1767530139.464:678): avc: denied { node_bind } for pid=10267 comm="syz.3.1001" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 453.349592][ T30] audit: type=1400 audit(1767530139.474:679): avc: denied { read write } for pid=10267 comm="syz.3.1001" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 453.375677][ T30] audit: type=1400 audit(1767530139.474:680): avc: denied { open } for pid=10267 comm="syz.3.1001" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 453.832268][ T30] audit: type=1400 audit(1767530139.484:681): avc: denied { map } for pid=10267 comm="syz.3.1001" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 560.269731][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 560.277378][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10298/1:b..l [ 560.286631][ C1] rcu: (detected by 1, t=10502 jiffies, g=35593, q=303 ncpus=2) [ 560.295097][ C1] task:syz.3.1004 state:R running task stack:26888 pid:10298 tgid:10292 ppid:5824 task_flags:0x40044c flags:0x00080001 [ 560.310649][ C1] Call Trace: [ 560.314242][ C1] [ 560.317448][ C1] ? __schedule+0x10b9/0x6150 [ 560.322586][ C1] __schedule+0x1139/0x6150 [ 560.327527][ C1] ? rcu_is_watching+0x12/0xc0 [ 560.332760][ C1] ? __pfx___schedule+0x10/0x10 [ 560.338081][ C1] ? mark_held_locks+0x49/0x80 [ 560.343305][ C1] preempt_schedule_irq+0x51/0x90 [ 560.348818][ C1] irqentry_exit+0x1d8/0x8c0 [ 560.353861][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 560.360423][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 560.366128][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 be ee 0e 0f 82 74 02 00 00 8b 35 ba ee ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 560.387674][ C1] RSP: 0018:ffffc9000518eda8 EFLAGS: 00000206 [ 560.394327][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000c64af325 [ 560.403075][ C1] RDX: 0000000000000000 RSI: ffffffff8daa845f RDI: ffffffff8bf2b480 [ 560.411821][ C1] RBP: 0000000000000002 R08: 0000000055fd6992 R09: 00000000255fd699 [ 560.420573][ C1] R10: 0000000000000002 R11: ffff888036eb8b30 R12: 0000000000000000 [ 560.429323][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.438083][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 560.443789][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 560.450541][ C1] unwind_next_frame+0xd1/0x20b0 [ 560.455953][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 560.461560][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 560.468318][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 560.475069][ C1] arch_stack_walk+0x94/0x100 [ 560.480204][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 560.486961][ C1] stack_trace_save+0x8e/0xc0 [ 560.492087][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 560.497980][ C1] ? __lock_acquire+0x436/0x2890 [ 560.503398][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 560.509768][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 560.515467][ C1] save_stack+0x160/0x1f0 [ 560.520213][ C1] ? __pfx_save_stack+0x10/0x10 [ 560.525534][ C1] ? free_unref_folios+0xa22/0x1610 [ 560.531230][ C1] ? folios_put_refs+0x4be/0x750 [ 560.536639][ C1] ? free_pages_and_swap_cache+0x245/0x4a0 [ 560.543008][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 560.549769][ C1] ? page_ext_put+0x3e/0xd0 [ 560.554711][ C1] __reset_page_owner+0x84/0x1a0 [ 560.560128][ C1] free_unref_folios+0xa22/0x1610 [ 560.565643][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 560.572014][ C1] folios_put_refs+0x4be/0x750 [ 560.577239][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 560.583032][ C1] ? rcu_is_watching+0x12/0xc0 [ 560.588251][ C1] ? trace_mm_page_alloc+0x11b/0x180 [ 560.594049][ C1] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 560.600715][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 560.606894][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 560.613671][ C1] ? lruvec_stat_mod_folio+0x25b/0x3b0 [ 560.619658][ C1] ? __pfx___might_resched+0x10/0x10 [ 560.625450][ C1] ? folio_remove_rmap_ptes+0x391/0xfb0 [ 560.631543][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 560.638110][ C1] ? find_held_lock+0x2b/0x80 [ 560.643243][ C1] tlb_flush_mmu+0xe9/0x5a0 [ 560.648187][ C1] unmap_page_range+0x1e64/0x43c0 [ 560.653719][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 560.659618][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 560.665041][ C1] ? uprobe_munmap+0x20/0x600 [ 560.670169][ C1] unmap_single_vma+0x153/0x240 [ 560.675492][ C1] unmap_vmas+0x218/0x470 [ 560.680241][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 560.685561][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 560.690991][ C1] exit_mmap+0x1b0/0xb60 [ 560.695647][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 560.700877][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 560.706765][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 560.712483][ C1] __mmput+0x12a/0x410 [ 560.716949][ C1] mmput+0x62/0x70 [ 560.721028][ C1] do_exit+0x7d7/0x2bd0 [ 560.725578][ C1] ? __pfx___might_resched+0x10/0x10 [ 560.731373][ C1] ? __pfx_do_exit+0x10/0x10 [ 560.736405][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 560.741920][ C1] ? find_held_lock+0x2b/0x80 [ 560.747057][ C1] do_group_exit+0xd3/0x2a0 [ 560.751996][ C1] get_signal+0x2671/0x26d0 [ 560.756942][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 560.762359][ C1] ? __pfx_get_signal+0x10/0x10 [ 560.767689][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 560.773780][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 560.780545][ C1] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 560.786255][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 560.792056][ C1] do_syscall_64+0x4ee/0xf80 [ 560.797093][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.803553][ C1] RIP: 0033:0x7f1fb578f749 [ 560.808388][ C1] RSP: 002b:00007f1fb65dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 560.817622][ C1] RAX: 0000000000010106 RBX: 00007f1fb59e6090 RCX: 00007f1fb578f749 [ 560.826369][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 560.835117][ C1] RBP: 00007f1fb5813f91 R08: 0000000000000000 R09: 0000000000000000 [ 560.843868][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 560.852614][ C1] R13: 00007f1fb59e6128 R14: 00007f1fb59e6090 R15: 00007ffdcd073488 [ 560.861372][ C1] [ 560.864673][ C1] rcu: rcu_preempt kthread starved for 10558 jiffies! g35593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 560.876967][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 560.887908][ C1] rcu: RCU grace-period kthread stack dump: [ 560.894359][ C1] task:rcu_preempt state:R running task stack:28136 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 560.909170][ C1] Call Trace: [ 560.912759][ C1] [ 560.915964][ C1] ? __schedule+0x10b9/0x6150 [ 560.921093][ C1] __schedule+0x1139/0x6150 [ 560.926042][ C1] ? __pfx___schedule+0x10/0x10 [ 560.931357][ C1] ? find_held_lock+0x2b/0x80 [ 560.936499][ C1] ? schedule+0x2d7/0x3a0 [ 560.941250][ C1] schedule+0xe7/0x3a0 [ 560.945708][ C1] schedule_timeout+0x123/0x290 [ 560.951026][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 560.956917][ C1] ? __pfx_process_timeout+0x10/0x10 [ 560.962714][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 560.969087][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 560.975079][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 560.980309][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 560.986107][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 560.991808][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 560.997223][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 561.002548][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 561.008920][ C1] rcu_gp_kthread+0x26d/0x380 [ 561.014046][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 561.019748][ C1] ? rcu_is_watching+0x12/0xc0 [ 561.024967][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.030674][ C1] ? __kthread_parkme+0x19e/0x250 [ 561.036180][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 561.041901][ C1] kthread+0x3c5/0x780 [ 561.046357][ C1] ? __pfx_kthread+0x10/0x10 [ 561.051388][ C1] ? rcu_is_watching+0x12/0xc0 [ 561.056607][ C1] ? __pfx_kthread+0x10/0x10 [ 561.061641][ C1] ret_from_fork+0x983/0xb10 [ 561.066676][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 561.072280][ C1] ? __switch_to+0x7af/0x10d0 [ 561.077408][ C1] ? __pfx_kthread+0x10/0x10 [ 561.082445][ C1] ret_from_fork_asm+0x1a/0x30 [ 561.087683][ C1] [ 561.090983][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 561.097916][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.109446][ C1] Tainted: [L]=SOFTLOCKUP [ 561.114177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.125212][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 561.131396][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 561.152942][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 561.159603][ C1] RAX: 00000000012e388b RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 561.168349][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 561.177094][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 561.185841][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 561.194594][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 561.203339][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 561.213140][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.220364][ C1] CR2: 00007f16fa7733e0 CR3: 00000000381c3000 CR4: 00000000003526f0 [ 561.229117][ C1] Call Trace: [ 561.232705][ C1] [ 561.235910][ C1] default_idle+0x13/0x20 [ 561.240662][ C1] default_idle_call+0x6c/0xb0 [ 561.245885][ C1] do_idle+0x38d/0x510 [ 561.250355][ C1] ? __pfx_do_idle+0x10/0x10 [ 561.255395][ C1] cpu_startup_entry+0x4f/0x60 [ 561.260644][ C1] start_secondary+0x21d/0x2d0 [ 561.265865][ C1] ? __pfx_start_secondary+0x10/0x10 [ 561.271665][ C1] common_startup_64+0x13e/0x148 [ 561.277089][ C1]