last executing test programs: 9m16.075559009s ago: executing program 3 (id=201): socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x20, 0x46e2ce1dfc86f44b, 0x1, "b0"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) syz_usb_connect(0x5, 0xfffffffffffffe49, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x59, 0xd, 0xe, 0x20, 0x2001, 0x3c19, 0x3bd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x213, 0x1, 0x0, 0x40, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0x0, 0x6, 0xed, 0xed, 0xee, 0x6, [], [{{0x9, 0x5, 0xe, 0x10, 0x20, 0x7f, 0x9, 0x5}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x8, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0xb, 0x9, 0x5}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x9, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x57, 0x4}, @generic={0xe3, 0xb, "0f621093b679b53812aaf5053d7e19e984e063bd8300b438ccd2a3224ecfdf7706a49b6ca3710603fceba434706b9261587490b2aec125b950a2ee77e0635bc73f68a8a46722886bee0ea2554a1e902a6912e5cad65ab7b60714a84ced4fda24a794d69e644bd70f80f5648abf5dbf9ca10e91cdb6d4f429c8b7b8e0392b0929bee4e28279d95687246b8bb48e6cae2171358c37c6f7a9e0ccb5c63ff7834b5b9fd9e1c62902a35b4ed6ed81ae50f49d39ed37bfc57256cc3d70946fd3d77475d3531d5f855ca82c7a782c5ff57ba4dd909a5d9f180b4b851076202576cb2571c1"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x0, 0x2, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x8000}]}}, {{0x9, 0x5, 0x8c, 0x0, 0x20, 0xfa, 0x9, 0x2, [@generic={0xd3, 0x7, "0da517c49c16cdb59adc9ed517932372a33cb16a222b6863142b8b7e50efc55ead55887dc4023e98c77538c0ab27e2031840aeeecda4f9a8616454a1290291ad674895b9e8e4b4189dee87a5b0d70d952fd3f71eb4f72d326d3d041582f70ad26a222029f1d43e0be6decd4bb3a5e46370b4fbc979cdd7ab95b65f8d005605e4eeadb54ae82fef9056c84acfa9e82aadbdf4db16e3b1a93fea7eed36ebb68bfeafa6f48fc83307ebe44365796f0311476518f9669c002ebca0ac28bd5ebb68cc564f0157f011b848af29c3643847d16fc1"}]}}]}}]}}]}}, 0x0) 9m13.021044937s ago: executing program 3 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000180001801f0002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) 9m12.913774671s ago: executing program 3 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000005c0)={0x7fffffff, 0x8, 0x1ff, 0x50000}, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r9], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x240400c1) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x1a4, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7cb}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb16}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x44}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xf}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xc}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1c}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9c}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000002c00128009000100766c616e000000001c000280100004800c00390005000000570b0000060001000300000008000500", @ANYRES32=r11, @ANYBLOB="35a658a168c598e1343ad5a879c58a1470f59bfef763f63073adcb9e199afd000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x200000) socket$nl_route(0x10, 0x3, 0x0) (async) ustat(0x11, &(0x7f0000000600)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000005c0)={0x7fffffff, 0x8, 0x1ff, 0x50000}, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r7) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r9], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x240400c1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x1a4, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7cb}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb16}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x44}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xf}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xc}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1c}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9c}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000002c00128009000100766c616e000000001c000280100004800c00390005000000570b0000060001000300000008000500", @ANYRES32=r11, @ANYBLOB="35a658a168c598e1343ad5a879c58a1470f59bfef763f63073adcb9e199afd000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x200000) (async) 9m12.861303129s ago: executing program 3 (id=213): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = memfd_create(&(0x7f0000000580)='\xf3e\t\x9f\x918\xc0\x89.c\xb2g\x176\xd9\x020\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e~\x89\xb8\xc5;~\x04\x03~K\xfb\x98\x18Y\xb8\x05\xe7\x18+p\x96]\x9c\x8a\xa9\x82\xd0v\x821f\xa6\x92\x00X\xbbp\xf5\xa0\xd6\x02\xc9\xe9\xbc\xfa\x05|\x88,\xb1B\x18?VM\x89\x00\x036-\xb9z\x1f`2t\x87b_\xc9\xa6\xf2ZS@\xeee\x1a\xac4~g\x00\x00\x00\x00\x00\x00Tc\xd9\x8e\xc1\xd8\x14\xf2z\xfbO\xa8\xbd\xa5\xc0h\xa2\xb2\xbeK\xa9Z%)\xf3\xbc\x94E\xde\x9b\x03?\r\x06\x82B\xde\x05\xde\xb0\'\xc4\xf6\xc0\xa1\x991\xf8/\x14\xb13\x94G\x1c*E4\xa0\xf6\xfcMmC=\xb2\xbc/\xa5\xa2sB\x00Nw+\x01\xbc\x93`\xb5\xe4\xcf\x9c\x96\xd6<\byT\xb5;RC\x10I\x8f\xd6\x13*\r|\x8cz\xc9\x8ek\x03\xd7\xb9\xbf&g\x8d\x1dZ\xa3kf\xaf9\xe92\xde\x9ey\f4\x02\x00\xaces~t\x00\xce\x94\x9fo\xd4_\x0fit\xe4\xa0-jt\x11\x97\xe5W\xd6kE\x9c\xad9\x99\xa4\xa9\xc0r\"\xc1\x05\xd8\xdb\x19\xb5\xdax\x8f\xc0\xa0Q8*\xea\x86or|=s\xa3\xe7\x03~\xb4\xa3\xe7\xbf\xff\xd6_\xa2Z\a.\xfb\xbd\xa1\xe4\x18\xad\x9d0\xc79', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x799843, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 9m12.756116538s ago: executing program 3 (id=215): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x1, 0x9, 0x1, 0x1, 0xfff}}, 0x118) 9m12.375964109s ago: executing program 3 (id=216): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'team_slave_1\x00', &(0x7f0000000340)=@ethtool_eeprom={0x18, 0x2, 0x80000001}}) openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f00000005c0)=[@wrmsr={0x1e, 0x20, {0x410, 0x2}}, @wr_drn={0x6e, 0x20, {0x7}}, @cpuid={0x14, 0x18, {0xd06, 0x4}}, @rdmsr={0x32, 0x18, {0x10}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x7f}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x5}], 0xd8}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003180)={{0x0, 0x0, 0x80, {0xeeee0000, 0xffff1000, 0x5}}, "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", "0d82fb981d773a5ac39fd9e8a40bc7d141e458f8b75a36d652611077b32b8d5bccedcc88ba5ec8d2ded1ee81aba8ad160a6529d7b69011dad43ae82572676d41230542cb0701478cc2e49c5843384f6227083cf9c2cce88e71f95116a0975e1aa15031d71f883d09fc48bbe43005bb7747311ff40c2828b5ec2760cc046081fa2fcbff4ce35fc041a47a235eb3a667388985bc1a0f808433a6c92b2224ef462ee2f8596dcf1a08600af3e9b0e8f9107b5743eec2400fe9c14da3b6ce95c8126120f305ce905baed387d653bb171b7038f5d9847dc7c51b489cee81ec56395ea1f3eab0177858735c75c0e621234f6579c42e2cc149ee37b524d40276f041eb96d21cf8d5cd680184fd466765317fb4f0ebdb1c7ed20048fb237e6b2e65eba0c752d224398aa3f4a8da4dcdfc66a9d36b0f0cab3656f2703a0a64b3e55c9c8aed2277a6df9e074bb43299cd6a87f7b2427d8e3746ef205b9b2dabb7afa10ff328f689660c5a24d8546e0276c9b16cfeecf3723722a9098acee0d8befc40371454b7d33797fb330cd22eaa68e2c78f06d4cd107c4b2b07d06f7b4d811e05827e855962211cb512a0ab9ece9af2c05056ee35df54cbd419220d1605c611527d9b49056e4944a3dbe5cd0af9b3d29183c5c3328463867ff9efd2e99e69114e9ed79923c981ff2cbc321ba25250bd23a6d2a849ab4f8199431715e706c9b2f20127801418549b7c0deb14dc400c932bc870c6f2d05352a7c93bc6b3ae1572317740828b814e9a0e804a5887e313e608f6a83f40202b5e279aeae92aef66fca691dd54a7cdbe7245f1e5050254d1e56a6f76f52576da79d8596e80d8d989aba727febfc5792654be297b1f3b06945bba68e1350d4e821e6690fb2bb67e792af43fc8cad9c0faf18072dc699fce5969a4ed4d1fb9e0abed270c0ee10d17cfda4934d129d910db844d7293935318a6c45755e5a58d965be4e99da012a5efe43b891e6bf73e67b6735312221f56d1eaf7160ef4e37b2563556ccc91d2f46bc5b732127df58f31d146e63f3a934c0cfc1cb802c0ad48c3c977d1b0f0d8e4ce7574ad6ad4b4a0a2191e9ca1a42208d0b7b2ac037d7fc303db95aa66cf38b8930fa15b3d2a90baf89ee4ad559dc29d06692d8ea1af365c0ffe166029c9e74708cf6a2066989c29f037a3b79af65faa1111894b0c0aa183d38f07607da60ad905682227550549111d4ca7e2dadd6bc63f3fbb2b5c18ea9be1f8f85407249e9da735f9465b30330732870dc15a38d678847be0d3c7abd7d685f750e4f1ace7cd52b4b5052fda6f9760bf49f473c0417ada8157d2fc774eb81157caa5a90ec13f0bc747d44a7edb2ff3a2b508c1f20f151cb896a7880a5e697589607ddee002f714ce2a2e2a63abb6b2bc5e88799ec07c5d4e8d4739e74b050b7dfc4eb6afb6e1ce2b029f3687190f6ae07e89725c8fa77fc035c503580a94f46eed38beaebb28cfe1092f474d82ee0c477e719033da326b65a12521015c141d7f1edd9d2886610618b7cb653ad300de0f2bd292446c3a97c6f311f30ee1477871d0e6cfb0de6673c3048b738c1fb9d86e0c154c91834be69893eb971cf7196470f3711da09119dcb271336bdea36be97c06799f60ac82b18d3df0ef9a70533290afa8ab4463c5de802171b01c52a594f83c41caf6af3c9f381e247c24ffe671da98a363f4991b0486297ed1bc3dc7de6515f320c94ac7d36682b0b5808b29b212094503eda88d8e46add66f52e41e646709d3594880d1517d73187b491c8c61a0e46a975aacd74c3898c21863c15ce190cb6fe24a03ce8792825784db14b06a4eca1c2a85017f8bba4a5430fb97724b67c2ff5ade048d13c6f817232ac9a75162b44a02622845f82398b4a316908ee664655e183175925e23d0ba8c138297c955e1dbc26b283aaf0c735de6a7af8461970d728bf1b9af1d256f0708f35022946d1972e58549165b88f4d11528d6efb8491e490ee03d97830a4112e3a23ab369ffdd2f4287a7b4511baea3888bc4618bd6474a9f0bee74d767cc2d7b529f26349c59bae8d4cfb4a4c260742ac5361d3219bc7281cebad95ac0b18597bb571ebfd7ba1c18bf66f1fdccaddde0e987bdb1bfd3647ed9652d086e1a758247296915b44cfa7f4116d3860783a2f2ebe17d4cab95572bd8d58659a30b9439671bd2b3ab35757da3890e96cf67cdd55f0b08521f578c0e399a1e382261d25e8f650dfcabe4a0e05dd6195b3ef5227acfe07c63b0eb2de9c3df8694856ad19cef1c9c0be2b21c0dce1243be60c20641a623ed7847df53385112a7fbe4d177b6f03ca3f34fcfcc21461a89912754b7558ae15d6a13dfa9a6bfb7b57bfcae15d2713cf46fd627bb71944244af3ad6a74db6a219c394d26f73afc13e7a442ca1b269d33dd35cbc17fa7d726238dcf23fba9a0b789540b2a54b6b1fb64d38adf79122de9b8d268ada1312e8978bcbf31d643a26409bc550597cc541177f3abd9c78513cba4e60677fa9e19f43ad2ae0cb92d4edbe6152f616f12f7db50ba52c00c7f1d15257e44ef84bc4f3da0c8322dc50772ef938c99f563ec76a5d74187f1c4d6189bd1a5c655a79b7c72964e5f8d12542aec975067e3ee9602e2797ce56706c975b411c481b8288959a2bbf2c4783345d4bfd2dd7519466109d9ad640b847e255568d3b426309d83ad19e62463802724e63870bb54e2aab25d32e4f893f78e11e3233bf1e5ee20bcf05b0d813b0512c63ff2258d4343fece627a16880f462bad04e6c6ea47094db9ce9704beea2124961ee35d5e1ce4808b42c9088a8e4fb330bbda0e6aeb3972a95827b3e410ac31f681296e4ab6f98bb51a96ba1cdded6bf9fee904078f593e0247a92332dde45283cb3c89096ab078b975677ab7a575b1d32fb215aba0cdeeac0e322786b1a56c5fd0f046b1457d0c6069d4e9abe08b998a896eed1f2e5b815a5b9672921f66005d41f3a7deec0e334dee4cf987f5b7a184eacc47dc101fe7fff33b52f1a71485c4d14a7edb19f465a5d1cf4cecac081ea4f30ffa9624ccf37f01e33693d0d8ea7ed5ea8ad92ce7243735809c0c3189791d75b5f33ef562f87813f2e6c45acb947c29a96e3ab4c47a5ea55993543e54c4149000b050bf0410eff2ae5022a863608ddbdc6b44ef7a9e6ee43e4551c6559038505e284a5aeef8e233dbeb7dd5f3986146827b4c5575956e24afe77ec57dd355c5c816d0b67e12dfd9659a677742b8d62b8b12512e86842a263f5d760cf90affc7a86244dada684fdfa8e539eba12f629aa90620c60584a0a76305a2663ab78a4989c2af6ee6ae2af9e29198edb6df4bfe831b4214c627d57bd38a2e7be6eb1428f6e9be56d69c5d42292f9784aed4f050c0e1674d8f22dfcb53e5a5b1b383a2ea06c8c3ba9eb0b4e372977f1a711f8194968c849b98b97a24d924ce95a5af030ab780512ed48290a9cbdeeb9943ed93fa1d165b22e3f8fb6a9d6fdc2b51851a304b6defe2dd4dd3f1615c67cc71aaa8d472de2569f5652ab990026ba72698b5e6bf8091857d0e3b78ca52a8e1fd8a7660c1097d3cf591562518d47f6554057b847284612a763285c922312283e8340347fb555a14a53c8559ffed99bda2efbdbce265696a7c4042c12aee37a7218f29d314f67f295b65ab18d82363899ed1eb4ca903e16a38beecd85b57264e983148a3a7c48998fa9bc8c1a40f6f7659b0ce24f29aaa9b52d87f7e9f065802ce6ab640a1f0447ecf9011b4cce0c51d4681f4b2767c92353c3b3111e2daa74b1e03549320b80e30c70f2a99cd2e77faa40b98e071a5bad02ce30500a77b44249602f0f6b2866c5f622260ed9343c4a34ad8c86031e9367b0ad3ec26cd8f16e0b1266664af1677e458831f934e4e086feb16ada8cf0902f26d74770df033e33491957e907198ad88a9a433cc14d694325b0af03c63f00ed0257db5491bed2f3b09d03f14e2bd3925a4c4d7ef6c867f7757fcd414084c145e35953f23aa12960d1e20cb9a283744d3f8eb2481167cb48d3769ef87fb5f416e224d9976f455f96711f0187dc7e55966ffa6d39cbfda1c9411ee0710ba888af7bbda752e5c1b86b23f3fdc494753b9312f8cfeaecc1503511dbe326eb2f6cb1ed70f6fbaaa06cc664ca92c9db8a73297b9dcd2a4279530e202a84cde65c026e4eee1f90d3b661c2ec9effa2c0bc3ca7107f25ed88ac5e72b1fba3be7d060dd42fbbf649a0d3ac873784b299941a936b59dea9f301c6340ca6464006d2d72d106950d66922abd58898f6cab443543a49babd7994032bed988e394a02620c2c7720b4a5dff9af07fe82fff051d42cf12e2c910e842a8e81880c014007a72c290167378c6493bc452f121f0c146f23db609c3605ecf3605c9bc95d4178b1ab9bcc1e23463fee3cf5ea217addaa081789c46ff7862b24b73bb4d7c8d849af2290fdf99757005ddd25df4d82535f27614ad30244124650bf5c929a1fcecceaea0be3571725e199d03cc34d04791475532102684822837de1d806b3827f5c5a1aa017b5696b53dfb4de3d9234b5bf4a2ef691180b7b3ad0c9adc75df8814fcb6a66f1d598770fdeee2c8a595c60aede824dface31d64317ad2481f056cfda005e3ee62f0cefc820ac3be6ecdb8f721253bb39805bfa733c0a2b80c85185d2ce9f023c18eb0e830bb86d36f9bd48b52bc9d2229947c27f1436f93cac0f85f4706793a2db6a537a5d1cfd8c9a73678bf80faa6e899831c048734343e07cfa980500520137e3a6e4f03194a5b5214748923c842567615f078d58801b9bd17da3ea09048b1b4a4c17e9f7abec52daba267483b5eb4947164dc8c4d59b5f1ac493e4e8a62e2c56364de8791f2e75a7d8714f5f384a71095f364964190f3aebfcf8ca6a69032642df91c9dd774926b5095bdbafb00f1222a23650807e1f5c72a6c167d2dd724ebf5d60fb8835d1ba5bbd16c407fd79eaa48264d12e233e653d834bdd4a343b6bc42c81e38473894b8220aa647488ba84fd36324174ba5c1071a975ce14c20928a0eccd299ecc181ec8f4458f0b4712bb3ed897306a2b1f329c7cc6bb399e01dd90916352c1be31c05ea81a0f03d3ed80855e55419128a4d2da793a63261f14bf6002546b1efcdb39ab303eec3f490dbfb177aa10ddc922deff24aa54beb4a5da0c4159b79457021a8c2252cfdc37301d29cf77a66b7fb7ed93e162539e841c22d6aba90a0df3e7ba6b2f33b7bf49426431422aae4415e98cb61f8a1dea2c576eb7494e733f4f3a8a17960510532ed9fbad6d044904914e12fefeb97e6cacaaa76a23ff137660cba2afd1cd22b1a5e0b66006ae1f581bcff08927a800cfea55900f851c350df27142de51f89ffe4d9c838d48aa62bb8a270bcb020000008c3d24ef5016e61fb14c91c530f4a4c5a5da14a3dabd97d7652911a017c0b0f6fc1cab334db6855df4857b934a5a4809336c32b4d3a8107742af878f39a9794de902f9704e7e017c771580624c8c8d1e5fa070bad33f5e979ec42dbe7effdeef7b62f8ce3583627e14c2e027b44f7327e14eec9c8b5590b1d00311a08092ba637f139b71a42c93a3f7192b551fda71fe0d0eb55496f41d4d51d464b504343309c181250b16335b42eaca0ad4feb2c6a11094b9cdbed6a6f35aeb0b08ba810e14df4a2447c457fbf4f1e429cc25733d3457f6f1bdb8ecc4e811bfe66743b6b5c8dfd236edadef283f879076c9fa7707391a5b5fef45cf814e1d2c5d3ed71b63080273de621f1187da05b1dc1527bb2a"}) socket$igmp(0x2, 0x3, 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x1, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000040), 0x7ff, r6, 0x0, 0x700}, 0x38) 9m11.941690513s ago: executing program 32 (id=216): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'team_slave_1\x00', &(0x7f0000000340)=@ethtool_eeprom={0x18, 0x2, 0x80000001}}) openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f00000005c0)=[@wrmsr={0x1e, 0x20, {0x410, 0x2}}, @wr_drn={0x6e, 0x20, {0x7}}, @cpuid={0x14, 0x18, {0xd06, 0x4}}, @rdmsr={0x32, 0x18, {0x10}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x7f}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x5}], 0xd8}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003180)={{0x0, 0x0, 0x80, {0xeeee0000, 0xffff1000, 0x5}}, "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", "0d82fb981d773a5ac39fd9e8a40bc7d141e458f8b75a36d652611077b32b8d5bccedcc88ba5ec8d2ded1ee81aba8ad160a6529d7b69011dad43ae82572676d41230542cb0701478cc2e49c5843384f6227083cf9c2cce88e71f95116a0975e1aa15031d71f883d09fc48bbe43005bb7747311ff40c2828b5ec2760cc046081fa2fcbff4ce35fc041a47a235eb3a667388985bc1a0f808433a6c92b2224ef462ee2f8596dcf1a08600af3e9b0e8f9107b5743eec2400fe9c14da3b6ce95c8126120f305ce905baed387d653bb171b7038f5d9847dc7c51b489cee81ec56395ea1f3eab0177858735c75c0e621234f6579c42e2cc149ee37b524d40276f041eb96d21cf8d5cd680184fd466765317fb4f0ebdb1c7ed20048fb237e6b2e65eba0c752d224398aa3f4a8da4dcdfc66a9d36b0f0cab3656f2703a0a64b3e55c9c8aed2277a6df9e074bb43299cd6a87f7b2427d8e3746ef205b9b2dabb7afa10ff328f689660c5a24d8546e0276c9b16cfeecf3723722a9098acee0d8befc40371454b7d33797fb330cd22eaa68e2c78f06d4cd107c4b2b07d06f7b4d811e05827e855962211cb512a0ab9ece9af2c05056ee35df54cbd419220d1605c611527d9b49056e4944a3dbe5cd0af9b3d29183c5c3328463867ff9efd2e99e69114e9ed79923c981ff2cbc321ba25250bd23a6d2a849ab4f8199431715e706c9b2f20127801418549b7c0deb14dc400c932bc870c6f2d05352a7c93bc6b3ae1572317740828b814e9a0e804a5887e313e608f6a83f40202b5e279aeae92aef66fca691dd54a7cdbe7245f1e5050254d1e56a6f76f52576da79d8596e80d8d989aba727febfc5792654be297b1f3b06945bba68e1350d4e821e6690fb2bb67e792af43fc8cad9c0faf18072dc699fce5969a4ed4d1fb9e0abed270c0ee10d17cfda4934d129d910db844d7293935318a6c45755e5a58d965be4e99da012a5efe43b891e6bf73e67b6735312221f56d1eaf7160ef4e37b2563556ccc91d2f46bc5b732127df58f31d146e63f3a934c0cfc1cb802c0ad48c3c977d1b0f0d8e4ce7574ad6ad4b4a0a2191e9ca1a42208d0b7b2ac037d7fc303db95aa66cf38b8930fa15b3d2a90baf89ee4ad559dc29d06692d8ea1af365c0ffe166029c9e74708cf6a2066989c29f037a3b79af65faa1111894b0c0aa183d38f07607da60ad905682227550549111d4ca7e2dadd6bc63f3fbb2b5c18ea9be1f8f85407249e9da735f9465b30330732870dc15a38d678847be0d3c7abd7d685f750e4f1ace7cd52b4b5052fda6f9760bf49f473c0417ada8157d2fc774eb81157caa5a90ec13f0bc747d44a7edb2ff3a2b508c1f20f151cb896a7880a5e697589607ddee002f714ce2a2e2a63abb6b2bc5e88799ec07c5d4e8d4739e74b050b7dfc4eb6afb6e1ce2b029f3687190f6ae07e89725c8fa77fc035c503580a94f46eed38beaebb28cfe1092f474d82ee0c477e719033da326b65a12521015c141d7f1edd9d2886610618b7cb653ad300de0f2bd292446c3a97c6f311f30ee1477871d0e6cfb0de6673c3048b738c1fb9d86e0c154c91834be69893eb971cf7196470f3711da09119dcb271336bdea36be97c06799f60ac82b18d3df0ef9a70533290afa8ab4463c5de802171b01c52a594f83c41caf6af3c9f381e247c24ffe671da98a363f4991b0486297ed1bc3dc7de6515f320c94ac7d36682b0b5808b29b212094503eda88d8e46add66f52e41e646709d3594880d1517d73187b491c8c61a0e46a975aacd74c3898c21863c15ce190cb6fe24a03ce8792825784db14b06a4eca1c2a85017f8bba4a5430fb97724b67c2ff5ade048d13c6f817232ac9a75162b44a02622845f82398b4a316908ee664655e183175925e23d0ba8c138297c955e1dbc26b283aaf0c735de6a7af8461970d728bf1b9af1d256f0708f35022946d1972e58549165b88f4d11528d6efb8491e490ee03d97830a4112e3a23ab369ffdd2f4287a7b4511baea3888bc4618bd6474a9f0bee74d767cc2d7b529f26349c59bae8d4cfb4a4c260742ac5361d3219bc7281cebad95ac0b18597bb571ebfd7ba1c18bf66f1fdccaddde0e987bdb1bfd3647ed9652d086e1a758247296915b44cfa7f4116d3860783a2f2ebe17d4cab95572bd8d58659a30b9439671bd2b3ab35757da3890e96cf67cdd55f0b08521f578c0e399a1e382261d25e8f650dfcabe4a0e05dd6195b3ef5227acfe07c63b0eb2de9c3df8694856ad19cef1c9c0be2b21c0dce1243be60c20641a623ed7847df53385112a7fbe4d177b6f03ca3f34fcfcc21461a89912754b7558ae15d6a13dfa9a6bfb7b57bfcae15d2713cf46fd627bb71944244af3ad6a74db6a219c394d26f73afc13e7a442ca1b269d33dd35cbc17fa7d726238dcf23fba9a0b789540b2a54b6b1fb64d38adf79122de9b8d268ada1312e8978bcbf31d643a26409bc550597cc541177f3abd9c78513cba4e60677fa9e19f43ad2ae0cb92d4edbe6152f616f12f7db50ba52c00c7f1d15257e44ef84bc4f3da0c8322dc50772ef938c99f563ec76a5d74187f1c4d6189bd1a5c655a79b7c72964e5f8d12542aec975067e3ee9602e2797ce56706c975b411c481b8288959a2bbf2c4783345d4bfd2dd7519466109d9ad640b847e255568d3b426309d83ad19e62463802724e63870bb54e2aab25d32e4f893f78e11e3233bf1e5ee20bcf05b0d813b0512c63ff2258d4343fece627a16880f462bad04e6c6ea47094db9ce9704beea2124961ee35d5e1ce4808b42c9088a8e4fb330bbda0e6aeb3972a95827b3e410ac31f681296e4ab6f98bb51a96ba1cdded6bf9fee904078f593e0247a92332dde45283cb3c89096ab078b975677ab7a575b1d32fb215aba0cdeeac0e322786b1a56c5fd0f046b1457d0c6069d4e9abe08b998a896eed1f2e5b815a5b9672921f66005d41f3a7deec0e334dee4cf987f5b7a184eacc47dc101fe7fff33b52f1a71485c4d14a7edb19f465a5d1cf4cecac081ea4f30ffa9624ccf37f01e33693d0d8ea7ed5ea8ad92ce7243735809c0c3189791d75b5f33ef562f87813f2e6c45acb947c29a96e3ab4c47a5ea55993543e54c4149000b050bf0410eff2ae5022a863608ddbdc6b44ef7a9e6ee43e4551c6559038505e284a5aeef8e233dbeb7dd5f3986146827b4c5575956e24afe77ec57dd355c5c816d0b67e12dfd9659a677742b8d62b8b12512e86842a263f5d760cf90affc7a86244dada684fdfa8e539eba12f629aa90620c60584a0a76305a2663ab78a4989c2af6ee6ae2af9e29198edb6df4bfe831b4214c627d57bd38a2e7be6eb1428f6e9be56d69c5d42292f9784aed4f050c0e1674d8f22dfcb53e5a5b1b383a2ea06c8c3ba9eb0b4e372977f1a711f8194968c849b98b97a24d924ce95a5af030ab780512ed48290a9cbdeeb9943ed93fa1d165b22e3f8fb6a9d6fdc2b51851a304b6defe2dd4dd3f1615c67cc71aaa8d472de2569f5652ab990026ba72698b5e6bf8091857d0e3b78ca52a8e1fd8a7660c1097d3cf591562518d47f6554057b847284612a763285c922312283e8340347fb555a14a53c8559ffed99bda2efbdbce265696a7c4042c12aee37a7218f29d314f67f295b65ab18d82363899ed1eb4ca903e16a38beecd85b57264e983148a3a7c48998fa9bc8c1a40f6f7659b0ce24f29aaa9b52d87f7e9f065802ce6ab640a1f0447ecf9011b4cce0c51d4681f4b2767c92353c3b3111e2daa74b1e03549320b80e30c70f2a99cd2e77faa40b98e071a5bad02ce30500a77b44249602f0f6b2866c5f622260ed9343c4a34ad8c86031e9367b0ad3ec26cd8f16e0b1266664af1677e458831f934e4e086feb16ada8cf0902f26d74770df033e33491957e907198ad88a9a433cc14d694325b0af03c63f00ed0257db5491bed2f3b09d03f14e2bd3925a4c4d7ef6c867f7757fcd414084c145e35953f23aa12960d1e20cb9a283744d3f8eb2481167cb48d3769ef87fb5f416e224d9976f455f96711f0187dc7e55966ffa6d39cbfda1c9411ee0710ba888af7bbda752e5c1b86b23f3fdc494753b9312f8cfeaecc1503511dbe326eb2f6cb1ed70f6fbaaa06cc664ca92c9db8a73297b9dcd2a4279530e202a84cde65c026e4eee1f90d3b661c2ec9effa2c0bc3ca7107f25ed88ac5e72b1fba3be7d060dd42fbbf649a0d3ac873784b299941a936b59dea9f301c6340ca6464006d2d72d106950d66922abd58898f6cab443543a49babd7994032bed988e394a02620c2c7720b4a5dff9af07fe82fff051d42cf12e2c910e842a8e81880c014007a72c290167378c6493bc452f121f0c146f23db609c3605ecf3605c9bc95d4178b1ab9bcc1e23463fee3cf5ea217addaa081789c46ff7862b24b73bb4d7c8d849af2290fdf99757005ddd25df4d82535f27614ad30244124650bf5c929a1fcecceaea0be3571725e199d03cc34d04791475532102684822837de1d806b3827f5c5a1aa017b5696b53dfb4de3d9234b5bf4a2ef691180b7b3ad0c9adc75df8814fcb6a66f1d598770fdeee2c8a595c60aede824dface31d64317ad2481f056cfda005e3ee62f0cefc820ac3be6ecdb8f721253bb39805bfa733c0a2b80c85185d2ce9f023c18eb0e830bb86d36f9bd48b52bc9d2229947c27f1436f93cac0f85f4706793a2db6a537a5d1cfd8c9a73678bf80faa6e899831c048734343e07cfa980500520137e3a6e4f03194a5b5214748923c842567615f078d58801b9bd17da3ea09048b1b4a4c17e9f7abec52daba267483b5eb4947164dc8c4d59b5f1ac493e4e8a62e2c56364de8791f2e75a7d8714f5f384a71095f364964190f3aebfcf8ca6a69032642df91c9dd774926b5095bdbafb00f1222a23650807e1f5c72a6c167d2dd724ebf5d60fb8835d1ba5bbd16c407fd79eaa48264d12e233e653d834bdd4a343b6bc42c81e38473894b8220aa647488ba84fd36324174ba5c1071a975ce14c20928a0eccd299ecc181ec8f4458f0b4712bb3ed897306a2b1f329c7cc6bb399e01dd90916352c1be31c05ea81a0f03d3ed80855e55419128a4d2da793a63261f14bf6002546b1efcdb39ab303eec3f490dbfb177aa10ddc922deff24aa54beb4a5da0c4159b79457021a8c2252cfdc37301d29cf77a66b7fb7ed93e162539e841c22d6aba90a0df3e7ba6b2f33b7bf49426431422aae4415e98cb61f8a1dea2c576eb7494e733f4f3a8a17960510532ed9fbad6d044904914e12fefeb97e6cacaaa76a23ff137660cba2afd1cd22b1a5e0b66006ae1f581bcff08927a800cfea55900f851c350df27142de51f89ffe4d9c838d48aa62bb8a270bcb020000008c3d24ef5016e61fb14c91c530f4a4c5a5da14a3dabd97d7652911a017c0b0f6fc1cab334db6855df4857b934a5a4809336c32b4d3a8107742af878f39a9794de902f9704e7e017c771580624c8c8d1e5fa070bad33f5e979ec42dbe7effdeef7b62f8ce3583627e14c2e027b44f7327e14eec9c8b5590b1d00311a08092ba637f139b71a42c93a3f7192b551fda71fe0d0eb55496f41d4d51d464b504343309c181250b16335b42eaca0ad4feb2c6a11094b9cdbed6a6f35aeb0b08ba810e14df4a2447c457fbf4f1e429cc25733d3457f6f1bdb8ecc4e811bfe66743b6b5c8dfd236edadef283f879076c9fa7707391a5b5fef45cf814e1d2c5d3ed71b63080273de621f1187da05b1dc1527bb2a"}) socket$igmp(0x2, 0x3, 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x1, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000040), 0x7ff, r6, 0x0, 0x700}, 0x38) 8m8.135525966s ago: executing program 5 (id=424): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000180)=0xffff7eb0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0xcd84, 0x7}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x7}, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="0f01c369930d00020066b85ce100000f23c80f21f86635040090000f23f8f30f09f2f08300130f01d50f20d86635080000000f22d8dbe9ba4200ec64660f38817382", 0x42}], 0x1, 0x40, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001400010025bd7000fddbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019640)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r2, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000002540)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0xb, r8, 0x0, r7}) 8m7.008415228s ago: executing program 5 (id=427): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1a9882, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)='[', 0x1}], 0x1) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) close(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000002c0)={0x0, 0x7}) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x3, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) 8m1.819213642s ago: executing program 5 (id=444): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) close(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x143b02) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x0, 0x2000000, @value}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0xee00, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) 8m0.990923962s ago: executing program 5 (id=447): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x7, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) mknodat(r4, &(0x7f0000000200)='./file0\x00', 0x8, 0x39bb) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x80000200000006, 0xfffffffffffffffe) socket(0x1d, 0x2, 0x1) 8m0.02043078s ago: executing program 5 (id=452): syz_usb_connect(0x3, 0x3f, &(0x7f00000028c0)={{0x12, 0x1, 0x110, 0x6b, 0xa1, 0x9c, 0x40, 0x1f32, 0x938e, 0xc823, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x8, 0x180, 0xc3, [{{0x9, 0x4, 0x5c, 0x5, 0x3, 0x8, 0x6, 0x50, 0x3, [], [{{0x9, 0x5, 0xb, 0x2, 0x40, 0x4, 0x1a, 0x3}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0xfb, 0xbf, 0x4}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x4, 0x20, 0xb3}}]}}]}}]}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000240)) 7m59.519277816s ago: executing program 5 (id=456): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000200)={0x9, "9f237d9bc601004d53fc9ac122d1a836d39ec72d00330297ce97923c6f963f53", 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CAP_PMU_CAPABILITY(r7, 0x4068aea3, &(0x7f00000002c0)={0xd4, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRESHEX=r1, @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9, r3}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000003a0007010000000000000000027c00000400fc800c00018098fe"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) 7m59.104597507s ago: executing program 33 (id=456): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000200)={0x9, "9f237d9bc601004d53fc9ac122d1a836d39ec72d00330297ce97923c6f963f53", 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CAP_PMU_CAPABILITY(r7, 0x4068aea3, &(0x7f00000002c0)={0xd4, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRESHEX=r1, @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9, r3}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000003a0007010000000000000000027c00000400fc800c00018098fe"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) 7m11.428605216s ago: executing program 0 (id=627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2, 0xffffffcb}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r2 = socket(0x10, 0x803, 0x0) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@any, 0x1}) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r6, r7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) 7m6.811580573s ago: executing program 0 (id=640): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x28020480) process_mrelease(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x10037f}, 0xffffffff, 0x7}) 7m6.29748205s ago: executing program 0 (id=641): r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) getrlimit(0x4, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 7m5.541647932s ago: executing program 0 (id=646): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="40012e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000954bbe20d9107255f2df0b060dbe713d045d08133cf2b87dfe381f9bf69deed2004d7c9196997ca560b395abfdc3d59b822caa95597e670ab4464c4cd75902ba272b40b2e1ac660aaeb5e1332ea13e7c16a752fb90ef096a1d48f97d0b6eb47985b711ad9341"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@isdn={0x22, 0x5, 0x8f, 0xfc}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 7m3.404015161s ago: executing program 0 (id=653): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r2 = gettid() unshare(0x64000600) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) read$FUSE(r0, &(0x7f0000003780)={0x2020}, 0xfffffffffffffc20) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 7m2.153489398s ago: executing program 0 (id=658): syz_usb_connect(0x1, 0x2d, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x1, 0xa, 0xf4, 0x77, 0x5, [], [{{0x9, 0x5, 0xf, 0x1, 0x40, 0xe8, 0x6, 0x95}}]}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x30, r1, 0x401, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x4, 0x84) socket(0x2, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) r7 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setsockopt$RDS_RECVERR(r7, 0x114, 0x3f, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002bbd7000fbdbdf250600000008000e007600000008000300c000000008000e008000000008000300cc000000080003000800000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="777e756e9228861b8b960c52474d5717eff347c60bd1bfaf566795b834bd7cff4fa78ae7e0866224068080e0a20a83e02fd02ac3ed4480440979406e953f89c00f27078fd99397ab513950658834323485fae415bcbb1fb3c9254c401eaa728829077b7babfc5751b8030000000000000074133922e5cefc4bf005314d9c3045abb61200"/147], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) 6m46.682555708s ago: executing program 34 (id=658): syz_usb_connect(0x1, 0x2d, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x1, 0xa, 0xf4, 0x77, 0x5, [], [{{0x9, 0x5, 0xf, 0x1, 0x40, 0xe8, 0x6, 0x95}}]}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x30, r1, 0x401, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x4, 0x84) socket(0x2, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) r7 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setsockopt$RDS_RECVERR(r7, 0x114, 0x3f, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002bbd7000fbdbdf250600000008000e007600000008000300c000000008000e008000000008000300cc000000080003000800000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="777e756e9228861b8b960c52474d5717eff347c60bd1bfaf566795b834bd7cff4fa78ae7e0866224068080e0a20a83e02fd02ac3ed4480440979406e953f89c00f27078fd99397ab513950658834323485fae415bcbb1fb3c9254c401eaa728829077b7babfc5751b8030000000000000074133922e5cefc4bf005314d9c3045abb61200"/147], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) 10.641429717s ago: executing program 6 (id=2050): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0xffffc000) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000000000)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3, 0x0, 0x80, 0x0, 0x2caaf9f6, r1}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x100000001, r2, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x68, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbb6076b5cad4f686dd6075e70000323a0020010000000000000000000000000000ff020000000000000000000000000001040090780000000060a3579e00002b00ff010000000000000000000000000001fe8000000000000000009bd789fd00bb6be2bb23887ae82100367eb0fa3adcc2443f44217bd7ddc8087139"], 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000300)={0x0, 0xe823, 0x3400, 0x1, 0x3c3}, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce01028297090212000100000000090400000002"], 0x0) listen(r4, 0xa1) shutdown(r4, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0xffffffffffffffff, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000099ff002c0010009500a30e5a6d77fbb49200"/40], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) unshare(0x22020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r8) 8.023478094s ago: executing program 2 (id=2058): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100100000040f20436120075b4d22d3a00000000bc9800090400000103697afbbebd72c46e73facd8b94d6d2589bc4d0a202c21c36e139c22092a8685f81e7aa66d7a12fa486c95b52274482a2e3a1c100000000000000"], 0x0) (async) r1 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x4010, r2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r1, 0x0, 0xf) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) r5 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x11) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @empty, 0xe}}, 0x24) r7 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x2f, 0x1, 0x0, "3ad38eff230c00000000202900000004100000410000000000000300", 0x32314d56}) (async, rerun: 64) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="001027"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000380)={0x6, 0x3800800, "6399d7c11d50737d98ad2af1e05d30ad6d0c99364455532c", {0x1000, 0x5}, 0xe91}) 7.669914295s ago: executing program 2 (id=2060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x24000000) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500007800000000000190780a010102ac1414aa050090780100000047000000000000000011000000000000ac1414bb440c0001640101004e210000443c0001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac1400bb00000000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x34) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0x5, &(0x7f0000006680)=0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x40010100, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0xfff}, 0x1b) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) 7.521524094s ago: executing program 6 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x5, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5c14d826, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000280)=0x10) shutdown(r4, 0x1) 7.519454256s ago: executing program 7 (id=2062): open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x57) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) 6.607594822s ago: executing program 6 (id=2064): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x2, &(0x7f0000000000)={0x7, 0x77, 0x0, 0x84080, 0xffffffffffffffff}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x5, r1}) socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4, 0x0, 0x1000}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000100)=0x5) 6.03083813s ago: executing program 2 (id=2066): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket(0x2, 0x80805, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/19, 0x13}, {0x0, 0x13}], 0x2) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203110902120001000000000904"], 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x101c, {0x0, 0x0, 0x101c, 0x3, 0xc, 0x2, 0x0, 0x5}}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, &(0x7f0000000180)) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @multicast, @void, {@arp={0x806, @generic={0x30e, 0x0, 0x6, 0xf, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, "7db9c540aad5200918833d627fcf88", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, "9a429ad6da"}}}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000340)={&(0x7f0000000300)=[{0x7, 0xb000, 0x1, &(0x7f0000000180)="9c"}, {0x5, 0x10001, 0x5, &(0x7f0000000200)="6011961fd3"}], 0x2}) 5.711742835s ago: executing program 7 (id=2068): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xffffff7ffffffeb6}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x10}}, 0x44804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fanotify_init(0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r3 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0x1, 0x4063, "57c1169b6664ea74326ac7bb62213059", 0x0, 0x0, 0x0, 0x0, 0xf4}) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) 5.476769869s ago: executing program 4 (id=2069): bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0x39, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1, 0x800, 0x6, 0x13, 0x602, 0x1}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019340)='net/snmp6\x00') pread64(r4, &(0x7f0000000300)=""/102383, 0x18fef, 0xffffffffe) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090064b2070000000000000800000000000000000000006100"], 0x0, 0x2d}, 0x12) 5.467663833s ago: executing program 7 (id=2070): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) socket$packet(0x11, 0x2, 0x300) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r4 = socket(0x1d, 0x4, 0x7) r5 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) ioctl$VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000c972c62709b75c4dd03c51fae745a55e091b93f69f3156c4c699c5338eb19792f74d87fe24cf6e714c2cc3f0d88ade865f58ccaa6d0912f26559a1b5809f34d5f89972641b94cc8fb40bdd7619acc7d9af2877b68639f8310de16d0ce872d38640c030d1c6485b3c14e423b724135bd8006edc9d6ef0bb58812c8fb7f17a76725d664597ef0e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000b509000002000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ff8aa5fae1f147f47f000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 5.005374204s ago: executing program 4 (id=2071): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x0, 0x2000000, @value}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0xee00, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a00140011007665742651e40e58a92f166964046500080017004e224e"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x4048000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 4.81249023s ago: executing program 4 (id=2073): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netlink\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x3a03, 0x100, 0x2, 0x1c2}, &(0x7f0000000440)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) io_uring_enter(r3, 0x47b8, 0x3bf6, 0x2, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) prlimit64(r7, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 4.633115056s ago: executing program 1 (id=2074): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x4c, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x316e6d29}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x402}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x83108a0715751750) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0xc5) 4.516320827s ago: executing program 6 (id=2075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)=@base={0x4, 0x10004, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x1}, 0x50) 4.319580304s ago: executing program 6 (id=2076): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffe) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r6 = dup(r5) read$FUSE(r6, &(0x7f0000005540)={0x2020}, 0x2020) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f046}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x20, 0x39, 0x300, 0x70bd2a, 0x25dfdbff, {0x7}, [@typed={0x5, 0x71, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xb3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20042800}, 0x20000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r7 = syz_open_pts(r0, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) ioctl$TCFLSH(r7, 0x540b, 0x2) 4.213766168s ago: executing program 7 (id=2077): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r2, 0x0, 0x0, 0x2000, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000640)=""/95, &(0x7f0000000280)=""/62}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x81a, 0x0, 0x476, 0x2}, 0x6) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x9de}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b102) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000cc0)="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", 0x101}, {&(0x7f0000000800)="f3b032353da3dbf5dee7d69392845df73e3c982f4465020300946da6464b3ec41d4a98b16bab4c937b891c347dbcf40829f38b09ada760fc44bcd67db9d6b0334e05707bd1292767a263eb845e32f81ccd76939f29dd1c76e623376f9a3c87a23175ad", 0x63}, {&(0x7f0000000880)="71a6a8185a397e3c764cda22d822e4924e99aa7afef8b191bd89103029650170020403fca0fa62de2a8ff3edcb3ee9563e5ee5f3175698672d3a46fa7a27457e3a34f60215bd50b9b2a9d0c3a5569bf322b5d693fe45a49fc6bba25027fe4baa40db07aac94bbfb202e65bb253bc690d7979feb027f0af6deb7c144a4c92faf11914fad4f64a5fcb79be493e690af8f3503abaf2e04fb1c47395359b72e43a4f34cc8c274d0d3ea695edef131bf5bc45ff65cf45e62b5c7720135534", 0xbc}, {&(0x7f0000000b80)="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", 0x139}, {&(0x7f0000000a00)="09bf6cec89a9d0de6e26bf436b2635353c37196d8c75803278d5d5321abfb149d21738ac58ac693edb5e9ba58e91e625e4a1676f2a060208f3757d6a3749ca52a3b8e962dca55e611ec1d8d12d", 0x4d}, {&(0x7f0000000940)="64669d62ee4f6b8b76c1918a1c315c070d9ed287856d3acaa804b9b282489c4eebb43c2be64eada242d0cfb57df804869be076b5206027a29d5606d3011a3b8504a8dc78c6c4cf87dca48ce09bf29c1e617ba5242ecadfa50c2427ee783bde3e4a3e136140e4b0316c6ed9cc2fe516377248d7e15bc3e265ca06296c3a9f148994270b", 0x83}, {&(0x7f0000000a80)="3e4770fc57369ce464d12490e1466a7186061e739a5b20e30e14c9bfafaee4b9da771d817d0ee91f0ed8eda61275c1121833750e7f2db48380f2cf73ea80bbb5a53efa4921d504aa70b886497a5d9f32ae0e4ba01dd491c755c31c1e7fb19751144ecdd663b70913f7ae3ea359675f0335b991bda497b8144843c2", 0x7b}], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.728297409s ago: executing program 4 (id=2078): open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x57) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) 3.39834082s ago: executing program 6 (id=2079): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205fc090900000027bd7000070000000500060000000e000a004e24ffffff"], 0x48}, 0x1, 0x400000000000000}, 0x0) r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_ep_write(r2, 0x1, 0xc, &(0x7f00000000c0)="09027f1126f7f1981cd8bf9f") r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r4, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a3125", 0x48, 0x2) read$char_usb(r3, &(0x7f0000000000)=""/172, 0xac) close_range(r4, r3, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="0baf96e27a120201"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0x2000007d, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r6}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r8, 0x0, 0x80000001}, 0x18) r9 = socket$kcm(0x21, 0x2, 0x2) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000540)={0x40, 0x22, 0xfb, {0xfb, 0x24, "2b478068b3cb29d3935ac3ccc85cd49d85a37cf1d057ad9c2be66f7e874825bcca163c0ab5e3a761e6658e58b0ea9b25dd273cd6c05408e8d1e493b10e44a0590fd274550f8b087a0db780d0d4d6d4ac7b5d81c22c2ca6e955f5ad28211312c11df7232efa9da969402bf2c09043591092db4705922957f58c0a26ba1847578c720b9e7bcf70d30d73e2884f0c9657c807391633346f7da95567801187ab09aa13a236f6991570500199b57f49b9016f63f84426f07e7921de1acd393b112d9669e161d57b088fa7ea56611571e81794490d7d6e453bec26533c95b2b8728491c20da163ece68351eb2ee474e3cdf8f5ccc2f7e98a1a95a6ac"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="0008f4000000039f5d5e0ee2701cd0987717a4fd23dcab7599d515b112aec1425ba038460675135aba229dcee0f98a18cce13c9be3fe9e9bed7ad9c1d8d216d9904600854ec96c2330f87015c30efdab2519468b826782a2fb58bf1c59dce740d7324c9854f9e8a62682326616562fb2caf4d0d625d0871af56127f584836fd707dc1b5e7cdae5b038fde8386c2866c868675df6fba56e231b8e26bd672a1726810d84e4c2dd430a389fdb76fb9f963a64fe22508c53716510908f"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}}) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYRES64=r9, @ANYRES64=r7, @ANYRES64=0x0, @ANYRES32=r9], 0x10b8}, 0x4000000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r2) socket$nl_generic(0x10, 0x3, 0x10) 3.196478925s ago: executing program 1 (id=2080): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xffffff7ffffffeb6}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x10}}, 0x44804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fanotify_init(0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r3 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0x1, 0x4063, "57c1169b6664ea74326ac7bb62213059", 0x0, 0x0, 0x0, 0x0, 0xf4}) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) 3.058841439s ago: executing program 4 (id=2081): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400080000fcffffff12000000080003", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000600ab000300000005007400060000000800a40002"], 0x48}, 0x1, 0x0, 0x0, 0x2400c804}, 0x0) 2.969454607s ago: executing program 1 (id=2082): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0x0, 0x9}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRESOCT, @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x2000c015}, 0x40844) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, 0x0, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x109101, 0x0) syslog(0x3, 0xffffffffffffffff, 0x1000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000004e40)=""/4111, 0x100f}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x2}, 0x8101}, {{0x0, 0x0, 0x0}, 0x40}], 0x5, 0x40010020, 0x0) 2.942180819s ago: executing program 4 (id=2083): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x9, 0x80, 0x0, 0x40000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) 2.850105654s ago: executing program 2 (id=2084): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff}) tkill(r1, 0x13) tkill(r1, 0x12) r4 = getpid() ptrace$setopts(0x4206, r4, 0x100, 0x0) waitid(0x2, r1, 0x0, 0x2, &(0x7f0000000340)) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.475734152s ago: executing program 7 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x2, 0xb6eb) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x20008840) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="100000009d4114b10001002000010000000104010882848b960c12182400000000000000000000007cba56afd6abd489d091980ecb41405d3feb9610250836e687a0691697fa8982dfbe42a19e6196a7777f0d9abadb773de0e53c254a2ada8855"], 0x28) 2.104883668s ago: executing program 1 (id=2086): bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0x39, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000019340)='net/snmp6\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.654342176s ago: executing program 1 (id=2087): r0 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xf84f}], 0x1, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x41, 0x4) 816.057455ms ago: executing program 1 (id=2088): iopl(0x3) semctl$GETALL(0x0, 0x0, 0xd, 0x0) semop(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2800047e) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x90) memfd_secret(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r5, r6, &(0x7f0000000100)=0x1010, 0x10001) 683.104085ms ago: executing program 2 (id=2089): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}], [], 0x6b}}) truncate(&(0x7f0000000140)='./file0\x00', 0x10001) creat(&(0x7f0000000080)='./file0\x00', 0xac) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000080)=0xffffffff) 147.793368ms ago: executing program 2 (id=2090): bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0x39, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1, 0x800, 0x6, 0x13, 0x602, 0x1}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x5, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 7 (id=2091): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r7 = dup2(r0, r1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x7, 0x0}, 0x8) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x4, &(0x7f00000004c0)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000500)='GPL\x00', 0x39000000, 0xec, &(0x7f0000000540)=""/236, 0x100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x0, 0xb, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x4, 0x3, 0xb, 0x8}, {0x3, 0x1, 0x7, 0x9}, {0x0, 0x3, 0x3, 0x2}, {0x5, 0x2, 0x9, 0xc}], 0x10, 0x3}, 0x94) r10 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r11, &(0x7f0000000140)='./file0\x00') readlinkat(r11, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x2, 0x0, 0x6, 0x5, 0x80, 0x10}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x7ff, 0xe7, &(0x7f0000000380)=""/231, 0x1e00, 0x20, '\x00', r6, @sk_skb=0x5, r7, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xf, 0xa92, 0x8}, 0x10, r8, r9, 0x0, &(0x7f00000007c0)=[r11], 0x0, 0x10, 0x1}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) kernel console output (not intermixed with test programs): ily_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 574.220828][T12600] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 574.220849][T12600] genl_family_rcv_msg_doit+0x209/0x2f0 [ 574.220867][T12600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 574.220889][T12600] ? bpf_lsm_capable+0x9/0x10 [ 574.220903][T12600] ? security_capable+0x7e/0x260 [ 574.220914][T12600] ? ns_capable+0xd7/0x110 [ 574.220931][T12600] genl_rcv_msg+0x55c/0x800 [ 574.220949][T12600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.220966][T12600] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 574.220984][T12600] netlink_rcv_skb+0x158/0x420 [ 574.220999][T12600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.221016][T12600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.221042][T12600] ? netlink_deliver_tap+0x1ae/0xd30 [ 574.221059][T12600] genl_rcv+0x28/0x40 [ 574.221074][T12600] netlink_unicast+0x5a7/0x870 [ 574.221090][T12600] ? __pfx_netlink_unicast+0x10/0x10 [ 574.221104][T12600] ? __asan_memset+0x23/0x50 [ 574.221115][T12600] ? __build_skb_around+0x278/0x3b0 [ 574.221129][T12600] netlink_sendmsg+0x8c8/0xdd0 [ 574.221146][T12600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.221166][T12600] ____sys_sendmsg+0xa98/0xc70 [ 574.221183][T12600] ? copy_msghdr_from_user+0x10a/0x160 [ 574.221196][T12600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.221219][T12600] ___sys_sendmsg+0x134/0x1d0 [ 574.221233][T12600] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.221263][T12600] __sys_sendmsg+0x16d/0x220 [ 574.221277][T12600] ? __pfx___sys_sendmsg+0x10/0x10 [ 574.221299][T12600] do_syscall_64+0xcd/0x4e0 [ 574.221314][T12600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.221326][T12600] RIP: 0033:0x7f6d1178eec9 [ 574.221336][T12600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.221351][T12600] RSP: 002b:00007f6d1265b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.221362][T12600] RAX: ffffffffffffffda RBX: 00007f6d119e5fa0 RCX: 00007f6d1178eec9 [ 574.221370][T12600] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 574.221376][T12600] RBP: 00007f6d1265b090 R08: 0000000000000000 R09: 0000000000000000 [ 574.221383][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.221389][T12600] R13: 00007f6d119e6038 R14: 00007f6d119e5fa0 R15: 00007ffea87c75a8 [ 574.221403][T12600] [ 574.711262][T12603] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1668'. [ 574.784875][T12608] siw: device registration error -23 [ 575.049653][ T24] usb 3-1: USB disconnect, device number 62 [ 575.054846][T12611] vivid-003: disconnect [ 575.110051][T12604] overlayfs: overlapping lowerdir path [ 575.191214][T12610] ntfs3(nullb0): Primary boot signature is not NTFS. [ 575.198434][T12610] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 575.413859][T12610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12610 comm=syz.6.1669 [ 575.426614][T12610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32785 sclass=netlink_audit_socket pid=12610 comm=syz.6.1669 [ 575.492145][T12605] vivid-003: reconnect [ 575.546311][T12616] xt_HMARK: proto mask must be zero with L3 mode [ 576.027281][T12629] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1674'. [ 576.036462][T12629] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 576.062084][T12629] netlink: 'syz.7.1674': attribute type 4 has an invalid length. [ 576.069963][T12629] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1674'. [ 576.897152][ T43] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 577.509211][T12632] overlayfs: overlapping lowerdir path [ 577.579321][T12633] ntfs3(nullb0): Primary boot signature is not NTFS. [ 577.588248][T12633] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 577.643472][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.704521][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.750841][T12627] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12627 comm=syz.4.1677 [ 577.763641][T12627] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32785 sclass=netlink_audit_socket pid=12627 comm=syz.4.1677 [ 577.901998][ T43] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 577.934773][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.162530][ T43] usb 7-1: config 0 descriptor?? [ 578.198122][ T43] usb 7-1: can't set config #0, error -71 [ 578.215993][ T5896] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 578.235008][ T43] usb 7-1: USB disconnect, device number 55 [ 578.363330][T12645] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 578.417404][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.448679][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.475241][ T5896] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 578.527407][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.556917][ T5896] usb 5-1: config 0 descriptor?? [ 579.022905][T12658] random: crng reseeded on system resumption [ 579.191544][ T43] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 579.304133][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 579.310481][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 579.319502][T12658] Restarting kernel threads ... [ 579.324692][T12658] Done restarting kernel threads. [ 579.334031][ T5896] usb 5-1: USB disconnect, device number 72 [ 579.359187][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 579.385546][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 579.538244][ T43] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 579.566083][ T43] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 579.586285][ T43] usb 3-1: Product: syz [ 579.593531][ T43] usb 3-1: Manufacturer: syz [ 579.606143][ T43] usb 3-1: SerialNumber: syz [ 579.631958][ T43] usb 3-1: config 0 descriptor?? [ 579.648996][T12651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 579.658789][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 579.664770][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 579.689222][T12666] openvswitch: netlink: Missing valid actions attribute. [ 579.716046][T12666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.816686][T12671] xt_HMARK: proto mask must be zero with L3 mode [ 579.881863][T12675] FAULT_INJECTION: forcing a failure. [ 579.881863][T12675] name failslab, interval 1, probability 0, space 0, times 0 [ 579.903142][T12675] CPU: 0 UID: 0 PID: 12675 Comm: syz.7.1688 Not tainted syzkaller #0 PREEMPT(full) [ 579.903172][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 579.903183][T12675] Call Trace: [ 579.903190][T12675] [ 579.903198][T12675] dump_stack_lvl+0x16c/0x1f0 [ 579.903227][T12675] should_fail_ex+0x512/0x640 [ 579.903249][T12675] ? __kmalloc_cache_noprof+0x5f/0x780 [ 579.903279][T12675] should_failslab+0xc2/0x120 [ 579.903303][T12675] __kmalloc_cache_noprof+0x72/0x780 [ 579.903331][T12675] ? nbp_vlan_add+0x1f4/0x410 [ 579.903360][T12675] ? nbp_vlan_add+0x1f4/0x410 [ 579.903383][T12675] nbp_vlan_add+0x1f4/0x410 [ 579.903410][T12675] br_vlan_info+0x159/0x3d0 [ 579.903432][T12675] ? __pfx_br_vlan_info+0x10/0x10 [ 579.903451][T12675] ? orc_sort_cmp+0xe0/0x120 [ 579.903474][T12675] ? arch_stack_walk+0xa6/0x100 [ 579.903502][T12675] br_process_vlan_info+0x5ec/0xa10 [ 579.903530][T12675] ? __pfx_stack_trace_save+0x10/0x10 [ 579.903548][T12675] ? __pfx_br_process_vlan_info+0x10/0x10 [ 579.903570][T12675] ? stack_depot_save_flags+0x29/0x9c0 [ 579.903592][T12675] ? __lock_acquire+0xb97/0x1ce0 [ 579.903615][T12675] ? kasan_save_stack+0x42/0x60 [ 579.903639][T12675] br_afspec+0x573/0x650 [ 579.903663][T12675] ? __pfx_br_afspec+0x10/0x10 [ 579.903682][T12675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.903714][T12675] br_setlink+0x374/0x630 [ 579.903737][T12675] ? __pfx_br_setlink+0x10/0x10 [ 579.903786][T12675] ? __lock_acquire+0x62e/0x1ce0 [ 579.903810][T12675] ? __pfx_br_setlink+0x10/0x10 [ 579.903830][T12675] rtnl_bridge_setlink+0x56a/0x740 [ 579.903852][T12675] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 579.903875][T12675] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 579.903895][T12675] rtnetlink_rcv_msg+0x3c6/0xe90 [ 579.903920][T12675] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.903950][T12675] ? ref_tracker_free+0x37c/0x830 [ 579.903976][T12675] netlink_rcv_skb+0x158/0x420 [ 579.904006][T12675] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.904031][T12675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.904064][T12675] ? netlink_deliver_tap+0x1ae/0xd30 [ 579.904092][T12675] netlink_unicast+0x5a7/0x870 [ 579.904118][T12675] ? __pfx_netlink_unicast+0x10/0x10 [ 579.904142][T12675] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 579.904173][T12675] netlink_sendmsg+0x8c8/0xdd0 [ 579.904201][T12675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.904235][T12675] ____sys_sendmsg+0xa98/0xc70 [ 579.904262][T12675] ? copy_msghdr_from_user+0x10a/0x160 [ 579.904284][T12675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.904322][T12675] ___sys_sendmsg+0x134/0x1d0 [ 579.904345][T12675] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.904398][T12675] __sys_sendmsg+0x16d/0x220 [ 579.904420][T12675] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.904458][T12675] do_syscall_64+0xcd/0x4e0 [ 579.904483][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.904500][T12675] RIP: 0033:0x7fe938d8eec9 [ 579.904514][T12675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.904531][T12675] RSP: 002b:00007fe939ce6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.904549][T12675] RAX: ffffffffffffffda RBX: 00007fe938fe5fa0 RCX: 00007fe938d8eec9 [ 579.904561][T12675] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 579.904571][T12675] RBP: 00007fe939ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 579.904582][T12675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.904593][T12675] R13: 00007fe938fe6038 R14: 00007fe938fe5fa0 R15: 00007ffe7d276fc8 [ 579.904617][T12675] [ 580.575386][T12685] FAULT_INJECTION: forcing a failure. [ 580.575386][T12685] name failslab, interval 1, probability 0, space 0, times 0 [ 580.588322][T12685] CPU: 0 UID: 0 PID: 12685 Comm: syz.6.1692 Not tainted syzkaller #0 PREEMPT(full) [ 580.588349][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 580.588360][T12685] Call Trace: [ 580.588367][T12685] [ 580.588375][T12685] dump_stack_lvl+0x16c/0x1f0 [ 580.588404][T12685] should_fail_ex+0x512/0x640 [ 580.588426][T12685] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 580.588448][T12685] should_failslab+0xc2/0x120 [ 580.588473][T12685] kmem_cache_alloc_node_noprof+0x78/0x770 [ 580.588491][T12685] ? __alloc_skb+0x2b2/0x380 [ 580.588517][T12685] ? __alloc_skb+0x2b2/0x380 [ 580.588536][T12685] __alloc_skb+0x2b2/0x380 [ 580.588556][T12685] ? __pfx___alloc_skb+0x10/0x10 [ 580.588577][T12685] ? genl_rcv_msg+0x4d0/0x800 [ 580.588602][T12685] ? genl_rcv_msg+0x4bb/0x800 [ 580.588636][T12685] netlink_ack+0x15d/0xb80 [ 580.588669][T12685] netlink_rcv_skb+0x332/0x420 [ 580.588694][T12685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 580.588723][T12685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.588758][T12685] ? netlink_deliver_tap+0x1ae/0xd30 [ 580.588786][T12685] genl_rcv+0x28/0x40 [ 580.588811][T12685] netlink_unicast+0x5a7/0x870 [ 580.588840][T12685] ? __pfx_netlink_unicast+0x10/0x10 [ 580.588865][T12685] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 580.588897][T12685] netlink_sendmsg+0x8c8/0xdd0 [ 580.588926][T12685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.588961][T12685] ____sys_sendmsg+0xa98/0xc70 [ 580.588989][T12685] ? copy_msghdr_from_user+0x10a/0x160 [ 580.589011][T12685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.589051][T12685] ___sys_sendmsg+0x134/0x1d0 [ 580.589075][T12685] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.589131][T12685] __sys_sendmsg+0x16d/0x220 [ 580.589153][T12685] ? __pfx___sys_sendmsg+0x10/0x10 [ 580.589193][T12685] do_syscall_64+0xcd/0x4e0 [ 580.589225][T12685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.589244][T12685] RIP: 0033:0x7f7c3938eec9 [ 580.589261][T12685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.589277][T12685] RSP: 002b:00007f7c3a17b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.589296][T12685] RAX: ffffffffffffffda RBX: 00007f7c395e5fa0 RCX: 00007f7c3938eec9 [ 580.589308][T12685] RDX: 0000000000000080 RSI: 0000200000002b40 RDI: 0000000000000004 [ 580.589319][T12685] RBP: 00007f7c3a17b090 R08: 0000000000000000 R09: 0000000000000000 [ 580.589330][T12685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.589340][T12685] R13: 00007f7c395e6038 R14: 00007f7c395e5fa0 R15: 00007ffd029271a8 [ 580.589366][T12685] [ 580.986041][T12687] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1689'. [ 580.995490][T12687] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 581.071236][T12688] netlink: 'syz.7.1689': attribute type 4 has an invalid length. [ 581.079354][T12688] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1689'. [ 581.171480][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.305694][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.533384][T12699] autofs: Bad value for 'fd' [ 581.622379][ T5938] usb 3-1: USB disconnect, device number 63 [ 581.686826][T12701] autofs: Bad value for 'fd' [ 582.974965][T12718] autofs: Bad value for 'fd' [ 583.257553][T12725] vivid-003: disconnect [ 584.024349][T12721] vivid-003: reconnect [ 584.283561][T12754] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1705'. [ 584.293718][T12754] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 584.323718][T12754] netlink: 'syz.6.1705': attribute type 4 has an invalid length. [ 584.331536][T12754] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1705'. [ 585.142543][T12763] bridge0: port 4(team0) entered blocking state [ 585.149292][T12763] bridge0: port 4(team0) entered disabled state [ 585.156292][T12763] team0: entered allmulticast mode [ 585.161429][T12763] team_slave_1: entered allmulticast mode [ 585.169192][T12763] dummy0: entered allmulticast mode [ 585.183605][T12763] team0: entered promiscuous mode [ 585.188775][T12763] team_slave_1: entered promiscuous mode [ 585.195558][T12763] dummy0: entered promiscuous mode [ 585.203601][T12763] bridge0: port 4(team0) entered blocking state [ 585.209953][T12763] bridge0: port 4(team0) entered forwarding state [ 585.401601][ T30] audit: type=1400 audit(2000000295.236:1406): avc: denied { read } for pid=12761 comm="syz.1.1708" path="socket:[45381]" dev="sockfs" ino=45381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 585.743677][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1711'. [ 585.747286][T12772] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1709'. [ 585.916029][ T5896] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 586.136019][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.153867][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 586.175860][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 586.262867][ T43] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 586.276472][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 586.384471][ T5896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 586.435073][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.455760][ T5896] usb 2-1: config 0 descriptor?? [ 586.457050][ T43] usb 8-1: Using ep0 maxpacket: 8 [ 586.488491][ T43] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 586.506599][ T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 586.519136][ T43] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.566070][ T43] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.586032][ T43] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.610537][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.678891][ T5896] usbhid 2-1:0.0: can't add hid device: -71 [ 586.684986][ T5896] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 586.699666][ T5896] usb 2-1: USB disconnect, device number 69 [ 586.843186][T12789] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1715'. [ 586.932475][T12791] siw: device registration error -23 [ 587.052270][T12793] siw: device registration error -23 [ 587.085290][ T43] usb 8-1: GET_CAPABILITIES returned 0 [ 587.396422][ T43] usbtmc 8-1:16.0: can't read capabilities [ 587.936144][ T977] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 588.157979][ T977] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 588.166689][ T977] usb 7-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 588.193925][ T977] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 588.204845][ T977] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 588.219972][ T977] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 588.231077][ T977] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 588.239218][ T977] usb 7-1: Product: syz [ 588.243459][ T977] usb 7-1: Manufacturer: syz [ 588.452799][T12813] random: crng reseeded on system resumption [ 588.548017][T12813] Restarting kernel threads ... [ 588.553332][T12813] Done restarting kernel threads. [ 588.700852][ T977] cdc_wdm 7-1:1.0: skipping garbage [ 588.710966][ T977] cdc_wdm 7-1:1.0: skipping garbage [ 588.719578][ T977] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 588.786748][T12816] openvswitch: netlink: Missing valid actions attribute. [ 588.793821][T12816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.973541][ T43] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 589.107595][ T24] usb 7-1: USB disconnect, device number 56 [ 589.119351][ T977] usb 8-1: USB disconnect, device number 44 [ 589.285240][ T43] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 589.470649][ T43] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 589.571061][ T43] usb 2-1: config 5 has no interface number 0 [ 589.591087][ T43] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 589.604525][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.613184][ T43] usb 2-1: Product: syz [ 589.623630][ T43] usb 2-1: Manufacturer: syz [ 589.629233][ T43] usb 2-1: SerialNumber: syz [ 589.634882][ T30] audit: type=1400 audit(2000000299.926:1407): avc: denied { create } for pid=12827 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 589.665524][ T30] audit: type=1400 audit(2000000299.926:1408): avc: denied { write } for pid=12827 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 589.761550][T12831] overlayfs: overlapping lowerdir path [ 589.829732][T12832] ntfs3(nullb0): Primary boot signature is not NTFS. [ 589.896827][T12832] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 590.333466][ T977] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 590.580583][T12835] overlayfs: overlapping lowerdir path [ 590.655280][T12840] ntfs3(nullb0): Primary boot signature is not NTFS. [ 590.662962][T12840] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 590.688337][T12840] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12840 comm=syz.2.1729 [ 590.701174][T12840] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32785 sclass=netlink_audit_socket pid=12840 comm=syz.2.1729 [ 591.374902][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.628369][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.674526][ T977] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 591.684192][ T5896] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 591.851670][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.883001][ T977] usb 5-1: config 0 descriptor?? [ 591.938183][T12850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.995039][ T43] comedi comedi5: Wrong number of endpoints [ 591.999256][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.006021][ T43] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 592.036073][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.055817][ T5896] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 592.059717][ T43] usb 2-1: USB disconnect, device number 70 [ 592.099248][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.113836][ T977] usbhid 5-1:0.0: can't add hid device: -71 [ 592.130829][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 592.140326][ T5896] usb 3-1: config 0 descriptor?? [ 592.318696][ T977] usb 5-1: USB disconnect, device number 73 [ 592.492096][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 592.506657][ T30] audit: type=1400 audit(2000000302.796:1409): avc: denied { associate } for pid=12854 comm="syz.7.1734" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 592.506999][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 592.624944][T12857] openvswitch: netlink: Missing valid actions attribute. [ 592.635740][T12857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.666694][ T5896] usb 3-1: USB disconnect, device number 64 [ 592.916208][T12867] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1737'. [ 592.925667][T12867] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 592.934937][ T977] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 592.971831][T12867] netlink: 'syz.6.1737': attribute type 4 has an invalid length. [ 592.979639][T12867] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1737'. [ 593.243045][ T30] audit: type=1400 audit(2000000303.536:1410): avc: denied { sqpoll } for pid=12863 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 593.309235][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'. [ 593.418441][ T977] usb 8-1: unable to get BOS descriptor or descriptor too short [ 593.429291][ T977] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.443069][ T977] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.920644][ T977] usb 8-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 593.940524][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.949321][ T977] usb 8-1: Product: syz [ 593.953989][ T977] usb 8-1: Manufacturer: syz [ 593.961809][ T977] usb 8-1: SerialNumber: syz [ 593.983372][ T977] usb 8-1: config 0 descriptor?? [ 593.994751][ T977] pn533_usb 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 594.270563][ T977] usb 8-1: USB disconnect, device number 45 [ 594.448687][T12889] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1742'. [ 594.868304][T12899] netlink: 'syz.4.1741': attribute type 12 has an invalid length. [ 594.927495][T12900] siw: device registration error -23 [ 595.260496][ T30] audit: type=1400 audit(2000000305.436:1411): avc: denied { read } for pid=12895 comm="syz.1.1745" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 595.413638][ T30] audit: type=1400 audit(2000000305.446:1412): avc: denied { open } for pid=12895 comm="syz.1.1745" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 595.438680][ T30] audit: type=1400 audit(2000000305.486:1413): avc: denied { ioctl } for pid=12895 comm="syz.1.1745" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 595.601239][T12906] siw: device registration error -23 [ 596.284468][ T30] audit: type=1400 audit(2000000306.496:1414): avc: denied { unlink } for pid=12908 comm="syz.1.1748" name="#20" dev="tmpfs" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 596.320683][T12921] vivid-002: disconnect [ 597.156842][T12927] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1753'. [ 597.166477][T12927] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 597.241069][T12928] netlink: 'syz.7.1753': attribute type 4 has an invalid length. [ 597.248901][T12928] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1753'. [ 597.577088][T12915] vivid-002: reconnect [ 598.449688][ T30] audit: type=1400 audit(2000000308.736:1415): avc: denied { bind } for pid=12943 comm="syz.1.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 598.896267][T12949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1760'. [ 599.497504][T12952] openvswitch: netlink: Missing valid actions attribute. [ 599.512307][T12952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.602323][T12950] wg1: entered promiscuous mode [ 599.607316][T12950] wg1: entered allmulticast mode [ 599.632557][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 600.032331][ T5885] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 600.151837][T12969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1766'. [ 600.161574][T12969] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 600.241379][T12970] netlink: 'syz.1.1766': attribute type 4 has an invalid length. [ 600.249254][T12970] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1766'. [ 600.582630][T12972] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1767'. [ 600.703339][ T5885] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 600.713333][ T5885] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 600.735782][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 600.901475][ T5885] usb 5-1: config 1 has no interface number 0 [ 600.999743][ T5885] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 601.021000][ T5885] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 601.035331][ T5885] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 601.044802][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.148988][ T5885] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 601.416315][T12959] befs: (nullb0): invalid magic header [ 601.434004][ T30] audit: type=1400 audit(2000000311.666:1416): avc: denied { lock } for pid=12958 comm="syz.4.1763" path="socket:[45945]" dev="sockfs" ino=45945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 601.470558][ T30] audit: type=1400 audit(2000000311.666:1417): avc: denied { mounton } for pid=12958 comm="syz.4.1763" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 602.306073][ T30] audit: type=1400 audit(2000000312.586:1418): avc: denied { create } for pid=12958 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 602.331213][ T977] IPVS: starting estimator thread 0... [ 602.340134][ T30] audit: type=1400 audit(2000000312.586:1419): avc: denied { setopt } for pid=12958 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 602.457792][T12992] IPVS: using max 73 ests per chain, 175200 per kthread [ 602.706034][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 602.845993][ T977] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 603.047736][T13008] random: crng reseeded on system resumption [ 603.359888][ T5885] snd_usb_pod 5-1:1.1: set_interface failed [ 603.382026][ T5885] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 603.399717][ T5885] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 603.412854][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.425269][T13008] Restarting kernel threads ... [ 603.430634][T13008] Done restarting kernel threads. [ 603.432898][ T5885] usb 5-1: USB disconnect, device number 74 [ 603.450071][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.482224][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 603.589387][ T977] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 603.614078][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.766300][ T24] usb 3-1: config 0 descriptor?? [ 603.778649][ T977] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 603.882348][ T977] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 603.896801][T13006] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 603.905410][ T977] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.147619][ T977] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 604.159443][ T977] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 604.192658][ T977] usb 7-1: Product: syz [ 604.199345][ T977] usb 7-1: Manufacturer: syz [ 604.322930][ T977] cdc_wdm 7-1:1.0: skipping garbage [ 604.329015][T13024] openvswitch: netlink: Missing valid actions attribute. [ 604.358951][ T24] logitech 0003:046D:C24F.0028: item fetching failed at offset 5/7 [ 604.368860][ T977] cdc_wdm 7-1:1.0: skipping garbage [ 604.384305][ T24] logitech 0003:046D:C24F.0028: parse failed [ 604.386562][T13024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.403843][ T977] cdc_wdm 7-1:1.0: skipping garbage [ 604.410139][ T977] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 604.410930][ T24] logitech 0003:046D:C24F.0028: probe with driver logitech failed with error -22 [ 604.524815][ T977] usb 7-1: USB disconnect, device number 57 [ 604.561077][ T24] usb 3-1: USB disconnect, device number 65 [ 604.733679][T13021] netlink: 'syz.1.1778': attribute type 21 has an invalid length. [ 604.742676][T13021] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1778'. [ 604.754220][T13021] netlink: 'syz.1.1778': attribute type 21 has an invalid length. [ 604.765961][T13021] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1778'. [ 604.886020][ T5933] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 605.057026][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 605.065524][ T5933] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 605.078695][ T5933] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 605.091203][ T5933] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 605.101727][ T5933] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.114933][ T5933] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 605.146015][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.490622][ T5933] usb 5-1: GET_CAPABILITIES returned 0 [ 605.505976][ T5933] usbtmc 5-1:16.0: can't read capabilities [ 605.877626][T13044] netlink: 'syz.6.1787': attribute type 4 has an invalid length. [ 605.893730][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.509732][T13052] autofs: Bad value for 'fd' [ 607.570416][ T5933] usb 5-1: USB disconnect, device number 75 [ 608.081034][T13064] random: crng reseeded on system resumption [ 608.121506][T13064] Restarting kernel threads ... [ 608.127058][T13064] Done restarting kernel threads. [ 608.441030][ T30] audit: type=1400 audit(2000000318.736:1420): avc: denied { getopt } for pid=13067 comm="syz.7.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 608.509447][T13070] openvswitch: netlink: Actions may not be safe on all matching packets [ 608.520437][ T30] audit: type=1400 audit(2000000318.736:1421): avc: denied { ioctl } for pid=13067 comm="syz.7.1793" path="socket:[46446]" dev="sockfs" ino=46446 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 608.545992][ T30] audit: type=1400 audit(2000000318.736:1422): avc: denied { getopt } for pid=13067 comm="syz.7.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 608.600668][T13072] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1797'. [ 608.752589][T13076] siw: device registration error -23 [ 609.109122][T13085] overlayfs: overlapping lowerdir path [ 609.180731][T13086] ntfs3(nullb0): Primary boot signature is not NTFS. [ 609.190480][T13086] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 609.606077][ T5896] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 609.744562][T13093] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1802'. [ 609.753849][T13093] FAULT_INJECTION: forcing a failure. [ 609.753849][T13093] name failslab, interval 1, probability 0, space 0, times 0 [ 609.767635][T13093] CPU: 0 UID: 0 PID: 13093 Comm: syz.6.1802 Not tainted syzkaller #0 PREEMPT(full) [ 609.767661][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.767671][T13093] Call Trace: [ 609.767678][T13093] [ 609.767685][T13093] dump_stack_lvl+0x16c/0x1f0 [ 609.767711][T13093] should_fail_ex+0x512/0x640 [ 609.767731][T13093] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 609.767744][T13093] should_failslab+0xc2/0x120 [ 609.767759][T13093] kmem_cache_alloc_node_noprof+0x78/0x770 [ 609.767770][T13093] ? __alloc_skb+0x2b2/0x380 [ 609.767786][T13093] ? __alloc_skb+0x2b2/0x380 [ 609.767797][T13093] __alloc_skb+0x2b2/0x380 [ 609.767809][T13093] ? __pfx___alloc_skb+0x10/0x10 [ 609.767822][T13093] ? genl_rcv_msg+0x4d0/0x800 [ 609.767839][T13093] ? genl_rcv_msg+0x4bb/0x800 [ 609.767858][T13093] netlink_ack+0x15d/0xb80 [ 609.767877][T13093] netlink_rcv_skb+0x332/0x420 [ 609.767892][T13093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.767909][T13093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.767930][T13093] ? netlink_deliver_tap+0x1ae/0xd30 [ 609.767946][T13093] genl_rcv+0x28/0x40 [ 609.767960][T13093] netlink_unicast+0x5a7/0x870 [ 609.767983][T13093] ? __pfx_netlink_unicast+0x10/0x10 [ 609.767998][T13093] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 609.768017][T13093] netlink_sendmsg+0x8c8/0xdd0 [ 609.768034][T13093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.768054][T13093] ____sys_sendmsg+0xa98/0xc70 [ 609.768071][T13093] ? copy_msghdr_from_user+0x10a/0x160 [ 609.768085][T13093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.768107][T13093] ___sys_sendmsg+0x134/0x1d0 [ 609.768122][T13093] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.768151][T13093] __sys_sendmsg+0x16d/0x220 [ 609.768165][T13093] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.768187][T13093] do_syscall_64+0xcd/0x4e0 [ 609.768202][T13093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.768215][T13093] RIP: 0033:0x7f7c3938eec9 [ 609.768226][T13093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.768237][T13093] RSP: 002b:00007f7c3a17b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.768248][T13093] RAX: ffffffffffffffda RBX: 00007f7c395e5fa0 RCX: 00007f7c3938eec9 [ 609.768255][T13093] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000005 [ 609.768261][T13093] RBP: 00007f7c3a17b090 R08: 0000000000000000 R09: 0000000000000000 [ 609.768268][T13093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.768274][T13093] R13: 00007f7c395e6038 R14: 00007f7c395e5fa0 R15: 00007ffd029271a8 [ 609.768288][T13093] [ 610.136310][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.148853][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.158786][ T5896] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 610.167815][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.177644][ T5896] usb 5-1: config 0 descriptor?? [ 610.197188][ T5933] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 610.246923][T13098] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1805'. [ 610.261175][T13098] FAULT_INJECTION: forcing a failure. [ 610.261175][T13098] name failslab, interval 1, probability 0, space 0, times 0 [ 610.275064][T13098] CPU: 1 UID: 0 PID: 13098 Comm: syz.7.1805 Not tainted syzkaller #0 PREEMPT(full) [ 610.275092][T13098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 610.275104][T13098] Call Trace: [ 610.275111][T13098] [ 610.275118][T13098] dump_stack_lvl+0x16c/0x1f0 [ 610.275147][T13098] should_fail_ex+0x512/0x640 [ 610.275175][T13098] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 610.275197][T13098] should_failslab+0xc2/0x120 [ 610.275220][T13098] kmem_cache_alloc_node_noprof+0x78/0x770 [ 610.275238][T13098] ? __alloc_skb+0x2b2/0x380 [ 610.275265][T13098] ? __alloc_skb+0x2b2/0x380 [ 610.275283][T13098] __alloc_skb+0x2b2/0x380 [ 610.275303][T13098] ? __pfx___alloc_skb+0x10/0x10 [ 610.275324][T13098] ? genl_rcv_msg+0x4d0/0x800 [ 610.275349][T13098] ? genl_rcv_msg+0x4bb/0x800 [ 610.275382][T13098] netlink_ack+0x15d/0xb80 [ 610.275415][T13098] netlink_rcv_skb+0x332/0x420 [ 610.275439][T13098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.275467][T13098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.275501][T13098] ? netlink_deliver_tap+0x1ae/0xd30 [ 610.275529][T13098] genl_rcv+0x28/0x40 [ 610.275552][T13098] netlink_unicast+0x5a7/0x870 [ 610.275580][T13098] ? __pfx_netlink_unicast+0x10/0x10 [ 610.275603][T13098] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 610.275634][T13098] netlink_sendmsg+0x8c8/0xdd0 [ 610.275662][T13098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.275696][T13098] ____sys_sendmsg+0xa98/0xc70 [ 610.275724][T13098] ? copy_msghdr_from_user+0x10a/0x160 [ 610.275745][T13098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.275783][T13098] ___sys_sendmsg+0x134/0x1d0 [ 610.275807][T13098] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.275861][T13098] __sys_sendmsg+0x16d/0x220 [ 610.275886][T13098] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.275921][T13098] do_syscall_64+0xcd/0x4e0 [ 610.275945][T13098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.275962][T13098] RIP: 0033:0x7fe938d8eec9 [ 610.275978][T13098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.275994][T13098] RSP: 002b:00007fe939ce6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.276012][T13098] RAX: ffffffffffffffda RBX: 00007fe938fe5fa0 RCX: 00007fe938d8eec9 [ 610.276023][T13098] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000005 [ 610.276034][T13098] RBP: 00007fe939ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 610.276044][T13098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.276054][T13098] R13: 00007fe938fe6038 R14: 00007fe938fe5fa0 R15: 00007ffe7d276fc8 [ 610.276078][T13098] [ 610.606006][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 610.613871][ T5933] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 610.635068][T13102] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1803'. [ 610.653505][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 610.663468][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 610.673961][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 610.689626][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 610.708830][ T5896] usb 5-1: USB disconnect, device number 76 [ 610.715748][ T5933] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.837097][ T5933] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.846497][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.102184][T13117] random: crng reseeded on system resumption [ 611.289021][ T5933] usb 3-1: GET_CAPABILITIES returned 0 [ 611.296711][ T5933] usbtmc 3-1:16.0: can't read capabilities [ 611.322493][T13117] Restarting kernel threads ... [ 611.327953][T13117] Done restarting kernel threads. [ 611.544205][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 611.710614][ T30] audit: type=1400 audit(2000000322.006:1423): avc: denied { ioctl } for pid=13123 comm="syz.4.1813" path="socket:[47158]" dev="sockfs" ino=47158 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 611.717582][ T43] hid-generic 0001:0009:0001.0029: item fetching failed at offset 0/1 [ 611.987192][T13128] IPVS: length: 4096 != 8 [ 611.995717][ T24] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 612.050248][ T43] hid-generic 0001:0009:0001.0029: probe with driver hid-generic failed with error -22 [ 612.156474][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 612.160958][ T30] audit: type=1400 audit(2000000322.456:1424): avc: denied { ioctl } for pid=13129 comm="syz.1.1814" path="socket:[46734]" dev="sockfs" ino=46734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 612.174773][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.240283][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.256508][ T24] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 612.274644][ T30] audit: type=1400 audit(2000000322.566:1425): avc: denied { setopt } for pid=13129 comm="syz.1.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 612.303889][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.438540][ T24] usb 7-1: config 0 descriptor?? [ 612.502740][ T30] audit: type=1400 audit(2000000322.796:1426): avc: denied { map } for pid=13142 comm="syz.7.1817" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 612.554878][ T30] audit: type=1400 audit(2000000322.826:1427): avc: denied { call } for pid=13142 comm="syz.7.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 612.598870][T13145] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1818'. [ 612.604835][ T30] audit: type=1400 audit(2000000322.826:1428): avc: denied { read } for pid=13142 comm="syz.7.1817" path="socket:[46753]" dev="sockfs" ino=46753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 612.661663][T13147] autofs: Bad value for 'fd' [ 612.719848][ T5933] usb 3-1: USB disconnect, device number 66 [ 612.786155][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 612.804346][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'. [ 612.889150][ T24] ft260 0003:0403:6030.002A: item fetching failed at offset 0/2 [ 612.901451][ T24] ft260 0003:0403:6030.002A: failed to parse HID [ 612.972942][ T24] ft260 0003:0403:6030.002A: probe with driver ft260 failed with error -22 [ 613.330209][ T24] usb 7-1: USB disconnect, device number 58 [ 613.443980][T13161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1823'. [ 613.453532][T13161] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 613.529698][T13162] netlink: 'syz.2.1823': attribute type 4 has an invalid length. [ 613.537535][T13162] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1823'. [ 614.115069][T13168] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1825'. [ 614.965699][T13182] netlink: 'syz.2.1827': attribute type 12 has an invalid length. [ 615.124204][T13189] No control pipe specified [ 615.436042][ T30] audit: type=1400 audit(2000000325.596:1429): avc: denied { read } for pid=13184 comm="syz.1.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 615.460786][T13188] autofs: Bad value for 'fd' [ 615.633513][ T5896] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 615.669439][T13199] tmpfs: Unknown parameter 'noswcp' [ 615.796026][ T43] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 615.826300][ T5896] usb 8-1: Using ep0 maxpacket: 8 [ 615.836017][ T5896] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.858485][ T5896] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.867579][T13201] : entered promiscuous mode [ 616.139097][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 616.234683][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.245178][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 616.258678][ T5896] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.259223][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.291750][ T43] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 616.302574][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.323414][ T43] usb 3-1: Product: syz [ 616.331018][ T5896] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.332392][ T43] usb 3-1: Manufacturer: syz [ 616.369661][ T43] usb 3-1: SerialNumber: syz [ 616.400931][ T30] audit: type=1400 audit(2000000326.696:1430): avc: denied { read write } for pid=13206 comm="syz.4.1840" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 616.434286][T13207] bridge_slave_0: default FDB implementation only supports local addresses [ 616.444917][ T43] usb 3-1: config 0 descriptor?? [ 616.450216][ T5896] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.469872][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.474785][T13195] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 616.487345][ T43] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 616.506883][ T30] audit: type=1400 audit(2000000326.696:1431): avc: denied { open } for pid=13206 comm="syz.4.1840" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 617.018004][ T5896] usb 8-1: GET_CAPABILITIES returned 0 [ 617.023526][ T5896] usbtmc 8-1:16.0: can't read capabilities [ 617.284406][ T43] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 617.583774][T13217] vivid-003: disconnect [ 617.604038][ T5896] usb 3-1: USB disconnect, device number 67 [ 617.749444][T13212] vivid-003: reconnect [ 617.776047][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 617.781814][ T43] usb 2-1: no configurations [ 617.786873][ T43] usb 2-1: can't read configurations, error -22 [ 617.946119][ T43] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 617.965950][ T5885] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 618.103097][T13224] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1844'. [ 618.126455][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 618.131719][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 618.143352][ T43] usb 2-1: no configurations [ 618.153001][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.172561][ T43] usb 2-1: can't read configurations, error -22 [ 618.191292][ T43] usb usb2-port1: attempt power cycle [ 618.200015][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.212090][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.225287][ T5885] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.238838][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.251220][ T5885] usb 7-1: config 0 descriptor?? [ 618.335682][T13232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1847'. [ 618.874817][ T5896] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 618.943551][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 618.952604][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1847'. [ 619.276497][ T24] usb 8-1: USB disconnect, device number 46 [ 619.396315][T13239] xt_HMARK: proto mask must be zero with L3 mode [ 619.417023][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 619.423548][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.437499][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.447636][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 619.460945][ T5896] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 619.470280][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.494773][ T5896] usb 5-1: config 0 descriptor?? [ 619.578573][ T5885] hid_parser_main: 14 callbacks suppressed [ 619.578593][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.593147][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.600478][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.607848][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.615063][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.622439][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.629841][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.638096][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.645506][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.653447][ T43] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 619.661910][ T5885] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 619.786170][T13244] random: crng reseeded on system resumption [ 620.196094][ T43] usb 2-1: device descriptor read/8, error -71 [ 620.205674][ T5885] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.002B/input/input42 [ 620.413398][ T5896] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002C/input/input43 [ 621.308391][T13262] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1853'. [ 621.496929][T13266] siw: device registration error -23 [ 621.865640][T13268] vivid-004: disconnect [ 622.038696][ T5896] microsoft 0003:045E:07DA.002C: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 622.131057][ T5896] usb 5-1: USB disconnect, device number 77 [ 622.205476][T13272] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1856'. [ 622.215444][ T5885] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 622.248592][T13244] Restarting kernel threads ... [ 622.253725][T13244] Done restarting kernel threads. [ 622.318669][ T5885] usb 7-1: USB disconnect, device number 59 [ 622.538121][T13265] vivid-004: reconnect [ 622.655992][ T5885] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 622.675965][ T5933] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 622.696005][ T43] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 622.716162][ T5896] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 622.906180][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 622.921904][ T5896] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 622.922562][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 622.942416][ T5933] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 622.944910][ T5885] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 622.962523][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 622.962587][ T5896] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 622.971153][ T5885] usb 7-1: Product: syz [ 622.986351][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 623.000482][ T5933] usb 8-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 623.000860][ T5885] usb 7-1: Manufacturer: syz [ 623.023263][ T5885] usb 7-1: SerialNumber: syz [ 623.023793][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.046158][ T5933] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 623.047785][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.065670][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 623.066004][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 623.076621][ T5885] usb 7-1: config 0 descriptor?? [ 623.096478][ T5933] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.100892][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.138989][T13264] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 623.155098][ T5885] hub 7-1:0.0: bad descriptor, ignoring hub [ 623.155111][ T5896] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 623.155176][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 623.186443][ T5885] hub 7-1:0.0: probe with driver hub failed with error -5 [ 623.195637][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 623.195785][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 623.225203][ T5933] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 623.234633][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.247756][ T5933] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 623.265934][ T5933] usb 8-1: Product: syz [ 623.279896][ T5933] usb 8-1: Manufacturer: syz [ 623.321619][ T5933] cdc_wdm 8-1:1.0: skipping garbage [ 623.328367][ T5896] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 623.337638][ T5933] cdc_wdm 8-1:1.0: skipping garbage [ 623.342853][ T5933] cdc_wdm 8-1:1.0: skipping garbage [ 623.348868][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 623.357452][ T5933] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 623.366129][ T5896] usb 2-1: Product: syz [ 623.371723][ T5896] usb 2-1: Manufacturer: syz [ 623.628839][ T43] usb 5-1: GET_CAPABILITIES returned 0 [ 623.634383][ T43] usbtmc 5-1:16.0: can't read capabilities [ 623.658443][ T5933] usb 8-1: USB disconnect, device number 47 [ 623.734384][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 623.746034][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 623.756048][ T5896] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 623.922205][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.928581][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.156574][ T5896] usb 2-1: USB disconnect, device number 75 [ 624.411802][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.420631][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.704802][T13300] FAULT_INJECTION: forcing a failure. [ 624.704802][T13300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.724587][T13300] CPU: 0 UID: 0 PID: 13300 Comm: syz.7.1864 Not tainted syzkaller #0 PREEMPT(full) [ 624.724615][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 624.724626][T13300] Call Trace: [ 624.724632][T13300] [ 624.724639][T13300] dump_stack_lvl+0x16c/0x1f0 [ 624.724668][T13300] should_fail_ex+0x512/0x640 [ 624.724693][T13300] _copy_to_user+0x32/0xd0 [ 624.724718][T13300] simple_read_from_buffer+0xcb/0x170 [ 624.724739][T13300] proc_fail_nth_read+0x197/0x240 [ 624.724763][T13300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.724786][T13300] ? rw_verify_area+0xcf/0x6c0 [ 624.724803][T13300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.724825][T13300] vfs_read+0x1e1/0xcf0 [ 624.724847][T13300] ? __pfx___mutex_lock+0x10/0x10 [ 624.724870][T13300] ? __pfx_vfs_read+0x10/0x10 [ 624.724905][T13300] ? __fget_files+0x20e/0x3c0 [ 624.724932][T13300] ksys_read+0x12a/0x250 [ 624.724950][T13300] ? __pfx_ksys_read+0x10/0x10 [ 624.724976][T13300] do_syscall_64+0xcd/0x4e0 [ 624.725000][T13300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.725018][T13300] RIP: 0033:0x7fe938d8d8dc [ 624.725033][T13300] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 624.725050][T13300] RSP: 002b:00007fe939ce6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.725068][T13300] RAX: ffffffffffffffda RBX: 00007fe938fe5fa0 RCX: 00007fe938d8d8dc [ 624.725079][T13300] RDX: 000000000000000f RSI: 00007fe939ce60a0 RDI: 0000000000000007 [ 624.725091][T13300] RBP: 00007fe939ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 624.725101][T13300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.725112][T13300] R13: 00007fe938fe6038 R14: 00007fe938fe5fa0 R15: 00007ffe7d276fc8 [ 624.725135][T13300] [ 625.019166][T13305] overlayfs: overlapping lowerdir path [ 625.135481][T13306] ntfs3(nullb0): Primary boot signature is not NTFS. [ 625.136840][T13307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13307 comm=syz.2.1865 [ 625.155036][T13307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32785 sclass=netlink_audit_socket pid=13307 comm=syz.2.1865 [ 625.195557][T13306] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 625.335991][ T5896] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 625.347775][T13309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.496281][ T5896] usb 8-1: Using ep0 maxpacket: 16 [ 625.502856][ T5896] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.514561][ T5896] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.525992][ T5896] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 625.539165][ T5896] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 625.548223][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.557994][ T5896] usb 8-1: config 0 descriptor?? [ 625.576075][ T5933] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 625.686321][ T5938] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 625.729046][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.740142][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.749924][ T5933] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 625.760024][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.775681][ T5933] usb 3-1: config 0 descriptor?? [ 625.857400][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 625.867169][ T5938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 625.876862][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 625.887129][ T5938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 625.896956][ T5938] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 625.906061][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.915757][ T5938] usb 2-1: config 0 descriptor?? [ 625.979161][ T5896] hid_parser_main: 14 callbacks suppressed [ 625.979189][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 625.993822][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 626.001482][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 626.009097][ T5933] usbhid 3-1:0.0: can't add hid device: -71 [ 626.015085][ T5933] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 626.022948][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 626.031375][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 626.040879][ T5933] usb 3-1: USB disconnect, device number 68 [ 626.046882][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 626.054097][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 626.063674][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 626.073512][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 626.080864][ T5896] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 626.091807][ T5896] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.002D/input/input44 [ 626.128629][ T5938] hdpvr 2-1:0.0: firmware version 0x0 dated [ 626.134645][ T5938] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 626.354252][ T5896] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 626.370161][ T5896] usb 8-1: USB disconnect, device number 48 [ 626.542379][ T5938] hdpvr 2-1:0.0: max device number reached, device register failed [ 626.587302][ T5938] usb 2-1: USB disconnect, device number 76 [ 626.817151][T13317] netlink: 'syz.2.1869': attribute type 12 has an invalid length. [ 627.810480][T13331] random: crng reseeded on system resumption [ 627.908808][T13331] Restarting kernel threads ... [ 627.914112][T13331] Done restarting kernel threads. [ 628.130176][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 628.777887][T13343] netlink: 5136 bytes leftover after parsing attributes in process `syz.7.1876'. [ 628.795357][T13343] FAULT_INJECTION: forcing a failure. [ 628.795357][T13343] name failslab, interval 1, probability 0, space 0, times 0 [ 628.808101][T13343] CPU: 0 UID: 0 PID: 13343 Comm: syz.7.1876 Not tainted syzkaller #0 PREEMPT(full) [ 628.808132][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 628.808143][T13343] Call Trace: [ 628.808150][T13343] [ 628.808157][T13343] dump_stack_lvl+0x16c/0x1f0 [ 628.808186][T13343] should_fail_ex+0x512/0x640 [ 628.808212][T13343] should_failslab+0xc2/0x120 [ 628.808236][T13343] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 628.808254][T13343] ? selinux_socket_create+0xf1/0x540 [ 628.808277][T13343] ? sock_alloc_inode+0x25/0x1c0 [ 628.808307][T13343] ? __pfx_sock_alloc_inode+0x10/0x10 [ 628.808331][T13343] ? sock_alloc_inode+0x25/0x1c0 [ 628.808354][T13343] sock_alloc_inode+0x25/0x1c0 [ 628.808377][T13343] alloc_inode+0x61/0x240 [ 628.808404][T13343] sock_alloc+0x40/0x280 [ 628.808428][T13343] __sock_create+0xc1/0x8d0 [ 628.808460][T13343] udp_sock_create4+0xa6/0x450 [ 628.808487][T13343] ? __pfx_udp_sock_create4+0x10/0x10 [ 628.808523][T13343] fou_create.constprop.0+0x752/0x910 [ 628.808547][T13343] ? __pfx_fou_create.constprop.0+0x10/0x10 [ 628.808568][T13343] ? parse_nl_config+0x15b/0xa90 [ 628.808601][T13343] fou_nl_add_doit+0xcf/0x130 [ 628.808621][T13343] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 628.808646][T13343] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 628.808675][T13343] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 628.808710][T13343] genl_family_rcv_msg_doit+0x209/0x2f0 [ 628.808739][T13343] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 628.808776][T13343] ? bpf_lsm_capable+0x9/0x10 [ 628.808799][T13343] ? security_capable+0x7e/0x260 [ 628.808823][T13343] genl_rcv_msg+0x55c/0x800 [ 628.808853][T13343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.808880][T13343] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 628.808903][T13343] ? irqentry_exit+0x3b/0x90 [ 628.808930][T13343] netlink_rcv_skb+0x158/0x420 [ 628.808954][T13343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.808983][T13343] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.809025][T13343] genl_rcv+0x28/0x40 [ 628.809049][T13343] netlink_unicast+0x5a7/0x870 [ 628.809077][T13343] ? __pfx_netlink_unicast+0x10/0x10 [ 628.809117][T13343] netlink_sendmsg+0x8c8/0xdd0 [ 628.809145][T13343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.809174][T13343] ? write_comp_data+0x8b/0x90 [ 628.809202][T13343] ____sys_sendmsg+0xa98/0xc70 [ 628.809230][T13343] ? copy_msghdr_from_user+0x10a/0x160 [ 628.809251][T13343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.809291][T13343] ___sys_sendmsg+0x134/0x1d0 [ 628.809315][T13343] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.809371][T13343] __sys_sendmsg+0x16d/0x220 [ 628.809394][T13343] ? __pfx___sys_sendmsg+0x10/0x10 [ 628.809434][T13343] do_syscall_64+0xcd/0x4e0 [ 628.809460][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.809479][T13343] RIP: 0033:0x7fe938d8eec9 [ 628.809494][T13343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.809512][T13343] RSP: 002b:00007fe939ca4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.809530][T13343] RAX: ffffffffffffffda RBX: 00007fe938fe6180 RCX: 00007fe938d8eec9 [ 628.809542][T13343] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000008 [ 628.809553][T13343] RBP: 00007fe939ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 628.809564][T13343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.809575][T13343] R13: 00007fe938fe6218 R14: 00007fe938fe6180 R15: 00007ffe7d276fc8 [ 628.809600][T13343] [ 628.809627][T13343] socket: no more sockets [ 628.934915][ T43] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 629.317732][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 629.331531][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 629.349285][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 629.364452][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.374034][ T43] usb 2-1: Product: syz [ 629.379338][ T43] usb 2-1: Manufacturer: syz [ 629.384640][ T43] usb 2-1: SerialNumber: syz [ 629.392903][ T43] usb 2-1: config 0 descriptor?? [ 629.401920][ T43] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 629.413266][ T43] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 629.546765][ T5885] usb 7-1: USB disconnect, device number 60 [ 629.556215][ T5938] usb 5-1: USB disconnect, device number 78 [ 629.754267][T13349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1879'. [ 629.847937][ T5896] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 629.915754][T13356] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1882'. [ 629.988444][T13359] siw: device registration error -23 [ 630.015835][ T43] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 630.027364][ T5896] usb 8-1: Using ep0 maxpacket: 32 [ 630.049974][ T5896] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.089247][ T5896] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.107989][ T5896] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 630.139150][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.166118][ T5885] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 630.177701][ T5896] usb 8-1: config 0 descriptor?? [ 630.349582][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 630.363684][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 630.373649][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 630.393008][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 630.405716][ T5885] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 630.421379][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.431571][ T5885] usb 3-1: config 0 descriptor?? [ 630.613457][ T5896] ft260 0003:0403:6030.002E: item fetching failed at offset 0/2 [ 630.627458][ T5896] ft260 0003:0403:6030.002E: failed to parse HID [ 630.634122][ T5896] ft260 0003:0403:6030.002E: probe with driver ft260 failed with error -22 [ 630.676200][ T5885] hdpvr 3-1:0.0: firmware version 0x0 dated [ 630.684276][ T5885] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 630.767236][T13367] netlink: 'syz.6.1884': attribute type 12 has an invalid length. [ 631.501361][ T5938] usb 8-1: USB disconnect, device number 49 [ 631.789763][ T5885] hdpvr 3-1:0.0: max device number reached, device register failed [ 631.852856][ T5885] usb 3-1: USB disconnect, device number 69 [ 632.016430][T13375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1887'. [ 632.032416][T13375] geneve2: entered allmulticast mode [ 632.141413][T13379] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 632.219635][ T30] audit: type=1400 audit(2000000342.506:1432): avc: denied { accept } for pid=13337 comm="syz.1.1875" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 632.256484][ T30] audit: type=1400 audit(2000000342.516:1433): avc: denied { audit_write } for pid=13378 comm="syz.7.1888" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 632.296883][ T30] audit: type=1107 audit(2000000342.516:1434): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='m@:qZP"nDYeSc O lg`7dWz' [ 632.329239][ T30] audit: type=1400 audit(2000000342.576:1435): avc: denied { ioctl } for pid=13337 comm="syz.1.1875" path="socket:[47505]" dev="sockfs" ino=47505 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 632.674821][ T43] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 632.693276][T13389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1891'. [ 632.715380][ T43] em28xx 2-1:0.0: board has no eeprom [ 632.753990][T13393] : entered promiscuous mode [ 632.803747][ T43] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 632.834157][ T43] em28xx 2-1:0.0: dvb set to bulk mode. [ 632.839960][ T24] em28xx 2-1:0.0: Binding DVB extension [ 632.856016][ T5886] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 632.891240][ T43] usb 2-1: USB disconnect, device number 77 [ 632.927016][ T43] em28xx 2-1:0.0: Disconnecting em28xx [ 633.006409][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 633.013116][ T5886] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.023253][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 633.034595][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 633.087727][ T5886] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.111843][ T24] em28xx 2-1:0.0: Registering input extension [ 633.125181][ T43] em28xx 2-1:0.0: Closing input extension [ 633.131655][ T5886] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 633.159452][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.172610][ T43] em28xx 2-1:0.0: Freeing device [ 633.443276][ T5886] usb 7-1: GET_CAPABILITIES returned 0 [ 633.449095][ T5886] usbtmc 7-1:16.0: can't read capabilities [ 633.704284][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 634.077487][T13394] Process accounting resumed [ 634.197263][T13410] overlayfs: overlapping lowerdir path [ 634.280242][T13411] ntfs3(nullb0): Primary boot signature is not NTFS. [ 634.288185][T13411] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 634.371583][T13409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13409 comm=syz.7.1896 [ 634.384492][T13409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32785 sclass=netlink_audit_socket pid=13409 comm=syz.7.1896 [ 634.915956][ T5938] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 635.015982][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 635.077436][ T5938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.088730][ T5938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.106001][ T5938] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 635.119585][ T5938] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.134254][ T5938] usb 8-1: config 0 descriptor?? [ 635.170152][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 635.178690][T13425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1899'. [ 635.196960][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.218711][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 635.233784][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 635.254985][ T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 635.264616][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.311054][T13427] FAULT_INJECTION: forcing a failure. [ 635.311054][T13427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.324190][T13427] CPU: 0 UID: 0 PID: 13427 Comm: syz.4.1901 Not tainted syzkaller #0 PREEMPT(full) [ 635.324206][T13427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 635.324213][T13427] Call Trace: [ 635.324218][T13427] [ 635.324222][T13427] dump_stack_lvl+0x16c/0x1f0 [ 635.324241][T13427] should_fail_ex+0x512/0x640 [ 635.324260][T13427] _copy_from_user+0x2e/0xd0 [ 635.324275][T13427] ucma_listen+0x81/0x220 [ 635.324289][T13427] ? __pfx_ucma_listen+0x10/0x10 [ 635.324303][T13427] ? __pfx_ucma_listen+0x10/0x10 [ 635.324316][T13427] ucma_write+0x1f8/0x330 [ 635.324327][T13427] ? __pfx_ucma_write+0x10/0x10 [ 635.324338][T13427] ? bpf_lsm_file_permission+0x9/0x10 [ 635.324352][T13427] ? security_file_permission+0x71/0x210 [ 635.324366][T13427] ? iov_iter_advance+0x1e3/0x6c0 [ 635.324381][T13427] ? rw_verify_area+0xcf/0x6c0 [ 635.324392][T13427] ? __pfx_ucma_write+0x10/0x10 [ 635.324403][T13427] vfs_writev+0x5dc/0xde0 [ 635.324417][T13427] ? __pfx_vfs_writev+0x10/0x10 [ 635.324437][T13427] ? __fget_files+0x20e/0x3c0 [ 635.324449][T13427] ? __fget_files+0x1c0/0x3c0 [ 635.324464][T13427] ? do_writev+0x28c/0x340 [ 635.324473][T13427] do_writev+0x28c/0x340 [ 635.324483][T13427] ? __pfx_do_writev+0x10/0x10 [ 635.324498][T13427] do_syscall_64+0xcd/0x4e0 [ 635.324513][T13427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.324525][T13427] RIP: 0033:0x7fe03398eec9 [ 635.324534][T13427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.324545][T13427] RSP: 002b:00007fe0347b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 635.324555][T13427] RAX: ffffffffffffffda RBX: 00007fe033be5fa0 RCX: 00007fe03398eec9 [ 635.324563][T13427] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000006 [ 635.324569][T13427] RBP: 00007fe0347b4090 R08: 0000000000000000 R09: 0000000000000000 [ 635.324575][T13427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.324582][T13427] R13: 00007fe033be6038 R14: 00007fe033be5fa0 R15: 00007ffeddf58708 [ 635.324596][T13427] [ 635.531495][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.546243][ T24] usb 2-1: Product: syz [ 635.593380][ T5938] usbhid 8-1:0.0: can't add hid device: -71 [ 635.599948][ T5938] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 635.609376][ T5938] usb 8-1: USB disconnect, device number 50 [ 635.687359][ T24] usb 2-1: Manufacturer: syz [ 635.708925][ T5933] usb 7-1: USB disconnect, device number 61 [ 635.710343][ T24] usb 2-1: SerialNumber: syz [ 635.753292][ T24] usb 2-1: config 0 descriptor?? [ 635.783017][T13415] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 635.900242][ T24] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 636.354489][ T5938] usb 2-1: USB disconnect, device number 78 [ 637.146115][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 637.202389][T13462] FAULT_INJECTION: forcing a failure. [ 637.202389][T13462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.220264][T13462] CPU: 1 UID: 0 PID: 13462 Comm: syz.2.1911 Not tainted syzkaller #0 PREEMPT(full) [ 637.220292][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 637.220303][T13462] Call Trace: [ 637.220309][T13462] [ 637.220317][T13462] dump_stack_lvl+0x16c/0x1f0 [ 637.220345][T13462] should_fail_ex+0x512/0x640 [ 637.220372][T13462] _copy_from_iter+0x29f/0x1720 [ 637.220401][T13462] ? __pfx__copy_from_iter+0x10/0x10 [ 637.220424][T13462] ? _copy_from_iter+0x15d/0x1720 [ 637.220455][T13462] skb_copy_datagram_from_iter+0x124/0x740 [ 637.220479][T13462] ? iov_iter_advance+0x7d/0x6c0 [ 637.220504][T13462] tun_get_user+0x1850/0x3cc0 [ 637.220536][T13462] ? __pfx_tun_get_user+0x10/0x10 [ 637.220558][T13462] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 637.220589][T13462] ? find_held_lock+0x2b/0x80 [ 637.220616][T13462] ? tun_get+0x191/0x370 [ 637.220640][T13462] tun_chr_write_iter+0xdc/0x210 [ 637.220662][T13462] vfs_write+0x7d3/0x11d0 [ 637.220683][T13462] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 637.220706][T13462] ? __pfx_vfs_write+0x10/0x10 [ 637.220723][T13462] ? find_held_lock+0x2b/0x80 [ 637.220764][T13462] ksys_write+0x12a/0x250 [ 637.220783][T13462] ? __pfx_ksys_write+0x10/0x10 [ 637.220809][T13462] do_syscall_64+0xcd/0x4e0 [ 637.220833][T13462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.220851][T13462] RIP: 0033:0x7f5c27d8eec9 [ 637.220867][T13462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.220885][T13462] RSP: 002b:00007f5c28c38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 637.220907][T13462] RAX: ffffffffffffffda RBX: 00007f5c27fe5fa0 RCX: 00007f5c27d8eec9 [ 637.220920][T13462] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000003 [ 637.220931][T13462] RBP: 00007f5c28c38090 R08: 0000000000000000 R09: 0000000000000000 [ 637.220942][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.220953][T13462] R13: 00007f5c27fe6038 R14: 00007f5c27fe5fa0 R15: 00007ffdc582daa8 [ 637.220978][T13462] [ 637.567364][T13466] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1913'. [ 637.576796][ T5938] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 637.769351][T13468] siw: device registration error -23 [ 637.869074][ T5938] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 637.901311][ T5938] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 638.023954][ T5938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 638.026959][T13472] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1916'. [ 638.039851][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 638.070564][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 638.146034][ T5886] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 638.195106][ T5938] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 638.216152][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 638.226438][ T5938] usb 2-1: Product: syz [ 638.231021][ T5938] usb 2-1: Manufacturer: syz [ 638.689369][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 638.689457][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 638.775350][T13477] siw: device registration error -23 [ 639.000608][ T5886] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 639.001115][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 639.020108][ T5938] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 639.026228][ T5938] cdc_wdm 2-1:1.0: Unknown control protocol [ 639.067100][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 639.081259][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 639.095317][ T5886] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.209977][ T5886] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.216838][ T5933] usb 2-1: USB disconnect, device number 79 [ 639.332052][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.489682][ T30] audit: type=1400 audit(2000000349.766:1436): avc: denied { mount } for pid=13481 comm="syz.4.1917" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 639.909737][ T5886] usb 7-1: GET_CAPABILITIES returned 0 [ 639.915398][ T5886] usbtmc 7-1:16.0: can't read capabilities [ 640.351080][T13499] netlink: 'syz.2.1920': attribute type 12 has an invalid length. [ 640.761251][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 640.797964][T13497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1921'. [ 641.217635][T13502] syzkaller1: entered promiscuous mode [ 641.223127][T13502] syzkaller1: entered allmulticast mode [ 642.360073][ T30] audit: type=1400 audit(2000000351.746:1437): avc: denied { create } for pid=13505 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 642.506755][ T5886] usb 7-1: USB disconnect, device number 62 [ 642.671210][T13521] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1928'. [ 642.676004][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 642.721138][T13523] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 642.784813][T13525] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 642.832462][ T5938] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 642.860390][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 642.898363][ T24] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 642.939028][ T24] usb 3-1: config 0 has no interface number 0 [ 642.945162][ T24] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 642.970122][ T24] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 642.998639][ T24] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 643.018213][ T24] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 643.018466][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 643.028688][ T24] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 643.051881][ T24] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 643.062064][ T24] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 643.073330][ T24] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 643.093787][ T24] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 643.112145][ T24] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.128154][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 643.129089][ T24] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 643.150818][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.154182][T13535] vivid-002: disconnect [ 643.159269][ T24] usb 3-1: Product: syz [ 643.168433][T13525] can0 (unregistered): slcan off ttyS3. [ 643.189700][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 643.191833][ T24] usb 3-1: Manufacturer: syz [ 643.221905][ T24] usb 3-1: SerialNumber: syz [ 643.228085][ T5938] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 643.266108][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.281092][ T5938] usb 5-1: Product: syz [ 643.285754][ T5938] usb 5-1: Manufacturer: syz [ 643.289417][ T24] usb 3-1: config 0 descriptor?? [ 643.292647][ T5938] usb 5-1: SerialNumber: syz [ 643.314531][T13540] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[13540] [ 643.317069][ T5938] usb 5-1: config 0 descriptor?? [ 643.333687][T13516] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 643.383038][ T24] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 643.385116][ T5938] adutux 5-1:0.0: interrupt endpoints not found [ 643.399965][ T24] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 643.434964][ T24] scsi host1: microtekX6 [ 643.488401][T12199] microtek usb (rev 0.4.3): error -90 submitting URB [ 643.537336][ T6132] microtek usb (rev 0.4.3): error -90 submitting URB [ 643.575973][ T6132] microtek usb (rev 0.4.3): error -90 submitting URB [ 643.596081][T12199] microtek usb (rev 0.4.3): error -90 submitting URB [ 643.910072][T13555] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1933'. [ 643.919647][T13555] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 643.996910][T13556] netlink: 'syz.7.1933': attribute type 4 has an invalid length. [ 644.005197][T13556] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1933'. [ 644.438754][T13530] vivid-002: reconnect [ 644.445424][T13516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.461528][T13516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.625143][T13569] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1926'. [ 645.149228][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 645.193665][T13566] netlink: 'syz.1.1935': attribute type 30 has an invalid length. [ 645.436242][ T5933] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 645.617655][ T5933] usb 8-1: Using ep0 maxpacket: 32 [ 645.677966][ T5933] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 645.729095][ T5933] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 645.746119][ T5933] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 645.754640][ T5933] usb 8-1: Product: syz [ 645.759111][ T5933] usb 8-1: Manufacturer: syz [ 645.763838][ T5933] usb 8-1: SerialNumber: syz [ 645.773025][ T5933] usb 8-1: config 0 descriptor?? [ 645.846273][T13597] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 645.885019][T13608] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 646.012934][ T5933] hub 8-1:0.0: bad descriptor, ignoring hub [ 646.020121][ T5933] hub 8-1:0.0: probe with driver hub failed with error -5 [ 646.326483][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.345435][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.402047][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.436985][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.450296][ T5896] usb 3-1: USB disconnect, device number 70 [ 646.799418][T13620] random: crng reseeded on system resumption [ 646.811475][T13620] Restarting kernel threads ... [ 646.816829][T13620] Done restarting kernel threads. [ 647.849657][T13622] random: crng reseeded on system resumption [ 647.863755][T13622] Restarting kernel threads ... [ 647.869057][T13622] Done restarting kernel threads. [ 647.975479][ T5938] usb 5-1: USB disconnect, device number 79 [ 648.153354][ T30] audit: type=1400 audit(2000000358.446:1438): avc: denied { getopt } for pid=13628 comm="syz.6.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 648.272044][T13614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.507150][T13614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.797712][T13650] overlayfs: overlapping lowerdir path [ 648.881415][T13652] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1946'. [ 648.891708][T13652] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 648.966398][T13653] netlink: 'syz.6.1946': attribute type 4 has an invalid length. [ 648.974191][T13653] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1946'. [ 649.295652][T13654] ntfs3(nullb0): Primary boot signature is not NTFS. [ 649.304713][T13654] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 649.785999][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 649.954654][ T5885] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 649.971880][T13677] siw: device registration error -23 [ 650.106206][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 650.127801][ T5885] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 650.140710][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.186977][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.208418][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 650.218953][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.244040][ T5885] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 650.273478][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 650.327839][ T24] usb 2-1: config 0 descriptor?? [ 650.332845][ T5885] usb 5-1: Product: syz [ 650.372154][ T5885] usb 5-1: Manufacturer: syz [ 650.426814][ T5885] usb 5-1: SerialNumber: syz [ 650.492576][ T5885] usb 5-1: config 0 descriptor?? [ 650.512357][T13661] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 650.545567][ T5885] hub 5-1:0.0: bad descriptor, ignoring hub [ 650.558825][ T5885] hub 5-1:0.0: probe with driver hub failed with error -5 [ 650.584758][ T5885] chaoskey 5-1:0.0: Unable to register with hwrng [ 650.698962][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 650.705811][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 650.736014][ T24] usb 2-1: USB disconnect, device number 80 [ 651.509665][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.561713][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.786853][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 651.896245][ T5896] usb 5-1: USB disconnect, device number 80 [ 651.965976][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 651.975580][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.989765][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.000091][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 652.009237][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.036609][ T24] usb 2-1: config 0 descriptor?? [ 652.394598][T13728] netlink: 'syz.6.1959': attribute type 12 has an invalid length. [ 653.021608][ T24] ft260 0003:0403:6030.002F: item fetching failed at offset 0/2 [ 653.032353][ T24] ft260 0003:0403:6030.002F: failed to parse HID [ 653.039018][ T24] ft260 0003:0403:6030.002F: probe with driver ft260 failed with error -22 [ 653.396838][T13736] ptrace attach of "./syz-executor exec"[11318] was attempted by "./syz-executor exec"[13736] [ 653.440088][ T30] audit: type=1400 audit(2000000363.556:1439): avc: denied { write } for pid=13734 comm="syz.6.1962" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 653.444731][ T5933] usb 2-1: USB disconnect, device number 81 [ 653.708299][ T43] usb 8-1: USB disconnect, device number 51 [ 653.930854][T13751] random: crng reseeded on system resumption [ 653.977638][T13751] Restarting kernel threads ... [ 653.982950][T13751] Done restarting kernel threads. [ 655.005472][ T30] audit: type=1400 audit(2000000364.896:1440): avc: denied { getopt } for pid=13748 comm="syz.2.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 655.258296][T13771] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 655.345636][T13779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.496001][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 655.574438][T13785] netlink: 'syz.4.1972': attribute type 12 has an invalid length. [ 655.701443][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 655.715156][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 655.743075][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 655.777751][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 655.808532][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 655.833222][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.900532][ T24] usb 3-1: config 0 descriptor?? [ 656.254750][ T24] hdpvr 3-1:0.0: firmware version 0x0 dated [ 656.260990][ T24] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 656.665997][ T5933] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 657.026329][ T30] audit: type=1400 audit(2000000366.996:1441): avc: denied { setattr } for pid=13792 comm="syz.1.1976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 657.090850][ T24] hdpvr 3-1:0.0: max device number reached, device register failed [ 657.106062][ T5933] usb 8-1: Using ep0 maxpacket: 32 [ 657.113539][ T5933] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 657.121921][ T24] usb 3-1: USB disconnect, device number 71 [ 657.137608][ T5933] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 657.155916][ T5933] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 657.170765][ T5933] usb 8-1: Product: syz [ 657.175060][ T5933] usb 8-1: Manufacturer: syz [ 657.180125][ T5933] usb 8-1: SerialNumber: syz [ 657.187698][ T5933] usb 8-1: config 0 descriptor?? [ 657.193698][T13795] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 657.202971][ T5933] hub 8-1:0.0: bad descriptor, ignoring hub [ 657.216071][ T5933] hub 8-1:0.0: probe with driver hub failed with error -5 [ 657.359269][T13799] xt_HMARK: proto mask must be zero with L3 mode [ 657.448510][T13803] tmpfs: Unknown parameter 'quta' [ 657.722314][T13814] vivid-002: disconnect [ 657.846895][ T5933] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 658.030356][ T5933] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 658.045930][ T5933] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 658.060073][ T5933] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 658.076181][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.085960][ T5933] usb 2-1: Product: syz [ 658.093295][ T5933] usb 2-1: Manufacturer: syz [ 658.099276][ T5933] usb 2-1: SerialNumber: syz [ 658.115720][ T5933] rndis_host 2-1:7.0: skipping garbage [ 658.126827][ T5933] usb 2-1: bad CDC descriptors [ 658.132456][ T5933] option 2-1:7.0: GSM modem (1-port) converter detected [ 658.183302][T13808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.214354][ T5896] raw-gadget.1 gadget.7: failed to queue suspend event [ 658.240649][T13808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.905964][ T30] audit: type=1400 audit(2000000369.166:1442): avc: denied { create } for pid=13804 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 659.068938][T13795] raw-gadget.1 gadget.7: failed to queue resume event [ 659.080323][T13835] raw-gadget.1 gadget.7: failed to queue suspend event [ 659.101362][T13829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1986'. [ 659.113749][ T30] audit: type=1400 audit(2000000369.166:1443): avc: denied { bind } for pid=13804 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 659.183855][T13835] raw-gadget.1 gadget.7: failed to queue disconnect event [ 659.298403][T13810] vivid-002: reconnect [ 659.775041][T13845] autofs: Bad value for 'fd' [ 659.939003][ T5896] usb 8-1: USB disconnect, device number 52 [ 660.513666][ T5896] usb 2-1: USB disconnect, device number 82 [ 660.587640][T13855] siw: device registration error -23 [ 660.628494][ T5896] option 2-1:7.0: device disconnected [ 662.379041][ T30] audit: type=1400 audit(2000000372.556:1444): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 663.906078][ T30] audit: type=1400 audit(2000000374.056:1445): avc: denied { kexec_image_load } for pid=13876 comm="syz.4.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 664.209995][ T30] audit: type=1400 audit(2000000374.506:1446): avc: denied { recv } for pid=13857 comm="syz.1.1995" saddr=10.128.0.169 src=40752 daddr=10.128.1.254 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 664.349817][T13885] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2002'. [ 664.718369][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2005'. [ 665.122974][T13907] team0: mtu less than device minimum [ 665.125150][ T30] audit: type=1400 audit(2000000375.416:1447): avc: denied { ioctl } for pid=13906 comm="syz.4.2008" path="socket:[50829]" dev="sockfs" ino=50829 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 665.536146][ T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 665.547598][ T30] audit: type=1400 audit(2000000375.846:1448): avc: denied { map } for pid=13918 comm="syz.6.2012" path="socket:[49752]" dev="sockfs" ino=49752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 665.659345][ T30] audit: type=1400 audit(2000000375.866:1449): avc: denied { read } for pid=13918 comm="syz.6.2012" path="socket:[49752]" dev="sockfs" ino=49752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 665.741891][T13925] netlink: 'syz.7.2013': attribute type 16 has an invalid length. [ 665.802968][T13931] autofs: Bad value for 'fd' [ 665.811080][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 665.822533][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.834464][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.846188][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 665.881278][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 665.891274][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.932708][ T24] usb 2-1: config 0 descriptor?? [ 666.035956][ T43] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 666.196438][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 666.215240][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 666.225034][ T43] usb 5-1: config 0 has no interface number 0 [ 666.231624][ T43] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 666.242954][ T43] usb 5-1: config 0 interface 1 has no altsetting 0 [ 666.265661][ T43] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 666.275227][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.283482][ T43] usb 5-1: Product: syz [ 666.288389][ T43] usb 5-1: Manufacturer: syz [ 666.293070][ T43] usb 5-1: SerialNumber: syz [ 666.310529][ T43] usb 5-1: config 0 descriptor?? [ 666.521828][ T43] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 666.534997][ T43] cx231xx 5-1:0.1: Failed to read PCB config [ 666.535975][ T5933] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 666.545969][ T43] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 666.578334][ T43] usb 5-1: USB disconnect, device number 81 [ 666.586641][ T24] ft260 0003:0403:6030.0030: item fetching failed at offset 0/2 [ 666.598332][ T24] ft260 0003:0403:6030.0030: failed to parse HID [ 666.604780][ T24] ft260 0003:0403:6030.0030: probe with driver ft260 failed with error -22 [ 666.666999][T13948] overlayfs: overlapping lowerdir path [ 666.708045][ T5933] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.719210][ T5933] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 666.731177][ T5933] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 666.788888][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.789953][T13949] ntfs3(nullb0): Primary boot signature is not NTFS. [ 666.806916][T13949] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 666.857573][ T5933] usb 8-1: config 0 descriptor?? [ 667.026537][ T43] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 667.027090][ T5933] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 667.039863][ T24] usb 2-1: USB disconnect, device number 83 [ 667.048352][ T5933] dvb-usb: bulk message failed: -22 (3/0) [ 667.081147][ T5933] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 667.092409][ T5933] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 667.099829][ T5933] usb 8-1: media controller created [ 667.108332][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 667.133872][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 667.140259][ T5933] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 667.151312][ T5933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input46 [ 667.166409][ T5933] dvb-usb: schedule remote query interval to 150 msecs. [ 667.175659][ T5933] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 667.196418][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 667.208220][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 667.247645][ T43] usb 5-1: config 0 has no interface number 0 [ 667.254534][ T5933] usb 8-1: USB disconnect, device number 53 [ 667.256003][ T43] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 667.282391][T13947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13947 comm=syz.2.2022 [ 667.285532][ T43] usb 5-1: config 0 interface 1 has no altsetting 0 [ 667.308106][ T43] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 667.321940][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.322885][ T5933] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 667.345165][T13947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32785 sclass=netlink_audit_socket pid=13947 comm=syz.2.2022 [ 667.359838][ T43] usb 5-1: Product: syz [ 667.364217][ T43] usb 5-1: Manufacturer: syz [ 667.369160][ T43] usb 5-1: SerialNumber: syz [ 667.386489][ T43] usb 5-1: config 0 descriptor?? [ 667.596376][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 667.619604][ T30] audit: type=1400 audit(2000000377.916:1450): avc: denied { connect } for pid=13923 comm="syz.4.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 667.653140][ T43] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 667.669571][ T43] cx231xx 5-1:0.1: Failed to read PCB config [ 667.681948][ T43] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 667.703601][ T43] usb 5-1: USB disconnect, device number 82 [ 667.788000][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.799243][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.815996][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 667.825063][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.839149][ T24] usb 3-1: config 0 descriptor?? [ 668.744388][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 668.750738][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 668.767976][ T24] usb 3-1: USB disconnect, device number 72 [ 669.945410][T13984] autofs: Bad value for 'fd' [ 670.056814][T13982] fuse: Bad value for 'fd' [ 670.456525][T13996] overlayfs: overlapping lowerdir path [ 670.528429][T13997] ntfs3(nullb0): Primary boot signature is not NTFS. [ 670.535809][T13997] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 670.606485][T13995] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13995 comm=syz.6.2034 [ 670.619200][T13995] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32785 sclass=netlink_audit_socket pid=13995 comm=syz.6.2034 [ 670.976067][ T5896] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 671.026911][T14007] xt_HMARK: proto mask must be zero with L3 mode [ 671.218628][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.229557][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.246424][ T5896] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 671.255491][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.307357][ T5896] usb 7-1: config 0 descriptor?? [ 671.992985][ T5896] usbhid 7-1:0.0: can't add hid device: -71 [ 671.996059][ T24] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 672.004479][ T5896] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 672.066137][ T43] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 672.097223][T14020] random: crng reseeded on system resumption [ 672.202026][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 672.467907][T14020] Restarting kernel threads ... [ 672.469096][ T5896] usb 7-1: USB disconnect, device number 63 [ 672.473756][T14020] Done restarting kernel threads. [ 672.519631][ T24] usb 5-1: config 5 has an invalid interface number: 146 but max is 0 [ 672.528742][ T24] usb 5-1: config 5 has no interface number 0 [ 672.534933][ T24] usb 5-1: config 5 interface 146 has no altsetting 0 [ 672.547121][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f1.f2 [ 672.556687][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.587726][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 672.799633][ T24] usb 5-1: Product: syz [ 672.803971][ T24] usb 5-1: Manufacturer: syz [ 672.808729][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 672.818800][ T24] usb 5-1: SerialNumber: syz [ 673.161925][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 673.185782][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 673.197182][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 673.206450][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.230027][ T43] usb 2-1: config 0 descriptor?? [ 673.498665][T14029] netlink: 'syz.7.2043': attribute type 12 has an invalid length. [ 673.658433][ T43] hdpvr 2-1:0.0: firmware version 0x0 dated [ 673.788302][ T43] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 674.007182][T14031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.550967][ T43] hdpvr 2-1:0.0: max device number reached, device register failed [ 674.603700][ T24] usb 5-1: USB disconnect, device number 83 [ 674.633986][ T43] usb 2-1: USB disconnect, device number 84 [ 674.714705][ T30] audit: type=1400 audit(2000000385.006:1451): avc: denied { map } for pid=14042 comm="syz.4.2047" path="socket:[51192]" dev="sockfs" ino=51192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 674.840515][ T30] audit: type=1400 audit(2000000385.136:1452): avc: denied { map } for pid=14047 comm="syz.6.2050" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 674.864704][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.926016][ T5933] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 675.075939][ T5933] usb 8-1: Using ep0 maxpacket: 8 [ 675.086801][ T5933] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 675.100485][ T5933] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 675.116195][ T5933] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.116843][ T43] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 675.137167][ T5933] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.156892][ T5933] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 675.170894][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.248227][ T30] audit: type=1400 audit(2000000385.546:1453): avc: denied { connect } for pid=14054 comm="syz.1.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 675.268643][ T30] audit: type=1400 audit(2000000385.546:1454): avc: denied { read } for pid=14054 comm="syz.1.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 675.297645][ T43] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 675.308541][ T30] audit: type=1400 audit(2000000385.606:1455): avc: denied { ioctl } for pid=14054 comm="syz.1.2052" path="socket:[50090]" dev="sockfs" ino=50090 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 675.314408][ T43] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 675.351574][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 675.361750][ T43] usb 7-1: Product: syz [ 675.366112][ T43] usb 7-1: Manufacturer: syz [ 675.370942][ T43] usb 7-1: SerialNumber: syz [ 675.381942][ T43] usb 7-1: config 0 descriptor?? [ 675.392957][ T5933] usb 8-1: GET_CAPABILITIES returned 0 [ 675.401101][ T5933] usbtmc 8-1:16.0: can't read capabilities [ 675.466633][ T30] audit: type=1400 audit(2000000385.756:1456): avc: denied { write } for pid=14054 comm="syz.1.2052" path="socket:[50091]" dev="sockfs" ino=50091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 675.796383][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 676.290524][ T43] usb 8-1: USB disconnect, device number 54 [ 677.462383][T14083] siw: device registration error -23 [ 677.681630][ T30] audit: type=1400 audit(2000000387.826:1457): avc: denied { execute } for pid=14081 comm="syz.2.2058" path="/sys/kernel/debug/binder/state" dev="debugfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 677.725930][ T30] audit: type=1400 audit(2000000387.836:1458): avc: denied { mount } for pid=14081 comm="syz.2.2058" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 677.748048][ T5886] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 677.856540][ T43] usb 7-1: USB disconnect, device number 64 [ 679.572344][T14070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.767986][T14113] autofs: Bad value for 'fd' [ 680.587271][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2071'. [ 680.615748][ T30] audit: type=1326 audit(2000000390.906:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 680.646998][ T30] audit: type=1326 audit(2000000390.906:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 680.679332][ T30] audit: type=1326 audit(2000000390.936:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 680.703501][ T30] audit: type=1326 audit(2000000390.936:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 680.727551][ T5938] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 680.735568][ T30] audit: type=1326 audit(2000000390.936:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 680.747092][T14131] SELinux: failed to load policy [ 680.760010][ T30] audit: type=1326 audit(2000000390.946:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 680.810952][ T30] audit: type=1326 audit(2000000390.946:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 680.838896][ T30] audit: type=1326 audit(2000000390.946:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 680.956465][ T30] audit: type=1326 audit(2000000390.966:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 680.984922][ T5938] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 681.016802][T14134] autofs: Bad value for 'fd' [ 681.082173][ T30] audit: type=1326 audit(2000000390.966:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14128 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1178eec9 code=0x7ffc0000 [ 681.115811][ T5938] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 681.124956][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.196761][ T5938] usb 3-1: Product: syz [ 681.204837][ T5938] usb 3-1: Manufacturer: syz [ 681.210904][ T5938] usb 3-1: SerialNumber: syz [ 681.434776][T14143] random: crng reseeded on system resumption [ 681.479054][T14143] Restarting kernel threads ... [ 681.484778][T14143] Done restarting kernel threads. [ 681.641866][ T5938] usb 3-1: config 0 descriptor?? [ 681.650227][ T5938] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 681.661583][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 681.672374][ T5938] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 681.709877][ T5938] usb 3-1: media controller created [ 681.944464][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.092457][ T5938] DVB: Unable to find symbol mt352_attach() [ 682.187386][ T5938] DVB: Unable to find symbol nxt6000_attach() [ 682.195782][ T5938] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 682.208407][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 682.232394][ T5938] dvb-usb: schedule remote query interval to 1000 msecs. [ 682.239675][ T5938] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 682.249946][ T5938] dvb-usb: bulk message failed: -22 (7/0) [ 682.255730][ T5938] dvb-usb: bulk message failed: -22 (7/0) [ 682.296626][ T5938] usb 3-1: USB disconnect, device number 74 [ 682.357325][ T5896] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 682.370287][ T5938] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 682.392512][T14160] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2081'. [ 682.516080][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 682.522528][ T5896] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 682.537853][ T5896] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 682.547438][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 682.555582][ T5896] usb 7-1: Product: syz [ 682.734294][ T5896] usb 7-1: Manufacturer: syz [ 682.741172][ T5896] usb 7-1: SerialNumber: syz [ 682.753394][ T5896] usb 7-1: config 0 descriptor?? [ 682.761258][T14154] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 682.773661][ T5896] hub 7-1:0.0: bad descriptor, ignoring hub [ 682.783466][T14172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2082'. [ 682.799954][ T5896] hub 7-1:0.0: probe with driver hub failed with error -5 [ 683.005930][ T5938] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 683.156026][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 683.164780][ T5938] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 683.177025][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.188592][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.198577][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 683.211774][ T5938] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 683.222977][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.240986][ T5938] usb 3-1: config 0 descriptor?? [ 683.402273][T14183] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 683.657584][T14177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.675560][T14177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.718862][T14171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.745821][T14171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.771826][ T5886] raw-gadget.0 gadget.6: failed to queue suspend event [ 683.856009][T14154] raw-gadget.0 gadget.6: failed to queue resume event [ 683.877275][ T5896] raw-gadget.0 gadget.6: failed to queue suspend event [ 683.909794][T14177] raw-gadget.0 gadget.6: failed to queue disconnect event [ 684.230989][ T5938] usbhid 3-1:0.0: can't add hid device: -71 [ 684.237130][ T5938] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 684.255072][ T5938] usb 3-1: USB disconnect, device number 75 [ 685.377493][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.386241][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.434972][ C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 685.441238][ C0] CPU: 0 UID: 0 PID: 1296 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 685.450261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 685.460303][ C0] RIP: 0010:comedi_buf_write_free+0x414/0x720 [ 685.466355][ C0] Code: 02 00 00 31 d2 f7 74 24 1c 48 8b 54 24 30 48 c1 ea 03 0f b6 14 2a 41 03 44 24 38 84 d2 74 09 80 fa 03 0f 8e 66 02 00 00 31 d2 <41> f7 b4 24 80 00 00 00 48 8b 44 24 48 48 c1 e8 03 41 89 54 24 38 [ 685.485942][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00010046 [ 685.491990][ C0] RAX: 0000000000000001 RBX: ffffc90003056000 RCX: ffffffff88be07ff [ 685.499953][ C0] RDX: 0000000000000000 RSI: ffffffff88bbb020 RDI: 0000000000000004 [ 685.507919][ C0] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 685.515869][ C0] R10: 0000000000000001 R11: ffff888029a62e3c R12: ffff888029a62e00 [ 685.523826][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88be0740 [ 685.531776][ C0] FS: 0000000000000000(0000) GS:ffff888124e75000(0000) knlGS:0000000000000000 [ 685.540685][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.547249][ C0] CR2: 0000001b309feff8 CR3: 000000005b5f6000 CR4: 00000000003526f0 [ 685.555204][ C0] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 685.563151][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 685.571102][ C0] Call Trace: [ 685.574360][ C0] [ 685.577189][ C0] comedi_buf_write_samples+0x3fc/0x640 [ 685.582720][ C0] das16m1_handler+0x203/0x5a0 [ 685.587472][ C0] das16m1_interrupt+0xb7/0x1c0 [ 685.592319][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 685.597761][ C0] __handle_irq_event_percpu+0x236/0x920 [ 685.603379][ C0] handle_irq_event+0xab/0x1e0 [ 685.608127][ C0] handle_edge_irq+0x3ca/0x9e0 [ 685.612875][ C0] __common_interrupt+0xd0/0x2f0 [ 685.617798][ C0] common_interrupt+0xba/0xe0 [ 685.622461][ C0] [ 685.625372][ C0] [ 685.628282][ C0] asm_common_interrupt+0x26/0x40 [ 685.633287][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 685.639681][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 fa 46 f6 48 89 df e8 3e 4e 47 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 59 37 f6 65 8b 05 9e 4d 2a 08 85 c0 74 16 5b [ 685.659270][ C0] RSP: 0018:ffffc900046af818 EFLAGS: 00000246 [ 685.665313][ C0] RAX: 0000000000000006 RBX: ffffffff9ab68580 RCX: 0000000000000002 [ 685.673260][ C0] RDX: 0000000000000000 RSI: ffffffff8d82662a RDI: ffffffff8bd045c0 [ 685.681210][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 685.689160][ C0] R10: ffffffff905fb397 R11: 0000000000000000 R12: 0000000000000022 [ 685.697111][ C0] R13: ffffffff9ab68688 R14: 0000000000000000 R15: 0000000000000003 [ 685.705066][ C0] uart_write+0x2a4/0xb30 [ 685.709379][ C0] ? __pfx_uart_write+0x10/0x10 [ 685.714212][ C0] sl_xmit+0x6d1/0xf30 [ 685.718262][ C0] ? __pfx_sl_xmit+0x10/0x10 [ 685.722829][ C0] ? rcu_lockdep_current_cpu_online+0x35/0x150 [ 685.728971][ C0] dev_hard_start_xmit+0x97/0x740 [ 685.733978][ C0] sch_direct_xmit+0x1b2/0xcf0 [ 685.738726][ C0] ? lock_acquire+0x179/0x350 [ 685.743404][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 685.748669][ C0] ? do_raw_spin_lock+0x2a0/0x2b0 [ 685.753674][ C0] ? __dev_queue_xmit+0xaf1/0x4490 [ 685.758765][ C0] __dev_queue_xmit+0x144d/0x4490 [ 685.763767][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 685.768948][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 685.774739][ C0] ? rcu_is_watching+0x12/0xc0 [ 685.779493][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 685.784844][ C0] ? __schedule+0x11a3/0x5de0 [ 685.789506][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 685.794512][ C0] ? find_held_lock+0x2b/0x80 [ 685.799170][ C0] ? skb_dequeue+0x126/0x180 [ 685.803747][ C0] ? find_held_lock+0x2b/0x80 [ 685.808409][ C0] ? rcu_is_watching+0x12/0xc0 [ 685.813160][ C0] tx+0xcc/0x190 [ 685.816695][ C0] ? __pfx_tx+0x10/0x10 [ 685.820834][ C0] kthread+0x1e1/0x3e0 [ 685.824886][ C0] ? find_held_lock+0x2b/0x80 [ 685.829544][ C0] ? __pfx_kthread+0x10/0x10 [ 685.834117][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 685.839905][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 685.845084][ C0] ? __kthread_parkme+0x19e/0x250 [ 685.850085][ C0] ? __pfx_kthread+0x10/0x10 [ 685.854658][ C0] kthread+0x3c2/0x780 [ 685.858706][ C0] ? __pfx_kthread+0x10/0x10 [ 685.863278][ C0] ? rcu_is_watching+0x12/0xc0 [ 685.868023][ C0] ? __pfx_kthread+0x10/0x10 [ 685.872591][ C0] ret_from_fork+0x56a/0x730 [ 685.877168][ C0] ? __pfx_kthread+0x10/0x10 [ 685.881736][ C0] ret_from_fork_asm+0x1a/0x30 [ 685.886489][ C0] [ 685.889487][ C0] Modules linked in: [ 685.893359][ C0] ---[ end trace 0000000000000000 ]--- [ 685.898787][ C0] RIP: 0010:comedi_buf_write_free+0x414/0x720 [ 685.904835][ C0] Code: 02 00 00 31 d2 f7 74 24 1c 48 8b 54 24 30 48 c1 ea 03 0f b6 14 2a 41 03 44 24 38 84 d2 74 09 80 fa 03 0f 8e 66 02 00 00 31 d2 <41> f7 b4 24 80 00 00 00 48 8b 44 24 48 48 c1 e8 03 41 89 54 24 38 [ 685.924421][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00010046 [ 685.930468][ C0] RAX: 0000000000000001 RBX: ffffc90003056000 RCX: ffffffff88be07ff [ 685.938418][ C0] RDX: 0000000000000000 RSI: ffffffff88bbb020 RDI: 0000000000000004 [ 685.946368][ C0] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 685.954315][ C0] R10: 0000000000000001 R11: ffff888029a62e3c R12: ffff888029a62e00 [ 685.962262][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88be0740 [ 685.970211][ C0] FS: 0000000000000000(0000) GS:ffff888124e75000(0000) knlGS:0000000000000000 [ 685.979120][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.985682][ C0] CR2: 0000001b309feff8 CR3: 000000005b5f6000 CR4: 00000000003526f0 [ 685.993635][ C0] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 686.001587][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 686.009538][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 686.016925][ C0] Kernel Offset: disabled [ 686.021224][ C0] Rebooting in 86400 seconds..