last executing test programs: 39m29.461134541s ago: executing program 4 (id=104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') r3 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r3, 0x0, 0x0, 0x8) fcntl$addseals(r3, 0x409, 0xe) ftruncate(r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0x1}, 0x18) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x6c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @random="c900"}, 0x0, @random=0x8, 0x30, @void, @void, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x9, 0x8}}, @void}}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x6080, 0x0) io_setup(0x20, &(0x7f0000001140)) 39m27.81747409s ago: executing program 4 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_open_dev$video4linux(0x0, 0x200000000000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="30200000000804001c001a8018000a8014000700fe88000000000000000000000000010114003500626174616476300000"], 0x50}}, 0x20004400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x34, 0x1, 0x70bd2d, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) 39m27.225043946s ago: executing program 4 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r4, r1}, 0xc) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r7, 0x80) r8 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r8, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r8, 0x3a5) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}) r10 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) 39m25.029727068s ago: executing program 4 (id=116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000fdb03c07fffffe00000000ffffffff000000850100007d00000095000000000002000000000000008000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000380)='./file0\x00', r5, 0x0, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 39m24.827813264s ago: executing program 4 (id=117): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00', {0x4}, 0xb41b}) 39m24.526819648s ago: executing program 4 (id=118): socket$nl_netfilter(0x10, 0x3, 0xc) (async) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="a675e078255307a975a5362b6bb75aaad7c76dfc96453666094388a9740afc617de10540a8c329b0d0757266966e292651541a0678f909c58150fed6d239815c83d2934c37e26f5995e42fafcbe0a9b7c626899a6e73fa6691c21584757fc36234bf8917e240814adcd9a8d011a9325ff2dd5f11a0ea1fb0b3e4fe14f8d136ec30ca070dc66085557ff95d267e522bf8440543e210080b770603e628ba55bd68bbebb6d10ea59c34cbb036804f01805117a71afe75e2afea8431cb168712b0e425a75c75de98c0c38dfc233cc114c42b1bb15b6801a72bb3a0fd0f6b19d37dc26b0f169073365120830c548e9e118d50c42824598f", 0xf5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0xe, 0x7ffffe3a}]}) (async) r1 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) (rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async, rerun: 64) setsockopt$inet6_group_source_req(r9, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000680)={0x79, 0x0, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async, rerun: 64) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000200)=0x2, 0x4) (rerun: 64) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 39m24.240835413s ago: executing program 32 (id=118): socket$nl_netfilter(0x10, 0x3, 0xc) (async) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="a675e078255307a975a5362b6bb75aaad7c76dfc96453666094388a9740afc617de10540a8c329b0d0757266966e292651541a0678f909c58150fed6d239815c83d2934c37e26f5995e42fafcbe0a9b7c626899a6e73fa6691c21584757fc36234bf8917e240814adcd9a8d011a9325ff2dd5f11a0ea1fb0b3e4fe14f8d136ec30ca070dc66085557ff95d267e522bf8440543e210080b770603e628ba55bd68bbebb6d10ea59c34cbb036804f01805117a71afe75e2afea8431cb168712b0e425a75c75de98c0c38dfc233cc114c42b1bb15b6801a72bb3a0fd0f6b19d37dc26b0f169073365120830c548e9e118d50c42824598f", 0xf5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0xe, 0x7ffffe3a}]}) (async) r1 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) (rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async, rerun: 64) setsockopt$inet6_group_source_req(r9, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000680)={0x79, 0x0, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async, rerun: 64) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000200)=0x2, 0x4) (rerun: 64) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 31m24.081118426s ago: executing program 1 (id=1686): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) 31m22.989755824s ago: executing program 1 (id=1690): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00d}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r2 = open(0x0, 0x119000, 0x3c) mknodat$loop(r2, 0x0, 0xc000, 0x0) chdir(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0xffdd) link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./bus\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x30000, &(0x7f0000000440)='.&[-\xa2-!\x00') bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 31m21.868153331s ago: executing program 1 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000130a010800001000000000000100fffe"], 0x14}}, 0x40000c0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2000, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r8, 0xc00c6211, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000540)="8ef7b96cf1391bc7836bef93f804befc70299107d275d4583c86d02ec53f81634f4175372948eb47b6a8e2e80a40f4f26c4cf05feef90bf71ff01c44822e9471a59adf2233b628e47246d7336f318682e871200f4576aeca86ab4a4eabfbc7fb472e737e920680827843cbed33b0311839a03f461eb9e42f7d5920b035ff0cdc3c3231152fec7ecffffdf126b98c77a842fd7722a86dd42855c3720f3e452a8cf397fec67b230cf30308519732045916878c61f24220ccbaa40f81dd1bef2e771529", 0xc2) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 31m19.997618585s ago: executing program 1 (id=1698): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x4004090) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000040)={r6, 0x2, 0x2f4e, 0x200, 0x6, [], [0x0, 0x9, 0x8, 0x4], [0x1, 0x3, 0x2, 0x6], [0x4, 0x7, 0x7, 0xd8]}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r3, 0x100000000) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0xc, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096) 31m19.285793673s ago: executing program 1 (id=1701): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0xffffffffffffff62, &(0x7f0000000280)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ed", @ANYRES32=0x1, @ANYBLOB="1700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000006433e8cef2703554000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000000b00)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000004, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x10001, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x10000, 0xa3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0xfffffffffffff1c5, 0x8, 0x0, 0x3, 0x3, 0x20000, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x80000001, 0x6, 0x0, 0x7, 0x0, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0xc675, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x100, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='geneve0\x00', 0x2, 0x3, 0x80}) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000480)={0x0, 0x36c7, 0x10100}, 0x0, &(0x7f0000000240)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/204, 0xcc}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) 31m19.071032177s ago: executing program 1 (id=1702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r5, &(0x7f0000001f00)=""/4111, 0x100f) recvfrom(r4, &(0x7f0000000200)=""/84, 0x54, 0x1, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x800, @private0}, 0x80) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) r8 = io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x791e) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000100)={{0x0, 0x8100, 0x0, 0x200}, 'syz0\x00'}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400ae21000000000000140c00000000000000001400020002000000ffffffff00000100000000000d0001007564703a73797a"], 0x54}, 0x1, 0x0, 0x0, 0x20004010}, 0x1) 31m18.321859791s ago: executing program 33 (id=1702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r5, &(0x7f0000001f00)=""/4111, 0x100f) recvfrom(r4, &(0x7f0000000200)=""/84, 0x54, 0x1, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x800, @private0}, 0x80) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) r8 = io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x791e) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000100)={{0x0, 0x8100, 0x0, 0x200}, 'syz0\x00'}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400ae21000000000000140c00000000000000001400020002000000ffffffff00000100000000000d0001007564703a73797a"], 0x54}, 0x1, 0x0, 0x0, 0x20004010}, 0x1) 16m30.430026854s ago: executing program 6 (id=4717): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0xc050) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000080)) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x28) 16m30.158473409s ago: executing program 6 (id=4719): bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x89, 0x0, &(0x7f00000000c0)="31656086acd350a51c6679f12440e5f7d423f40cfebb8f058a61e136409bccfa620bb42a4940ef41abd07675ea482f3b2cc3ce82347ab44c2e5eb824a23d78dbd5cb3b00071aedcb2a172b3e8f4db1568484658bb3b8c50f956d5827917f84217f5d995a8b4a03d08ee8b7a0f5e78c53a88ccac482863327e4be125e64f17e0b7da60dfd0a0603c640", 0x0, 0x7ff, 0x0, 0xe5, 0x0, &(0x7f0000000240)="4733a0e22d02d5860f04ebccd604835fdfb895dee06f276243b3cd9df29c002c015ebfc7b89a5adc0b48e20d7738f93363b75c96f4f2c6242dda63197d8c89b04c478f820a5874392b393ea01ec99e50fffa87adbe8bf08fb221670f3f498fbff8e1f9f8f740da3793efbed873d85e290c58ae68602fd2d73ea4186f42dadadeae266c308f8bb87a5c69e4d0062f0bb0a5a4358bbdaa0e428b7c3309d303c8accb501131a7800c257e450b42c9f414c3c948ddaef10f6a5196db515791927de09063732cf03997ce3cfa68bf9468fe5456ab3c8ee09bbf5e7bb56b36783d160ae1307aab4d", 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x58, 0x2087, 0x703, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x80, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0010070000200704c46c32155d"], 0x0, 0x0, 0x0, 0x0}, 0x0) 16m26.697730107s ago: executing program 6 (id=4729): madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xc0, 0x30, 0xb, 0x0, 0x0, {}, [{0xac, 0x1, [@m_ct={0xa8, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x7e, 0x6, "dae210b9f2249e8fd1548ed23a1b8a591589fb8903d25fe39095161a0984c64c323a8c8aca8bb4a556da7d8d9d3bca6a76d84bc9c6f8c8f83f9198b9e8f4f7ae1861de627d3c51cd9418d5a5ccfc9cbfac2e0fe2195ddaee71e9f93bc00350a594573c4dfd27c1ed809a60c58e42be8ae3fe16922231a59cddd2"}, {0xc}, {0xc}}}]}]}, 0xc0}}, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x0, 0x59}) io_setup(0x8, &(0x7f0000004200)) 16m23.897250241s ago: executing program 6 (id=4738): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, '\x00)'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)={0x20, 0x17, 0x1, "0e"}, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0xa, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000480)={r3, 0xff, 0x4b}, &(0x7f00000004c0)={'enc=', 'oaep', ' hash=', {'sha256-ssse3\x00'}}, &(0x7f0000000680)="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", &(0x7f0000000780)="cb20dadc3a6fa9ad78c3e74366c322b7dd4dbcc790fe828d42e3ea0118b4588d62c2bc64b102c278d737cc0ab24a902b6bf70299663b2a9527eba8d1fed03a2ef6949d7d05a69f3934fcd7") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 16m19.46560237s ago: executing program 6 (id=4753): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="c5b3cc9feb3a71c3b7bce8bdc921aa31aad58382206ac920fc2c5d5790a21e27fed831ae1fc7c2c154a5bffbc33fdb377b985ba7fad36d2bac62091489914146f6c1b49d5cb9acfd2a76df40b50d", 0x4e}, {0x0}, {&(0x7f0000000340)="9e207462bdbc8bf54878d4c5f18a0fa0008b3ea21878b74d79dcc9dea313bd61e0c2002548a794bd206b48d5cf688d327805c2d21386ff4fc0784c1cef907937b7338c79d26e6cb05d45010723b9000392fa4881acd2ceece8533b128a77829dd514d94db38890abbe2f0eef837d10cea77b1933a4e42db9df1f15b63b79ed8e526357d83d9a4025a8b80c953b71c4dcb595f72a313c28048cffc9375f6a77aa891c18cd13924953488678f448724b48b016928452736c7284d47c6e5a08adc5f03ea6", 0xc3}, {&(0x7f0000000500)="cbe539c43f15a0697e404968ab38cbaa2e9902161c7b9a10fc7f34a52e6fee5aaf2f3cb1874668d0a7f3263ee3f661f3a190e036c1d58fbe52501a8f02fbdc72fef5a074d802c5f4df90dc2b74470258226a04a8ae655f410cfa2271f4d5f18522ddfd86ed3874f789cb686d7678968dae79999987b5d7614fbb318f05a801c0a145e33f042205a75083e03f8380823926fac771619b4532a14e385fe862f66f2b24d0cfac0a4f38fc9f3d4c10deb128924514b68a068c23d8d97a2c46e6fdbee369de74", 0xc4}, {&(0x7f0000000440)="0819d8c9c3270e952558094653e9b76bbff4e4467eb6f3568e93b8a6aa26c810901896714bdd6d73d38d0c9324bef48da419451b1d423ee75b87f504c61b732f0fa5097e9d3bd0bd380480f2f8e1c0644535a05b5f0b6ce7f60eab944591b32038667c0404385c30f1", 0x69}], 0x5, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f00000006c0)="bc33204a6724a96211bd2d96e30aad8e1ee70d64e68988d86aeea454a2413c0e2e6f739b36", 0x25}, {&(0x7f0000000700)="d3a2da760101daaebda4019aad4f1e0d9adc623d72598546e5b3b15c8b5a6e1a5651de3dfe596dfc0da3e12a915c6be23fd00c553df97d01d6b54f485b0c706bc286de8f0062c6247b7c0be2bcb140922eedaa4b", 0x54}, {&(0x7f0000000780)="047e4c3ca11341719d72c1c13551e62215156714197c56ed1c9df76dd676786bfd5ead38ff8d1c312822eb3552893ca910fa9aaa5d7df11e98e2ef981cd24cee7944b74248449ab6011b7b4203be93cce7c0d585a513c8db5a74fddebc6fed4de5a71ea69436fef66eafa7c0af6692ec4e09d7e4a20c8c9c87c55696d088437dc52c7571d30a68882e49b768d1599e4f0cb59d6ae220f6e3fbb32b4d2f92c07dac84bf5be567ac7e68694719189ca5995f79331822009694314ff514ce4cf386fd8bba2beed32246a7d8024ad8b509e734bf7f4d381263bcbdd688e0e4e5ff1a0e41f1e2e64d9604bb6620108fd5c032a3fc9d27b0e3", 0xf6}], 0x4, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x40, 0x4}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000b40)="4736998542a5ee53ddc59ba01943d78063f39b1a8d2c265165991787549a442c0e0a07cc1b4e89fbfa9d1d76562dc40204ca5acf2cb834ec81fcc5c317bf3b545ab9f0a82ad4eca0bdde43d7b5cda5f09bc953e1b8ac82628ed8e0b972571adbc06d75e15abc146f2dffc409ad8bdcb623f00e69f262efc0bdd77e2ba75978d6d1c6658734212fa367e0c9b45dbbc6cd7b031ec4ef928e38f54f55c970d66e6fa90b75b3d112cf61126f395e0408f512b49471e7c8cca68f954ae5fa060b1a841894a8", 0xc3}, {&(0x7f00000008c0)="ec61884bb3aa601e6dde5ec89ed701bcf88d620d747956ed5c2e27649dacebf96a4e0c0546b9d4830183", 0x2a}, {&(0x7f0000000c80)="24d9a0d50880499ec9c278ef42ae6fb191096beb6c65ba03bbf2de17f706607578d1ca1193f82a84ff9e98a5a486c36617445d9108c45e8496a4fb9a6874c5a6f29de72c1b1b3279a3c4450a5dcec056d09dbdae3bf6bcad75438457a0902819ee7a85c2ce05912980346d16b868c5c983801cdc74470a1e4712a1d1964a13a20cbac096ad70271c352faa88932f88c18e3998be26842ee441d1c2eaaa40b779f8c833b0846c3e13f85135bd76ee3fd8b6c32311586b7148952b913af4983a4407c962bedb4fc9314ac139b91c4db3f286626d5eb6fce3501e893302f2ddd491447c3a10ec7b968ca48c466b03e3192ebee79192b9c0060912a007d1fd6d391e9892b2eb6121fd4e92068b700e6da2521b5f95ca20c2089331cc88208fa7f9e69f7f11873a116b39f79774d2fc550c55dc3365af1d31bb322900c04f9e7facd0cf8130a371d3012725da762127eaabf4fb2e1371723b97b8507ec481dc9c9e078d692200542a4a9a7210e39e9a78118c0c899412eff557f7c398bcc1b1fc94d3d38a4d382afd4305bb6489f8ff5a4c176c6789ec4fe15ca918fbf3c148ce84e27b7ee1c2931325ebc384a978b84f3153424caaec5d06ceccecd80ba71490caff452ba57ece6cda9e4759343fc6d04f5d3415325520cb0f8709c8ece013952484b8ebeaa280e5a04b31e83d91beb8aa5094634029a37bb48cdbfa56b6427252c339349a62a4882218794bfe0cdaf280eeb2097a7bb707b093997800927c28f1bbe6c40caa79b161448e215baa374a63953bc96c730f85c4169915045331c4f4e357982cf3122aa53589175dee76031d58bbc8eb7fb0761abbfba9dcf988479ad0ce9b031cf2bbda617ac96e07304c4e3010f8558f650f2e058c5027daa4fbed895dd69b270b1a7a57955c3d60487562ac18311b55fd8982d9aab7fef16cc4013eb55494a507825aff6d5d05509009255480392d1db850c09a2e48db4908e0691fcdc80e79f2ee304f0159efc310d95a4d80610719c5d98b21b0e92bcb89d9735c18f5acdfc548e744b7b3507f109b57b2bd50a91126aecae11cf3d2e8d27632a319c813c596e28eacdd10b7cca5814a09865d45f2cd15d1b7440a85f3a5143787b715c755ca8139fa54d3311ddf2f1a771e5322c3a75c0280cdc1244e870bdba71176da58efa61269a3e08108364af3b3cbe92be6b41833b7d591e85a5caf21b6ea6eb34da0aec5acc1871aea662a99b52f636523dffa4f0c2d03e9feaf2932edb0227f8fa0d149259d00232430b150cabdc286b858c64ca45855abdbe0f445322d48d48d29feb0a8b420d826db17b9fc6dc8c506e19f3aab7e32dfe2ed2e10b2bda239824703ea33ab12e676c21a6d76a861dbfd6e49e6f3e7be1ba1bfa5ad2ed8cd9a321708de478639e12a25d6f1e0c4a1e2fcc121f20040aa75994e947dd2319f133d244b9a8e66c66c8a3703c975efc3b471cb65af7a85e9b8cb5d6f808f352cdb145fa8b41811794a4bc4f4726c9de96be820d90842c241b444b204b4d36308f5a3a947a733680b53e307315b700a529f7dd3a332ee63f997c37a890e2de7664cd06ed631ac03d49dc34ddc9dd4bf65e96b5550425f24c219961358e57f7a3c0edfd4413fdd2e89ad214813be6eb71c958f1565e7e23ba25354e92595a863e9b698e3fefbd6bcb54422defe4d01fa18c7840443baab51901a606e75e8879870e5b7c2bb00b474ec3a102e3b5f21ab13329e9176097684d3ed8b71b0a3ca4d4388e617e9a17b4f241e63162251c55ff32397bb99e288fe852b4def2615a6345847ea7f1c215f5e46fa05a273e8fe0b5fbccc8de5e6c8d64210746ba122963dfd3ca760fbb4b1d475acc9a5b8bd01f13d45a1edeaca65013d44d42537518a614ac93031081ebff613c0c4df09b671240d1a1c517429c4273af325593ad474391e173660615010ff1bc63c45c593958b2d581ae63f8e75b789c742d7846455ea87bab4ec8e4a963255dff9c62ecf03d39dffb63cd6c10d9f52d8342c24bad0e49174843527cf8ac3bcaa8a9fdcd860928ecf6ab017b6d167a40fa1d100b4386fae656732c9f07c336c7b818b072b17ebfd93c4b211c72eb75eeae93960280f442aa3d26fda9ba676a7f71e3cc27a608dd3fce1ad648df9d1fb00ff575c547e0d34814c956c4196a9d7ab0665a822826ffa5e2889b9c79f923d28e734b326a6a044e104cf771892dbbdb9d28ed817cbf818fbaaf046ef9c6fef176c6e52e795ce8b6f5daacb32509fe36769ab1617152c44478a5223085f6a6bac0e595ddce811384a3f68eb03908b93c52a2822afc338ee8fe39b0fdcd6fab7e624abc655c8c16641b8c39a589fee02d48c374af1023e5570db8df5d10dd8e69a91fe7a01320cc840a9fde40a2918f235e0668894c522830f4727681532845a802513ad0ac0c6de5e3e41e1c4b9a604685d7e6fd5749d591abab87428143e4d028ed97187a553fadd6805f2eef5b8657f33fcf8cedf2bd9b9b83857bdd748cafbe143d16bdd4a436ce0dfa83a49ae151ddefda55d4e97d5b9859050189326c3381a7c4e2fbaf355b220e38a6e3b8ccc4d562393d5d1bad2e3737bd8ed9c65c8482a8332a2640f80fe139492c23fc18e522e8ec0174789f1222bf68c5330d6ca31568fc0bd4c6d742ec6a6738366a565714e82425be747cd04d7244fb4dad29b0830cb4bb9ecc17495f0df4fc0b14ca6808bdc68c7470507082ea38dff5adc32d6f9c388d5534c0786a1e3acb5c82198ab7a9bb4ec263f27e5911d27a831640b178e1a3afdcee43aba70a97879144e4a96c5eaa64295ed1ff9447ed0577b426e4740e2e2c4bffc570d0749030b5b6a1d47c8bca8745b4353b0193fc7008d479099ab57b7c8b371a05defe008e28193f3549abd1c32fd6c1aae1cf7967aa1eebeb6efdfb1ddcdfdfd3dec4e80cc4bffa244c321a8651bb886196432abb8269a77b687b74ba219fb5da5534e177f64445de685edfd9330380b62ac77228b933ac18daa8ae23f257b0a3eb8983822fc0781d197ffb2432d46cc9cb77f6e1316a4cd4da502a8e9fc2c28d2d44f3de18f978c6e9709e316b105bc1f8636ceec30a06313efdec3fe96d27564b2f9d5de9f3d449c8110db9e02979392d8c5eb0b1f33cda705d8779cfd5e8a664d7c20b734c5293640b1c9fe35bc741e557f864e73cc346e428b3f6f04fc2fd7bcdfd670457e17fa7e8ad3e503156c329bfc1b10e34205af4543bedb812483fcadfd49f018807d70ff34ec7deb3680e78558f53b66db13186748c8dcf8dcca59f0febb5020a6571b345fb4267a2618b8f56077950b9802311d34a94eb91596ef1f5720a0708b19aab37f852acef2b515deaa0ceec82e3f3e2a5758dbdd73a4eb4254b26c39a857a08b4fe831d6fb348fce09b0cb49c0409b4ee52e6d3682f8ed8041eeaa9fe3f2237039d779a3cf109c4dac3dda4658e0b6f1c9ab47253204cfb318f80dadbef391a1b0f60a8788f5a15a3f4d05b4696e9b2c42ce270c76c559394b4952b084a51c2947345fe4cb63628b9c31fa8ad0cd59028b6bb6c0a95164fda540379b1a4dc04bab5386750b045d7a49df314d785411be076026310b9b0e1647b1e3327ced7f4bf92fe51ba8091419d5a67b5424980c8b3a31ba6126f0f091fdd10a89b072d9020e8b5dca18d50fd7c05637938fed97fd17247422d2341f01f96cd20029dfcbeec6a905910cc5af2ee757aee80125c5026a48389b6e4fa5f5e68d8d81bb82dafc46895647f822c1e3d8cf545bf75f477f3d2cb52fd33820de4fd6fbcbec0404bdf64a4a26bd9c5d1f2bfa1444179979dabbdbf075007564ea642ca11ea43e65a4ef5cdb7f3094b047d5a38b486e4b9e1c84ef1c8691c6ae3a92624a0d363a069ade85fb6ed8137dd9a75f5ff67ed14b1ed131318c0c9d37b1c87dc091163e6463e6a11cbc7cc9d79acc9170d7fe2d3d9f0fa9ea59eb6fb75750287e6e9114d6229aa562bdc59e74d40153d017ff23f358c2962c44a60f57913a8dda407e5bd8be54396676d5444670174c45d7bd1fb465427d8f59f9ef92efae309bb5aa896b21d0fc278a8f05cf1b1c09501405d8240eada22b29140873ac78d8702e667225f9efe7336f1c56d4fdeb21f36895d3ea22c4228232115112bf9e28f0fab21394a63463a7dc478b2e8155e4e194cd1d22396745035fbcacbcb440cb6aa05dc14cf960e6aae22b16540ff653f4d05de368bcfcca3a4f231cd605fa42dd349f0ed7ee04b5c517ba2195b8ea5eac0a4ed289ebc94cbc7e66c593bfc851fe42e9a14184f54bd4009da9ebe3eea2c41872cd302e0e2dc64ec04c7def93d93e2fcb8fcfed951a31724f8dcaf7a556dce8dd2d4019f1c1b1d8831fd7bf1d540455bc1c4c3b8c227af7a7089af3c23417ab0ed85e64290bf910c83a42ebb14ee75f247e6a60b9c9f39a5e576adccedf7d140abc487381f72e33259d1b17cd003bcd0285241e3d92bed43329224953f42d95c772fd5f2ba94859600de8d2cff6aaa4da6ed6f9ae21ec9a082129d316d6bb7fe84910abcaa9857910668d27ee28e50a73980be9e26cd610256bdba30befb46cc523c4b74199811932d00b3b9c84d4af5238dfaf4553113371e5ffaed54e9dd593e78e141ab9e49950dbffe58ee629980e52907f3613727a1ac3e5bfb9dc9616dc627cfc60e5c0d576019450108fc06957d771208beaadf7e3719453921e21ac7b69ac53dcb1a0c339fec75d59ef641222e3c71f9fec2f89eb00f97f1f7d4b8226083b1e6cbdae8795deb9627183c62ee9733b440645c776da9fd40e7c2226e68d621d7a0aa323de0a16aeba044d4e0f28e1dfe218e3b4f3d199721d6a9e173bf0f6dee6b569d764e38abb5cd62d34abf09f31529992201e9ea77eff1f14cd68c38fd419773d7be58a9a11d703b18b6609546be1a8f233147edf82aa313e3debe398a6b98c0e96eb189818537b7c1d1adeea1cb39e75099e6f06cef75c8fec6a833d5ba3d1c885238484a59ed7c5494fe8288dc377c2962c257e5c55ca6f7af6b6318bf7c53a722f26d778258a247df4d7295cdde20ac8ebebca108aa3045f1e4cc0946eeac63ad114ba778e956f53c1bb5257b008a2c95be4cfb6b1bb06f9b2e4accf916c5b6b964f7fbfc1d11ec03423688c306941be4b3180c2a705369b38fb1aa14a72cd9488c3578e67e8ba51f1765c4fb2943b15736bd40d5410e0352b3d69fad0a4c9bc3712a8598f716ef3d4583d316b0930617e6c7d7d7d90edd843834f045a5d92a2e958e0922f4e0774f2e72ef08de36ad8da3df476dfb681c6962251c7ecd8d62559b299f64faa6d0c407107b7e34b4ae2c9153ae16b47a811e48cdb4a475de7cf6aac57d99eed0733c7d9593609c5be628e44ad57bb7492453198f9d3576cfd3ba692b2a54a7eaf7aee8fc21a6e649c4a979b027b84143f9043179ce09e766424fabcf705ac0f78b4b2572b6fd9c1fbf9acb614694cdc3245e7a84a66726aed3c1936e4b44498e59f0804752b05a4ded5865a353e789d67349c97a064ed162916354dc5d1d237c59ff2106d3a2c351fc578fa57aa21860a67cd5b22b02c6435fe4e713231674374f3580f048999bdd453a7370b28780dbcf01adc935b9e28b7b7f65c26e0ef00571cc2b6bf930aa025097c882dee0e5274ed025504a8fa300648e2f0ecaf7a2d0591ef770234dfd08dcaf6f224b660eec1a8fc364fee6c4d22aec553d097b7997c540284be2de3d97e066d112a57f9b3bb70f757ad72ae4741a4ec", 0x1000}, {0x0}, {&(0x7f0000001d40)="b9ce2d90e31d27e4ed6d3c27d804de96f5f5286aa326f7ccf996cdf0148269c4c5dfe703e8771fcde5259c8f17dd570906d735aeccd31795d7c9a466645fa4b73d354579b4b7fd40bf5b6230ce5871d2d8a98dc5dc9f4cb428cfe295003a68baf79cafa11b43d14e27a572c0d85188188b767c675e4da35aa50027ae5725473a55181f1be1e19f353bdc33961ca14df0b3526ff8c4547c64074395fb0b653e19c7f15ec49d9e121f9e9f1117e64a787cac66e2e9afebdb29dc6a6fc3bb9127bc950004d5642b881627d357571a27e38e79db", 0xd2}, {&(0x7f0000001e40)="143dddb82d2e026b1854fdd28d89afa9ffd8566f082d5e72a7a691f4ac1cd9d1f805095fed8b4a3b18227e9e21ec1ca7ee9bbdc271d6c1756c86253ca60a46c6c8d26c7cd20d452b4d30e33bd4cbaec4d8646f6a61ca6a87b4e756daeff61c50ad48f105abc58f9f8518843e259cada8237e391ce13071c1860fd01c723494ebe6e86583344eba40d3e10b8facfd35fde8c7c5c2e4bffc72949506e3af54a5fd4124c14e7fc1357697e592b8", 0xac}], 0x6, &(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="1000000000000000010000000000000001000000010000600000000000000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='0\x00\x00\x00', @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="85271d722506c276f7e65c8461ffd749dc7b2f3d04fd33bbd983411907cd28e9846a8261227eb7f713b50529541c8d5be8c7c2d00022b049dae12bdc1a9fb7615b407744127fa9d473a2a5898f072ea801d95de4097b274d767657606b89d7edd6a2711153126ed927a501af7d30ee3ef6fca9c202925ea747b67cb470e43ef8ae70280da2ec9666990ad6351330efce39230778bcfa6065bac71c555f28bfc1cd623e0342a32535b9a2870d2c133740c3523831236cc9e0b375b5c881d11cf2058e979ff8c4ce076faaa65774024bfba0eddbfba6fb852497aa560974966da53672e13ef275dc2b8b0d49db66", @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r3, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRESOCT=r5, @ANYRES32=r5, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYRES16=r5, @ANYRES32=r5, @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x188, 0x20008800}}], 0x3, 0x200040c0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2a00) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r7, 0x2120}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0xfd45}}, 0x0) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, r10, 0x2, 0x2, 0x7, 0x8, "01b1b11a25c1205ec66a219096886df968422e0f811e6f79bd188d53d39f9b66de0e603690994f82eb817068964e6caa25af0d106f9654750d068db3787044", 0x27}, 0x60) setsockopt$inet_int(r8, 0x0, 0x12, 0x0, 0x0) recvmmsg(r8, &(0x7f000000e280), 0x58a, 0x42, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000090, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x0) 16m16.372192206s ago: executing program 6 (id=4761): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x2, 0x0, 0x80000001, 0x6, 0x0, "7f1227f7adf97affe4ffff7d1800"}) r3 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000001c0)={{r5, r4, 0x1, [0x0, 0xf7df]}, {r5, r6, 0x7, [0x6]}, 0x1, [0x400008, 0x3df]}) setresuid(r2, r2, r2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_create(0x3, &(0x7f00000004c0)={0x0, 0x13, 0x5add320767fff618, @tid=r1}, &(0x7f0000000500)=0x0) timer_settime(r8, 0x0, &(0x7f0000000540)={{0x0, 0x989680}}, &(0x7f0000000580)) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) 16m15.491748617s ago: executing program 34 (id=4761): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x2, 0x0, 0x80000001, 0x6, 0x0, "7f1227f7adf97affe4ffff7d1800"}) r3 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000001c0)={{r5, r4, 0x1, [0x0, 0xf7df]}, {r5, r6, 0x7, [0x6]}, 0x1, [0x400008, 0x3df]}) setresuid(r2, r2, r2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_create(0x3, &(0x7f00000004c0)={0x0, 0x13, 0x5add320767fff618, @tid=r1}, &(0x7f0000000500)=0x0) timer_settime(r8, 0x0, &(0x7f0000000540)={{0x0, 0x989680}}, &(0x7f0000000580)) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) 34.675005383s ago: executing program 7 (id=7684): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x10}, {0xd, 0x1}, {0xc, 0xcf83bb527606ce4b}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 31.317794959s ago: executing program 7 (id=7692): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8c}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, 0xfffffffc}, &(0x7f0000ffe000), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x604203) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x40008) 29.456735403s ago: executing program 2 (id=7696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000200)='/dev/cec#\x00'}, 0x30) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x450900) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0xd4, 0xe4, 0xc8, 0x8, 0xd46, 0x78, 0xcc70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x80, 0x0, 0xf8, [{{0x9, 0x4, 0x3b, 0x40, 0x1, 0xe4, 0xf7, 0x8, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x7b, 0x9}}]}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x2, [0x2], [0x2161, 0xfffffffc, 0x0, 0x80000], [0xfffffffd, 0x0, 0x8001, 0xbffffffc], [0x4, 0x2000004000, 0x4000, 0x100000000]}) 28.39775548s ago: executing program 7 (id=7698): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x10}, {0xd, 0x1}, {0xc, 0xcf83bb527606ce4b}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x29, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 27.418358832s ago: executing program 5 (id=7700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.229914664s ago: executing program 5 (id=7701): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x26, 0x21, 0x12, 0x5, 0x5, 0xd, 0x1, 0xe, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc, 0x40000000000}, 0x0, 0x0) 27.125664744s ago: executing program 3 (id=7702): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @void}, 0x10) 27.009751281s ago: executing program 3 (id=7703): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x200, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffffffff}]}, 0x3c}, 0x1, 0x1000000}, 0x18000) 26.873714381s ago: executing program 2 (id=7704): io_setup(0xff, &(0x7f0000000240)=0x0) io_destroy(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}}, 0x0) io_setup(0x8001, &(0x7f0000000040)) io_getevents(r0, 0x1, 0x0, 0x0, 0x0) 26.751968108s ago: executing program 2 (id=7707): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x10}, {0xd, 0x1}, {0xc, 0xcf83bb527606ce4b}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r5, @ANYBLOB="080002"], 0x40}}, 0x8080) 26.573614781s ago: executing program 0 (id=7708): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x36}}, 0x4004815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x7, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x18000], [0x4]], '\x00', [{}, {0x0, 0x10}, {}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) prctl$PR_SET_VMA(0x53564d41, 0x500, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) fcntl$addseals(r3, 0x409, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 26.202232813s ago: executing program 5 (id=7709): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x36}}, 0x4004815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x7, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x18000], [0x4]], '\x00', [{}, {0x0, 0x10}, {}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) prctl$PR_SET_VMA(0x53564d41, 0x500, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004094}, 0x0) fcntl$addseals(r3, 0x409, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 25.889508698s ago: executing program 3 (id=7710): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x1, &(0x7f00000000c0)) r1 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40880) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000000)={&(0x7f0000000900)=[0x3, 0xfffffff8, 0x8, 0x7fff, 0x8, 0xfff, 0x2, 0x9, 0x1, 0x7, 0x7, 0xf, 0x1, 0x0, 0x6, 0x4, 0x9, 0x3, 0x3, 0x80000001, 0x9, 0x4, 0x9, 0x9, 0xfffffff5, 0x4, 0x8, 0x7, 0x7ff, 0xfffffeff, 0x8, 0x3, 0x7c29, 0x7, 0x7, 0x9, 0x1, 0x80000001, 0x6, 0x7, 0x6, 0x2, 0xcc, 0x200, 0x4, 0x1, 0xa, 0x2, 0x7, 0x3, 0x8000, 0xefae, 0x1, 0x0, 0x2, 0xfffffff8, 0x3, 0x7fff, 0x6, 0x4, 0x6, 0x3, 0x7, 0x3, 0xf, 0x3, 0xa, 0x7, 0xe, 0x4, 0x5e1, 0x0, 0x7b, 0x6, 0x7, 0x1, 0x5, 0x400, 0x8, 0x2, 0x4, 0x5, 0x8001, 0x8, 0xfffff0e6, 0xf, 0x4, 0x1, 0xfff, 0x57, 0x69b0bcd, 0x10001, 0x6, 0x9, 0xddd, 0x1, 0xffff7578, 0x2, 0x5, 0x7, 0x1ff, 0x5, 0x4, 0x3, 0x5, 0x7, 0x80000001, 0x3, 0x10, 0xd6, 0x4, 0x5, 0x9, 0x5, 0x2000000, 0xa, 0x101, 0x6, 0x5, 0x3, 0x7, 0x1, 0xa3, 0xf, 0x401, 0x3c, 0x8, 0x8000, 0x3, 0x4, 0x3, 0x5, 0x4, 0xa, 0xca, 0x7fffffff, 0x5057, 0x1, 0x5, 0x9, 0x5, 0x5, 0x4, 0x3, 0xd, 0x4, 0x0, 0x80000000, 0xfe, 0x3, 0x7, 0x7, 0x8000, 0x7, 0x5, 0x8, 0x3, 0xc12, 0xfffffffc, 0xffffffff, 0x3, 0x7, 0x0, 0x10001, 0x3ef, 0xe3, 0x140, 0x1000, 0x1, 0x7, 0x1, 0x4a2, 0x10001, 0x0, 0xb0b, 0xa7, 0x1, 0x3, 0x3, 0xa0000, 0x87a, 0x3, 0x32, 0x14, 0x9, 0x8, 0xdae, 0x5, 0xff, 0x2, 0x7d, 0x0, 0x878, 0x20000f, 0x7, 0x10000, 0xfffffffe, 0x10, 0x400, 0x2, 0x7, 0xe0a, 0x8, 0x2, 0xfffffe00, 0xfffffff9, 0x100, 0x10001, 0x8000, 0x6, 0x8, 0x7, 0x6, 0x1, 0x60ac, 0x8, 0x6, 0x6, 0x5, 0x20ab, 0x9, 0x9, 0x6, 0xa0000000, 0x7ff, 0x8, 0xd594, 0x8000, 0x400, 0x4, 0x80000001, 0xf, 0x4, 0x4, 0xe, 0x8, 0x7, 0x3, 0x3ff, 0x1, 0x10001, 0x3, 0xd, 0x4, 0x3, 0x9, 0x8, 0x4, 0xc6, 0x7d2, 0x0, 0xe, 0xf, 0x81, 0x81, 0x10000, 0xffffffff, 0x7, 0x8000, 0xb4, 0x10001, 0xffffffff, 0x0, 0xffffffff, 0xffffbe4d, 0x6, 0xf, 0x6, 0x6, 0x5, 0x0, 0x6, 0xa, 0x6, 0x8, 0x0, 0x5, 0x1, 0xcc, 0xfffffffa, 0x7fff, 0x2, 0x3, 0x82a, 0xa, 0x3, 0xb7d, 0x7fff, 0xfffffbff, 0x8, 0xc04, 0xfffff65f, 0x9, 0x9, 0x0, 0x1, 0x9, 0xffff5bb0, 0x7fff, 0x400, 0x9, 0x3c4, 0xa0f, 0x8, 0x9, 0xfffffffc, 0xffffffe0, 0x7ff, 0x10, 0x693b, 0x9, 0x8, 0x8, 0x80, 0x4, 0x81, 0xc000000, 0x2, 0x5, 0xfffffffc, 0x5, 0x4, 0xffffffff, 0x9, 0xe12, 0x9, 0x4, 0x2, 0x4, 0x0, 0xfffffff9, 0x6, 0x1, 0xfffffffc, 0x3ff, 0xad, 0x6, 0x7, 0x288, 0xffffffff, 0x1, 0x1ff, 0x9, 0x23, 0x6, 0x80000001, 0x7, 0x1, 0xa, 0xa3, 0x0, 0x9, 0x76, 0x0, 0x1800, 0x1, 0x7ff, 0x800, 0x8, 0xc0000, 0x3, 0x3, 0x8, 0x2, 0x3, 0xffffffff, 0x6, 0x5, 0x0, 0x81, 0x0, 0x0, 0xe, 0x3000, 0xc, 0x0, 0x80000001, 0x8, 0x5, 0x0, 0xc1ab, 0x7, 0x2, 0xd, 0x6, 0x9, 0x0, 0x3, 0xc94, 0x3, 0xd5c4, 0x0, 0x81, 0x4, 0x7, 0x71, 0x3, 0xffffffff, 0x2, 0x2, 0xf73e, 0x2, 0x9, 0x1, 0x3, 0x8, 0x3, 0x679, 0x3, 0x7, 0x80, 0x47cc, 0xae, 0x3, 0x0, 0x9, 0x1, 0x7ff, 0x1ff, 0x5, 0xffffffff, 0x5, 0x8, 0x3, 0x6, 0x325, 0x3, 0x9, 0xcb800000, 0x5, 0xffff, 0x3, 0x9e78, 0x101, 0x80000000, 0xfffffffd, 0x0, 0x5, 0x253d, 0x9, 0x4, 0x9e, 0x9, 0x7, 0x7, 0x1, 0x3, 0x7, 0x200, 0x6, 0x8, 0x5, 0x1000, 0x81, 0x7, 0x6, 0x7, 0x10000, 0xe4, 0x1000, 0x4, 0x1, 0x0, 0x2, 0xf7, 0x10000, 0xffffac8f, 0x9, 0xfffffff7, 0xffffff57, 0xcce, 0x3800, 0x6, 0x0, 0x1, 0xfa8e, 0x8, 0x81, 0x77106504, 0x6, 0x7fffffff, 0x80000000, 0xffffffff, 0x9, 0xb102, 0x44, 0x8, 0x1, 0x4, 0x9, 0xb, 0x7, 0x6, 0x4, 0x5, 0x24, 0x5, 0x0, 0x43, 0x7, 0x8, 0x8, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x6, 0x800, 0x4, 0x1, 0x7, 0x7, 0x0, 0x1, 0x4, 0x101, 0x4, 0x2006, 0xc5, 0x53710395, 0x10000, 0x8, 0x3, 0xac70000, 0x8, 0xc, 0x7, 0x7, 0x875, 0x7, 0x3, 0x7fff, 0x0, 0x9, 0x9961, 0x0, 0xbfc, 0x1, 0x3, 0x6, 0x2, 0x30, 0x9, 0x40, 0x10, 0x612, 0x4, 0xffff, 0xffffff1f, 0x6, 0x1a, 0x3, 0x6, 0x7, 0x7, 0x6, 0xfffff001, 0xa61, 0x10, 0x151f, 0x3, 0xffffffff, 0x6, 0x3, 0x1, 0x8, 0x81, 0x1ff, 0x7, 0x9, 0x1, 0x6, 0x6, 0xd, 0x3, 0x800, 0x101, 0x1, 0x1, 0x9, 0x40, 0x9, 0x6, 0x489, 0x2, 0xd, 0x1000, 0x88f, 0x1, 0x3, 0xb, 0x7, 0x921, 0x0, 0xbb80000, 0xc, 0xfffffc01, 0x2, 0x5a, 0xb9, 0x87e, 0x4, 0x6, 0x4, 0x5, 0x1, 0x3ff, 0x7, 0x9, 0x80000001, 0x3, 0x0, 0x1, 0x5, 0x2, 0xfffffff1, 0xfffffffd, 0x2, 0x6, 0x9, 0x0, 0xffff, 0x7, 0xdd, 0x1, 0xadd1ec00, 0x9, 0xffffffff, 0x6, 0x4, 0x3, 0xd, 0x9, 0x9, 0x80, 0xfffffffe, 0x10000, 0x1ff, 0x1, 0x6, 0x8, 0x7fffffff, 0x6d, 0x401, 0x6f5c, 0x2, 0xe, 0xf, 0x80000001, 0x5, 0x1, 0x3694, 0x0, 0x3, 0x0, 0x7, 0x0, 0x7, 0xf508, 0x80000001, 0x8, 0x3, 0x80000000, 0x2, 0xe9a, 0xf, 0x1, 0x7, 0x6, 0xcb, 0x7, 0x2, 0x4, 0x9, 0x400, 0x4, 0x7, 0xfffffffd, 0x7, 0x4e, 0x9, 0xfff, 0x1, 0x1a2c, 0xfffff03c, 0x2, 0x3, 0x5, 0x6, 0x7ff, 0x4, 0x3, 0x7454, 0xfff, 0xfffffff9, 0x2, 0xe9, 0x7, 0xffffffff, 0x20c3, 0x2, 0x1, 0x6, 0x5, 0x7fffffff, 0xd9, 0x2, 0xffff35eb, 0x0, 0x7, 0x5, 0x1, 0x306, 0x9, 0x2e, 0x3, 0x80, 0x800, 0x6, 0x6, 0x6, 0x2, 0x7, 0x63e4bc35, 0xcf, 0x0, 0x3ff, 0x9, 0x5, 0x4, 0x10, 0x5, 0x5, 0x69, 0xfffffffb, 0xb, 0x9, 0xffffffff, 0x7, 0x6, 0x5, 0x5, 0xfffff800, 0x9, 0x40eb, 0x5, 0xf1, 0x3, 0x2, 0x81, 0x3, 0xffffcb08, 0x5, 0xfffffffb, 0xfff, 0x40, 0x6, 0x400, 0x4, 0x1ff, 0x1c0, 0x9, 0x6, 0x80000000, 0x8, 0x101, 0x3, 0x1, 0x7ff, 0x101, 0x49, 0x0, 0x10000, 0x0, 0x8001, 0xfffffffa, 0x3, 0x1, 0x1c0, 0x40, 0x18, 0x9, 0x80000001, 0x2e, 0xad15, 0x0, 0x82be, 0x2, 0x5, 0x1, 0x5, 0x3, 0x1, 0x6, 0x7ff, 0x9, 0x8, 0x8, 0x6, 0x1, 0x6, 0x2, 0x1, 0x0, 0x2, 0x101, 0x61710ba6, 0x80000001, 0x3, 0x4, 0x8000, 0x10001, 0x4, 0x81, 0x0, 0x6, 0x8000, 0x4, 0x9, 0x7fff, 0xfffffff7, 0x5, 0x6, 0x9, 0xfff, 0x7, 0x1, 0x8f2c, 0x0, 0x5, 0x9, 0x7f, 0xd6, 0x3ff, 0x3, 0x8, 0x5, 0x8000, 0x2, 0x45, 0xfc000000, 0xc708, 0x1, 0xfa, 0x8, 0x1000, 0x1, 0x6, 0x6, 0x4, 0x2, 0x4, 0x5, 0xe9, 0x35, 0x6, 0x50f8e1fc, 0x0, 0x7, 0x8, 0x4e8, 0x9, 0x2, 0x9c, 0x3ff, 0x6, 0xf, 0x101, 0xfffffff7, 0xe, 0x2, 0x273, 0x0, 0x8, 0x80, 0x7, 0x100, 0x0, 0xfffffffd, 0x7, 0x3, 0x8, 0x7, 0x5, 0x9, 0x3, 0x4b9a, 0x6, 0xff, 0x2, 0x5, 0xd, 0x10001, 0x1, 0xb1ec, 0x71cc, 0x800, 0x7, 0x4, 0x2, 0x2, 0x0, 0xd, 0x0, 0xffffffff, 0x3, 0x6, 0x9, 0xfffff800, 0x6, 0xb, 0x2, 0x3, 0x6, 0x300000, 0x1, 0x5, 0x2, 0xfffffff7, 0x8, 0x0, 0x8, 0x5, 0x7, 0x8000, 0xf, 0x8, 0xffffffff, 0xd, 0x8, 0x1, 0x80000001, 0x5, 0x9, 0x8de, 0xa4, 0x10001000, 0xffff75fd, 0x7, 0x101, 0x3, 0x8ac, 0x2, 0x5, 0x7, 0x0, 0x101, 0x7, 0x3, 0x3, 0x6, 0x2, 0x6, 0x9, 0x0, 0x73c, 0x2, 0x200, 0x81, 0x80000000, 0x3, 0xffffff5a, 0xff, 0x2, 0x7fc81993, 0x6, 0x6, 0x6b70, 0x1, 0x71e, 0x3, 0x3, 0x7, 0x8001, 0x8, 0x4, 0x3, 0x3ff, 0x8001, 0x0, 0x4, 0x1000, 0x8, 0x1, 0x8d, 0x4, 0x80000001, 0x26bc7842, 0x6, 0x10000, 0xbd, 0x100, 0x1, 0x0, 0x400, 0x4, 0x6, 0x8, 0xd, 0x4, 0x8, 0x7, 0x1, 0x8, 0x29, 0x77, 0x3, 0x20, 0xfffffff0, 0x1, 0x10001, 0x3035, 0x9, 0x6, 0x6, 0x6, 0xffffffff, 0xe, 0x5, 0x9, 0x6647, 0x9], 0x1, 0x400}) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000200)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) 25.621485262s ago: executing program 0 (id=7711): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000c700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x23}, 0x94) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x4}, 0x4c8c0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000e40)) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c00", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xc5c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f00000001c0)={0x5b5}) 24.736187541s ago: executing program 7 (id=7712): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 24.716139151s ago: executing program 5 (id=7713): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x3, 0x7, 0x187a67a68afe9213, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40048c0) 24.497698191s ago: executing program 0 (id=7714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000200)='/dev/cec#\x00'}, 0x30) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x450900) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0xd4, 0xe4, 0xc8, 0x8, 0xd46, 0x78, 0xcc70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x80, 0x0, 0xf8, [{{0x9, 0x4, 0x3b, 0x40, 0x1, 0xe4, 0xf7, 0x8, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x7b, 0x9}}]}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x2, [0x2], [0x2161, 0xfffffffc, 0x0, 0x80000], [0xfffffffd, 0x0, 0x8001, 0xbffffffc], [0x4, 0x2000004000, 0x4000, 0x100000000]}) 23.442789654s ago: executing program 2 (id=7715): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback={0x300}, 0x800000}, 0x1c) 23.147688241s ago: executing program 7 (id=7716): r0 = syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$sequencer(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="81050000000000000c02edc839540036"], 0x10) 23.077718241s ago: executing program 2 (id=7717): socket$netlink(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r0, 0x80000000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x189042, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x4}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r2, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x4000, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ptrace$getregset(0x4204, r3, 0x200, 0x0) 22.927626733s ago: executing program 5 (id=7718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x180}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x45ffffa, 0x121000) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd25, 0xffa6, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400), 0x0, 0x80000}) 21.992746465s ago: executing program 0 (id=7719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80ff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x5000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0xa6ff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d08, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setrlimit(0xb, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000701080000000000000007000000", @ANYRES32=r8, @ANYBLOB="e04f00000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 21.861704671s ago: executing program 3 (id=7720): setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c00", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x3800) 21.861316054s ago: executing program 5 (id=7721): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) socket(0x2a, 0x5, 0x1) r1 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xb0, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x1, @loopback, 0x71}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x3, @remote, 0x10001}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x9fa3, @local, 0x7}, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000040)=0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000020000000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000100000900001400128029000100697036746e6c000004000280"], 0x34}}, 0x40) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket(0x10, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 20.923167326s ago: executing program 0 (id=7722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x180}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x45ffffa, 0x121000) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f0000000380)={0xc, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd25, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1c9, 0x12) 20.822347546s ago: executing program 3 (id=7723): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x5, 0x2, 0x8, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xcc}}, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x8009, 0x5, 0x6}, &(0x7f0000000080)=0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32, @ANYBLOB="1400010000000092"], 0x2c}, 0x1, 0x0, 0x0, 0x20048051}, 0x24005040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000002c0)='g', 0x1}], 0x1}}], 0x1, 0x4000000) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 20.025663704s ago: executing program 3 (id=7724): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb187}], 0x1, 0x201, 0x0, 0x0, 0xa5, 0x5c}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x21, 0xa, 0x101, 0x0, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000", @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, 0xffffffffffffffff, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 19.903208325s ago: executing program 2 (id=7725): creat(&(0x7f0000000080)='./file0\x00', 0xac) socket$inet(0x2, 0x2, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800c00e1e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 19.893378104s ago: executing program 0 (id=7726): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x4, 0xffffffffffffffff, 0x3, 0x0) iopl(0xd) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffc, 0x0) read$msr(r0, &(0x7f0000002000)=""/102387, 0x18ff3) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x400000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$l2tp(0x2, 0x2, 0x73) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) pread64(r1, &(0x7f0000000100)=""/78, 0x4e, 0x0) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) 19.785904398s ago: executing program 7 (id=7727): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_clone(0xd5240700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x17}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x18, 0x80008, 0xfbfffefc) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x4}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x101}]}}]}, 0x5c}}, 0x400c4) mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 3.008230169s ago: executing program 35 (id=7724): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb187}], 0x1, 0x201, 0x0, 0x0, 0xa5, 0x5c}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x21, 0xa, 0x101, 0x0, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000", @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, 0xffffffffffffffff, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 0s ago: executing program 36 (id=7721): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) socket(0x2a, 0x5, 0x1) r1 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xb0, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x1, @loopback, 0x71}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x3, @remote, 0x10001}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x9fa3, @local, 0x7}, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000040)=0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000020000000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000100000900001400128029000100697036746e6c000004000280"], 0x34}}, 0x40) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket(0x10, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) kernel console output (not intermixed with test programs): read error: -22 [ 2259.796149][T22254] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 2259.810776][T22254] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 2259.822500][T22254] usb 1-1: config 0 descriptor?? [ 2259.831297][T22254] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input77 [ 2260.049937][T22254] usb 1-1: USB disconnect, device number 16 [ 2260.980810][ T3487] bio_check_eod: 2 callbacks suppressed [ 2260.980827][ T3487] syz.3.7196: attempt to access beyond end of device [ 2260.980827][ T3487] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2261.399459][ T3496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7199'. [ 2261.574299][ T3507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3507 comm=syz.2.7199 [ 2261.890487][T22254] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2262.270747][T22254] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2262.323685][T22254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.387589][T22254] usb 1-1: config 0 descriptor?? [ 2262.430640][T22254] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2262.644485][ T5967] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2263.066519][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 2263.074327][ T5967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2263.092574][ T5967] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2263.127270][ T5967] usb 3-1: config 7 has no interface number 0 [ 2263.133635][ T5967] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2263.147711][ T5967] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2263.159419][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.171599][ T5967] usb 3-1: Product: syz [ 2263.179434][ T5967] usb 3-1: Manufacturer: syz [ 2263.188496][ T5967] usb 3-1: SerialNumber: syz [ 2263.652074][ T5967] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2263.707159][ T30] audit: type=1400 audit(1737581548.150:1525): avc: denied { append } for pid=3541 comm="syz.3.7205" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2264.122789][ T5967] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2264.153416][ T5967] usb 3-1: USB disconnect, device number 105 [ 2264.176482][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2264.196821][ T5967] kobil_sct 3-1:7.59: device disconnected [ 2264.294138][ T30] audit: type=1800 audit(1737581548.720:1526): pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.7205" name="/" dev="9p" ino=2 res=0 errno=0 [ 2264.745702][ T3576] /dev/nullb0: Can't open blockdev [ 2265.665929][T22254] gspca_stv06xx: I2C: Read error writing address: -71 [ 2265.721911][T22254] usb 1-1: USB disconnect, device number 17 [ 2267.139517][ T5964] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2267.166603][ T3616] FAULT_INJECTION: forcing a failure. [ 2267.166603][ T3616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2267.221465][ T3616] CPU: 1 UID: 0 PID: 3616 Comm: syz.3.7214 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 2267.221489][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2267.221500][ T3616] Call Trace: [ 2267.221506][ T3616] [ 2267.221513][ T3616] dump_stack_lvl+0x16c/0x1f0 [ 2267.221543][ T3616] should_fail_ex+0x512/0x640 [ 2267.221564][ T3616] copy_fpstate_to_sigframe+0x854/0xaf0 [ 2267.221585][ T3616] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 2267.221601][ T3616] ? posixtimer_deliver_signal+0x105/0x6b0 [ 2267.221618][ T3616] ? posixtimer_deliver_signal+0x1c7/0x6b0 [ 2267.221628][ T3616] ? x86_task_fpu+0x5f/0x90 [ 2267.221643][ T3616] get_sigframe+0x4a8/0x9c0 [ 2267.221659][ T3616] ? __pfx_get_sigframe+0x10/0x10 [ 2267.221674][ T3616] ? _raw_spin_unlock_irq+0x23/0x50 [ 2267.221689][ T3616] ? siginfo_layout+0x177/0x290 [ 2267.221705][ T3616] x64_setup_rt_frame+0x12e/0xcf0 [ 2267.221723][ T3616] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 2267.221736][ T3616] ? __mutex_unlock_slowpath+0x163/0x800 [ 2267.221757][ T3616] arch_do_signal_or_restart+0x5e4/0x7d0 [ 2267.221772][ T3616] ? __fget_files+0x20e/0x3c0 [ 2267.221784][ T3616] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2267.221802][ T3616] ? ksys_write+0x1ac/0x250 [ 2267.221813][ T3616] ? __pfx_ksys_write+0x10/0x10 [ 2267.221827][ T3616] exit_to_user_mode_loop+0x84/0x110 [ 2267.221840][ T3616] do_syscall_64+0x3f6/0x4c0 [ 2267.221858][ T3616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2267.221869][ T3616] RIP: 0033:0x7f430f58d61f [ 2267.221879][ T3616] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2267.221889][ T3616] RSP: 002b:00007f431041a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2267.221900][ T3616] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00007f430f58d61f [ 2267.221907][ T3616] RDX: 0000000000000001 RSI: 00007f431041a090 RDI: 0000000000000003 [ 2267.221913][ T3616] RBP: 00007f431041a090 R08: 0000000000000000 R09: 00007f4310419df7 [ 2267.221920][ T3616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2267.221926][ T3616] R13: 0000000000000000 R14: 00007f430f7b5fa0 R15: 00007ffd4039d378 [ 2267.221940][ T3616] [ 2267.510442][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 2267.525800][ T5964] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2267.685013][ T5964] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2267.693266][ T5964] usb 3-1: config 7 has no interface number 0 [ 2267.721150][ T5964] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2267.830692][ T5964] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2267.878477][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.886578][ T5964] usb 3-1: Product: syz [ 2267.890844][ T5964] usb 3-1: Manufacturer: syz [ 2267.895456][ T5964] usb 3-1: SerialNumber: syz [ 2268.506403][ T5964] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2268.536853][ T5964] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2268.560240][ T5964] usb 3-1: USB disconnect, device number 106 [ 2268.570768][ T5964] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2268.649973][ T5964] kobil_sct 3-1:7.59: device disconnected [ 2271.699555][ T3669] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7223'. [ 2271.726066][ T3670] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7223'. [ 2273.698241][ T3702] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7231'. [ 2273.713049][ T3701] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7231'. [ 2274.193512][ T30] audit: type=1400 audit(1737581557.981:1527): avc: denied { getopt } for pid=3704 comm="syz.0.7232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2274.516176][T22254] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2274.658723][T22254] usb 6-1: device descriptor read/64, error -71 [ 2274.922344][T22254] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2275.150051][T22254] usb 6-1: device descriptor read/64, error -71 [ 2275.275547][T22254] usb usb6-port1: attempt power cycle [ 2275.704090][T22254] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2275.762207][T22254] usb 6-1: device descriptor read/8, error -71 [ 2276.186437][T22254] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2276.233374][T22254] usb 6-1: device descriptor read/8, error -71 [ 2276.858492][T22254] usb usb6-port1: unable to enumerate USB device [ 2276.984236][ T3751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7242'. [ 2277.345680][T22254] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2277.403021][ T3770] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7245'. [ 2277.416485][ T3769] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7245'. [ 2277.543527][T29755] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2277.702152][T22254] usb 3-1: Using ep0 maxpacket: 8 [ 2277.714454][T22254] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2277.723034][T22254] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2277.737049][T22254] usb 3-1: config 7 has no interface number 0 [ 2277.743197][T22254] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2277.754866][T22254] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2277.767386][T29755] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2277.777613][T29755] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2277.830334][T29755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.831157][T22254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.847170][T22254] usb 3-1: Product: syz [ 2277.851688][T22254] usb 3-1: Manufacturer: syz [ 2277.856303][T22254] usb 3-1: SerialNumber: syz [ 2277.856999][T29755] usb 4-1: config 0 descriptor?? [ 2277.938993][T29755] pwc: Askey VC010 type 2 USB webcam detected. [ 2277.969275][ T5964] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 2278.123729][ T5964] usb 1-1: device descriptor read/64, error -71 [ 2278.147425][T22254] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2278.161293][T22254] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2278.173050][T22254] usb 3-1: USB disconnect, device number 107 [ 2278.188922][T22254] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2278.213811][T22254] kobil_sct 3-1:7.59: device disconnected [ 2278.264852][ T3807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7248'. [ 2278.306771][T29755] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2278.315895][T29755] pwc: recv_control_msg error -32 req 02 val 2700 [ 2278.329177][ T3807] netlink: 'syz.2.7248': attribute type 10 has an invalid length. [ 2278.337520][T29755] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2278.430171][ T5964] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 2278.550412][ T3807] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2278.624782][T29755] pwc: recv_control_msg error -71 req 04 val 1000 [ 2278.694729][T29755] pwc: recv_control_msg error -71 req 04 val 1300 [ 2278.803137][T29755] pwc: recv_control_msg error -71 req 04 val 1400 [ 2278.955252][T29755] pwc: recv_control_msg error -71 req 02 val 2000 [ 2278.973100][T29755] pwc: recv_control_msg error -71 req 02 val 2100 [ 2278.975016][ T5964] usb 1-1: device descriptor read/64, error -71 [ 2278.988794][T29755] pwc: recv_control_msg error -71 req 04 val 1500 [ 2279.003040][T29755] pwc: recv_control_msg error -71 req 02 val 2500 [ 2279.010347][T29755] pwc: recv_control_msg error -71 req 02 val 2400 [ 2279.018001][T29755] pwc: recv_control_msg error -71 req 02 val 2600 [ 2279.024754][T29755] pwc: recv_control_msg error -71 req 02 val 2900 [ 2279.032003][T29755] pwc: recv_control_msg error -71 req 02 val 2800 [ 2279.039044][T29755] pwc: recv_control_msg error -71 req 04 val 1100 [ 2279.049073][T29755] pwc: recv_control_msg error -71 req 04 val 1200 [ 2279.069231][T29755] pwc: Registered as video103. [ 2279.075281][T29755] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input78 [ 2279.124072][T29755] usb 4-1: USB disconnect, device number 116 [ 2279.142768][ T5964] usb usb1-port1: attempt power cycle [ 2279.907338][ T5967] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2280.010383][ T5964] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 2280.450102][ T5964] usb 1-1: device descriptor read/8, error -71 [ 2280.676885][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 2280.687723][ T5967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2281.136423][ T5964] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 2281.160619][ T5967] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2281.175369][ T5967] usb 3-1: config 7 has no interface number 0 [ 2281.181674][ T5967] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2281.188484][ T5964] usb 1-1: device descriptor read/8, error -71 [ 2281.201808][ T5967] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2281.216487][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2281.228814][ T5967] usb 3-1: Product: syz [ 2281.235504][ T5967] usb 3-1: Manufacturer: syz [ 2281.243557][ T5967] usb 3-1: SerialNumber: syz [ 2281.304909][ T5964] usb usb1-port1: unable to enumerate USB device [ 2281.520885][ T3850] netlink: zone id is out of range [ 2281.529572][ T3850] netlink: del zone limit has 4 unknown bytes [ 2281.623068][ T5967] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2281.638058][ T5967] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2281.656116][ T5967] usb 3-1: USB disconnect, device number 108 [ 2281.671291][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2281.692435][ T5967] kobil_sct 3-1:7.59: device disconnected [ 2281.849918][T17847] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2282.021416][T17847] usb 4-1: Using ep0 maxpacket: 8 [ 2282.032408][T17847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2282.055578][T17847] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 2282.067664][T17847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.075832][T17847] usb 4-1: Product: syz [ 2282.082266][T17847] usb 4-1: Manufacturer: syz [ 2282.095308][T17847] usb 4-1: SerialNumber: syz [ 2282.114145][T17847] usb 4-1: config 0 descriptor?? [ 2282.153790][T17847] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2282.393351][ T3889] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7257'. [ 2282.404373][ T3887] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7257'. [ 2282.534239][T17847] imon 4-1:0.0: unable to initialize intf0, err -19 [ 2282.562760][T17847] imon:imon_probe: failed to initialize context! [ 2282.596345][T17847] imon 4-1:0.0: unable to register, err -19 [ 2282.663628][ T3895] /dev/nullb0: Can't open blockdev [ 2283.480697][T17847] usb 4-1: USB disconnect, device number 117 [ 2285.509781][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2285.644477][ T3937] syz.0.7264: attempt to access beyond end of device [ 2285.644477][ T3937] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2285.658370][ T3937] EXT4-fs (nbd0): unable to read superblock [ 2286.029851][T17847] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2286.191425][T17847] usb 6-1: Using ep0 maxpacket: 16 [ 2286.383858][T17847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2286.467464][T17847] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2286.573852][T17847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.680929][ T3947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7268'. [ 2286.739740][T17847] usb 6-1: Product: syz [ 2286.749736][T17847] usb 6-1: Manufacturer: syz [ 2286.763769][T17847] usb 6-1: SerialNumber: syz [ 2286.824582][T17847] usb 6-1: config 0 descriptor?? [ 2287.184169][T17847] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2287.284230][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7265'. [ 2287.623121][ T30] audit: type=1400 audit(1737581570.543:1528): avc: denied { setattr } for pid=3929 comm="syz.5.7265" path="socket:[127188]" dev="sockfs" ino=127188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2287.687688][ T3958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3958 comm=syz.0.7268 [ 2287.715579][T17847] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2288.072219][T17847] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2288.144221][ T3980] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7271'. [ 2289.032644][T17847] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2289.277066][T17847] em28xx 6-1:0.0: board has no eeprom [ 2289.354756][T17847] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2289.362593][T17847] em28xx 6-1:0.0: dvb set to bulk mode. [ 2289.377186][T29755] em28xx 6-1:0.0: Binding DVB extension [ 2289.397844][T17847] usb 6-1: USB disconnect, device number 113 [ 2289.404829][T17847] em28xx 6-1:0.0: Disconnecting em28xx [ 2289.735012][ T5914] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2289.746894][T29755] em28xx 6-1:0.0: Registering input extension [ 2289.765103][T17847] em28xx 6-1:0.0: Closing input extension [ 2289.798310][ T4022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7274'. [ 2289.847603][T17847] em28xx 6-1:0.0: Freeing device [ 2289.852749][ T3980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3980 comm=syz.7.7271 [ 2289.882417][ T4026] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2289.921886][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 2289.927552][ T5914] usb 1-1: too many configurations: 97, using maximum allowed: 8 [ 2289.941915][ T5914] usb 1-1: config 0 has no interfaces? [ 2289.949706][ T5914] usb 1-1: config 0 has no interfaces? [ 2289.958841][ T5914] usb 1-1: config 0 has no interfaces? [ 2289.966583][ T5914] usb 1-1: config 0 has no interfaces? [ 2289.973035][ T5914] usb 1-1: config 0 has no interfaces? [ 2289.991603][ T5914] usb 1-1: config 0 has no interfaces? [ 2289.999677][ T5914] usb 1-1: config 0 has no interfaces? [ 2290.009796][ T5914] usb 1-1: config 0 has no interfaces? [ 2290.237107][ T4050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7273'. [ 2290.433782][ T4055] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7279'. [ 2290.443994][ T4054] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7279'. [ 2291.085127][ T4064] sd 0:0:1:0: device reset [ 2292.162027][ T4071] input: syz1 as /devices/virtual/input/input80 [ 2292.211061][ T30] audit: type=1326 audit(1737581574.781:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2292.323926][ T30] audit: type=1326 audit(1737581574.781:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2292.431133][ T30] audit: type=1326 audit(1737581574.781:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2292.510095][ T30] audit: type=1326 audit(1737581574.781:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2292.577179][ T30] audit: type=1326 audit(1737581574.781:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2292.658235][ T30] audit: type=1326 audit(1737581574.781:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2292.711214][ T30] audit: type=1326 audit(1737581574.790:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2292.757083][ T30] audit: type=1326 audit(1737581574.790:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2292.793863][ T30] audit: type=1326 audit(1737581574.790:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2293.001739][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 2293.001755][ T30] audit: type=1326 audit(1737581575.548:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40b752ad69 code=0x7ffc0000 [ 2293.051497][ T30] audit: type=1326 audit(1737581575.576:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40b7585b27 code=0x7ffc0000 [ 2293.226929][ T30] audit: type=1326 audit(1737581575.576:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40b752ad69 code=0x7ffc0000 [ 2293.456087][ T30] audit: type=1326 audit(1737581575.576:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2293.480290][ T30] audit: type=1326 audit(1737581575.613:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40b7585b27 code=0x7ffc0000 [ 2293.656967][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7286'. [ 2294.253064][ T30] audit: type=1326 audit(1737581575.613:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40b752ad69 code=0x7ffc0000 [ 2294.535643][ T30] audit: type=1326 audit(1737581575.613:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2294.742007][ T30] audit: type=1326 audit(1737581575.651:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40b7585b27 code=0x7ffc0000 [ 2294.780721][ T5914] usb 1-1: string descriptor 0 read error: -71 [ 2294.834393][ T5914] usb 1-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 2294.911630][ T30] audit: type=1326 audit(1737581575.651:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40b752ad69 code=0x7ffc0000 [ 2294.913675][ T5914] usb 1-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 2294.982104][ T5914] usb 1-1: config 0 descriptor?? [ 2295.006217][ T30] audit: type=1326 audit(1737581575.651:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.7.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b758eb69 code=0x7ffc0000 [ 2295.032777][ T5914] usb 1-1: can't set config #0, error -71 [ 2295.053006][ T5914] usb 1-1: USB disconnect, device number 22 [ 2295.250727][ T4127] FAULT_INJECTION: forcing a failure. [ 2295.250727][ T4127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2295.264395][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.2.7292 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 2295.264419][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2295.264428][ T4127] Call Trace: [ 2295.264434][ T4127] [ 2295.264440][ T4127] dump_stack_lvl+0x16c/0x1f0 [ 2295.264470][ T4127] should_fail_ex+0x512/0x640 [ 2295.264500][ T4127] _copy_from_user+0x2e/0xd0 [ 2295.264519][ T4127] sctp_getsockopt+0x2748/0x6a40 [ 2295.264538][ T4127] ? avc_has_perm_noaudit+0x149/0x3b0 [ 2295.264565][ T4127] ? __pfx_sctp_getsockopt+0x10/0x10 [ 2295.264584][ T4127] ? avc_has_perm+0x144/0x1f0 [ 2295.264610][ T4127] ? __pfx_avc_has_perm+0x10/0x10 [ 2295.264639][ T4127] ? __lock_acquire+0xb97/0x1ce0 [ 2295.264669][ T4127] ? sock_has_perm+0x259/0x2f0 [ 2295.264694][ T4127] ? find_held_lock+0x2b/0x80 [ 2295.264714][ T4127] ? __might_fault+0xe3/0x190 [ 2295.264730][ T4127] ? __might_fault+0xe3/0x190 [ 2295.264745][ T4127] ? __might_fault+0x13b/0x190 [ 2295.264771][ T4127] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2295.264789][ T4127] do_sock_getsockopt+0x34a/0x440 [ 2295.264808][ T4127] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2295.264825][ T4127] ? __fget_files+0x204/0x3c0 [ 2295.264857][ T4127] __sys_getsockopt+0x12f/0x260 [ 2295.264886][ T4127] __x64_sys_getsockopt+0xbd/0x160 [ 2295.264916][ T4127] ? do_syscall_64+0x91/0x4c0 [ 2295.264942][ T4127] ? lockdep_hardirqs_on+0x7c/0x110 [ 2295.264967][ T4127] do_syscall_64+0xcd/0x4c0 [ 2295.264996][ T4127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2295.265014][ T4127] RIP: 0033:0x7fd2a4d8eb69 [ 2295.265029][ T4127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2295.265046][ T4127] RSP: 002b:00007fd2a2bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2295.265063][ T4127] RAX: ffffffffffffffda RBX: 00007fd2a4fb6160 RCX: 00007fd2a4d8eb69 [ 2295.265075][ T4127] RDX: 000000000000006f RSI: 0000000000000084 RDI: 000000000000000b [ 2295.265086][ T4127] RBP: 00007fd2a2bd5090 R08: 0000200000000180 R09: 0000000000000000 [ 2295.265097][ T4127] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2295.265108][ T4127] R13: 0000000000000000 R14: 00007fd2a4fb6160 R15: 00007ffdee333be8 [ 2295.265133][ T4127] [ 2295.686587][ T4126] wlan0 speed is unknown, defaulting to 1000 [ 2295.700995][ T4126] lo speed is unknown, defaulting to 1000 [ 2295.748923][ T4126] lo speed is unknown, defaulting to 1000 [ 2297.180608][ T4141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2297.915602][ T5967] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2298.351855][ T4188] overlayfs: failed to resolve './file0': -2 [ 2298.593976][ T5967] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.619001][ T5967] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2298.629548][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2298.702904][ T5967] usb 6-1: config 0 descriptor?? [ 2298.964986][ T5967] pwc: Askey VC010 type 2 USB webcam detected. [ 2299.211407][ T5967] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2299.253164][ T5967] pwc: recv_control_msg error -32 req 02 val 2700 [ 2299.271028][ T5967] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2300.056356][ T4331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7302'. [ 2301.477771][ T5967] pwc: recv_control_msg error -71 req 04 val 1000 [ 2301.499147][ T5967] pwc: recv_control_msg error -71 req 04 val 1300 [ 2301.510053][ T5967] pwc: recv_control_msg error -71 req 04 val 1400 [ 2301.523329][ T5967] pwc: recv_control_msg error -71 req 02 val 2000 [ 2301.563064][ T5967] pwc: recv_control_msg error -71 req 02 val 2100 [ 2301.634280][ T5967] pwc: recv_control_msg error -71 req 04 val 1500 [ 2301.681241][ T5967] pwc: recv_control_msg error -71 req 02 val 2500 [ 2301.700221][ T5967] pwc: recv_control_msg error -71 req 02 val 2400 [ 2301.716281][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 2301.749425][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 2301.766151][ T4345] FAULT_INJECTION: forcing a failure. [ 2301.766151][ T4345] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.790523][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 2301.797417][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 2301.813982][ T4345] CPU: 0 UID: 0 PID: 4345 Comm: syz.0.7307 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 2301.814007][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2301.814018][ T4345] Call Trace: [ 2301.814024][ T4345] [ 2301.814031][ T4345] dump_stack_lvl+0x16c/0x1f0 [ 2301.814062][ T4345] should_fail_ex+0x512/0x640 [ 2301.814089][ T4345] ? fs_reclaim_acquire+0xae/0x150 [ 2301.814115][ T4345] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2301.814138][ T4345] should_failslab+0xc2/0x120 [ 2301.814159][ T4345] __kmalloc_noprof+0xd2/0x510 [ 2301.814184][ T4345] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2301.814209][ T4345] ? tomoyo_profile+0x47/0x60 [ 2301.814235][ T4345] tomoyo_path_number_perm+0x245/0x580 [ 2301.814253][ T4345] ? tomoyo_path_number_perm+0x237/0x580 [ 2301.814273][ T4345] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2301.814294][ T4345] ? find_held_lock+0x2b/0x80 [ 2301.814337][ T4345] ? find_held_lock+0x2b/0x80 [ 2301.814358][ T4345] ? hook_file_ioctl_common+0x145/0x410 [ 2301.814389][ T4345] ? __fget_files+0x20e/0x3c0 [ 2301.814413][ T4345] security_file_ioctl+0x9b/0x240 [ 2301.814436][ T4345] __x64_sys_ioctl+0xb7/0x210 [ 2301.814462][ T4345] do_syscall_64+0xcd/0x4c0 [ 2301.814490][ T4345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2301.814507][ T4345] RIP: 0033:0x7f787678eb69 [ 2301.814521][ T4345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2301.814538][ T4345] RSP: 002b:00007f78775fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2301.814554][ T4345] RAX: ffffffffffffffda RBX: 00007f78769b5fa0 RCX: 00007f787678eb69 [ 2301.814565][ T4345] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2301.814575][ T4345] RBP: 00007f78775fe090 R08: 0000000000000000 R09: 0000000000000000 [ 2301.814584][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2301.814594][ T4345] R13: 0000000000000000 R14: 00007f78769b5fa0 R15: 00007ffc4f681b18 [ 2301.814616][ T4345] [ 2301.815317][ T4345] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2301.871908][ T4356] netlink: 'syz.7.7308': attribute type 12 has an invalid length. [ 2301.873221][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 2301.877190][ T4356] netlink: 'syz.7.7308': attribute type 29 has an invalid length. [ 2301.890742][ T4345] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2302.140716][ T5967] pwc: Registered as video103. [ 2302.146266][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input81 [ 2302.354709][ T4356] netlink: 148 bytes leftover after parsing attributes in process `syz.7.7308'. [ 2302.363770][ T4356] netlink: 'syz.7.7308': attribute type 3 has an invalid length. [ 2302.386102][ T5967] usb 6-1: USB disconnect, device number 114 [ 2302.386754][ T4356] netlink: 'syz.7.7308': attribute type 2 has an invalid length. [ 2302.440694][ T4356] netlink: 35 bytes leftover after parsing attributes in process `syz.7.7308'. [ 2302.491676][ T4349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2302.808174][ T4391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7314'. [ 2303.215184][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2303.215201][ T30] audit: type=1400 audit(1737581585.126:1654): avc: denied { call } for pid=4392 comm="syz.5.7315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2303.263113][ T5964] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2303.283475][ T30] audit: type=1400 audit(1737581585.154:1655): avc: denied { transfer } for pid=4392 comm="syz.5.7315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2303.315142][ T4383] netlink: zone id is out of range [ 2303.321338][ T4383] netlink: del zone limit has 4 unknown bytes [ 2303.445372][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 2303.465374][ T5964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2303.486548][ T5964] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2303.723043][T17847] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2303.958150][T17847] usb 6-1: device descriptor read/64, error -71 [ 2304.045924][ T5964] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2304.068590][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2304.096986][ T5964] usb 3-1: Product: syz [ 2304.101180][ T5964] usb 3-1: Manufacturer: syz [ 2304.105771][ T5964] usb 3-1: SerialNumber: syz [ 2304.122713][ T5964] usb 3-1: config 0 descriptor?? [ 2304.130332][ T5964] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 2304.249426][T17847] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2304.429148][T17847] usb 6-1: device descriptor read/64, error -71 [ 2304.558280][T17847] usb usb6-port1: attempt power cycle [ 2304.567638][ T43] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 2304.865474][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2304.926798][ T43] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 2304.954334][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.983081][ T43] usb 1-1: config 0 descriptor?? [ 2305.101900][T17847] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2305.134758][T17847] usb 6-1: device descriptor read/8, error -71 [ 2305.390779][T17847] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2305.423596][T17847] usb 6-1: device descriptor read/8, error -71 [ 2305.451510][ T43] nintendo 0003:057E:200E.0039: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 2305.530693][ T43] nintendo 0003:057E:200E.0039: Failed charging grip handshake [ 2305.539930][ T43] nintendo 0003:057E:200E.0039: Failed to initialize controller; ret=-110 [ 2305.552449][T17847] usb usb6-port1: unable to enumerate USB device [ 2305.559287][ T43] nintendo 0003:057E:200E.0039: probe - fail = -110 [ 2305.569308][ T43] nintendo 0003:057E:200E.0039: probe with driver nintendo failed with error -110 [ 2306.032185][ T43] usb 1-1: USB disconnect, device number 23 [ 2306.060531][ T5964] usb 3-1: USB disconnect, device number 109 [ 2306.919277][T17847] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2307.101197][T17847] usb 6-1: Using ep0 maxpacket: 16 [ 2307.110472][T17847] usb 6-1: config 0 has no interfaces? [ 2307.119170][T17847] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 2307.131840][T17847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.167169][T17847] usb 6-1: Product: syz [ 2307.196425][T17847] usb 6-1: Manufacturer: syz [ 2307.215200][T17847] usb 6-1: SerialNumber: syz [ 2307.252933][T17847] usb 6-1: config 0 descriptor?? [ 2307.618027][ T4494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2307.707062][ T4494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2307.731200][T22254] usb 6-1: USB disconnect, device number 119 [ 2307.804180][ T4509] netlink: 'syz.7.7331': attribute type 10 has an invalid length. [ 2307.816305][ T4509] veth1_macvtap: left promiscuous mode [ 2307.861246][ T4512] netlink: 'syz.7.7331': attribute type 3 has an invalid length. [ 2307.869159][ T4512] netlink: 'syz.7.7331': attribute type 3 has an invalid length. [ 2307.945673][ T5964] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 2307.959524][ T4509] wlan0 speed is unknown, defaulting to 1000 [ 2307.970751][ T4509] lo speed is unknown, defaulting to 1000 [ 2307.980749][ T4509] lo speed is unknown, defaulting to 1000 [ 2308.118633][ T5964] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 2308.187186][ T5964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2308.219009][ T5964] usb 4-1: config 0 has no interface number 0 [ 2308.237262][ T5964] usb 4-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2308.792348][ T5964] usb 4-1: config 0 interface 113 has no altsetting 0 [ 2308.802789][ T5964] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2308.828244][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.842955][ T5964] usb 4-1: Product: syz [ 2308.847884][ T5964] usb 4-1: Manufacturer: syz [ 2308.852581][ T5964] usb 4-1: SerialNumber: syz [ 2308.938181][ T5964] usb 4-1: config 0 descriptor?? [ 2308.955438][ T5964] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 2311.169028][ T4564] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7335'. [ 2312.657753][ T5967] usb 4-1: USB disconnect, device number 118 [ 2314.673146][ T5967] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2315.563925][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 2315.628157][ T5967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2315.783162][ T5967] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2315.794840][ T5967] usb 3-1: config 7 has no interface number 0 [ 2315.806555][ T5967] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2315.822609][ T5967] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2315.831698][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.843113][ T5967] usb 3-1: Product: syz [ 2315.849358][ T5967] usb 3-1: Manufacturer: syz [ 2315.855350][ T5967] usb 3-1: SerialNumber: syz [ 2317.109736][ T5967] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2317.202138][ T5967] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2317.268204][ T4645] ieee802154 phy0 wpan0: encryption failed: -22 [ 2317.370017][ T5967] usb 3-1: USB disconnect, device number 110 [ 2317.411738][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2317.432718][ T5967] kobil_sct 3-1:7.59: device disconnected [ 2318.688756][ T4674] fuse: Bad value for 'fd' [ 2318.769570][ T4670] netlink: zone id is out of range [ 2318.779749][ T4670] netlink: del zone limit has 4 unknown bytes [ 2319.220475][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7356'. [ 2319.675492][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035ad7400: rx timeout, send abort [ 2319.894559][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7360'. [ 2320.052842][ T4702] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2320.063546][ T4705] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2320.218422][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035ad7400: abort rx timeout. Force session deactivation [ 2320.347099][T29755] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2320.365401][T17847] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2320.658147][T17847] usb 6-1: Using ep0 maxpacket: 32 [ 2320.669984][T29755] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2320.693415][T17847] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2320.704788][T29755] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2320.749433][T17847] usb 6-1: config 0 has no interface number 0 [ 2320.763129][T29755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.785555][T17847] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2320.807414][T17847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.816518][T29755] usb 4-1: config 0 descriptor?? [ 2320.825543][T17847] usb 6-1: Product: syz [ 2320.835067][T29755] pwc: Askey VC010 type 2 USB webcam detected. [ 2320.851293][T17847] usb 6-1: Manufacturer: syz [ 2320.859330][T17847] usb 6-1: SerialNumber: syz [ 2320.894440][T17847] usb 6-1: config 0 descriptor?? [ 2321.108442][T17847] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2321.127942][T17847] usb 6-1: selecting invalid altsetting 1 [ 2321.136660][T17847] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2321.146866][T17847] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2321.159381][T17847] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2321.179585][T17847] usb 6-1: media controller created [ 2321.208774][T17847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2321.355901][T29755] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2321.363349][T29755] pwc: recv_control_msg error -32 req 02 val 2700 [ 2321.378251][T29755] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2321.557769][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7365'. [ 2321.771985][T29755] pwc: recv_control_msg error -71 req 04 val 1000 [ 2321.803973][T17847] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2321.831896][T29755] pwc: recv_control_msg error -71 req 04 val 1300 [ 2321.984587][T29755] pwc: recv_control_msg error -71 req 04 val 1400 [ 2322.396926][T17847] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2322.416746][T29755] pwc: recv_control_msg error -71 req 02 val 2000 [ 2322.428578][T17847] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2322.436503][T29755] pwc: recv_control_msg error -71 req 02 val 2100 [ 2322.446668][T29755] pwc: recv_control_msg error -71 req 04 val 1500 [ 2322.570438][T29755] pwc: recv_control_msg error -71 req 02 val 2500 [ 2322.599977][T29755] pwc: recv_control_msg error -71 req 02 val 2400 [ 2322.708156][T29755] pwc: recv_control_msg error -71 req 02 val 2600 [ 2322.870523][ T30] audit: type=1400 audit(1737581603.507:1656): avc: denied { relabelfrom } for pid=4760 comm="syz.0.7366" name="" dev="pipefs" ino=128923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2323.041686][T17847] usb 6-1: USB disconnect, device number 120 [ 2323.048112][T29755] pwc: recv_control_msg error -71 req 02 val 2900 [ 2323.066082][T29755] pwc: recv_control_msg error -71 req 02 val 2800 [ 2323.091500][T29755] pwc: recv_control_msg error -71 req 04 val 1100 [ 2323.113492][T29755] pwc: recv_control_msg error -71 req 04 val 1200 [ 2323.135999][T29755] pwc: Registered as video103. [ 2323.154920][T29755] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input82 [ 2323.796238][T29755] usb 4-1: USB disconnect, device number 119 [ 2327.793657][ T4844] netlink: 'syz.3.7379': attribute type 20 has an invalid length. [ 2327.809934][ T4844] dvmrp17: entered allmulticast mode [ 2327.818421][ T4844] dvmrp17: left allmulticast mode [ 2329.742606][ T4872] pimreg: entered allmulticast mode [ 2331.101496][T17847] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2331.358425][T17847] usb 1-1: Using ep0 maxpacket: 8 [ 2331.755055][T17847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2331.764498][T17847] usb 1-1: config 7 has an invalid interface number: 59 but max is 0 [ 2331.773362][T17847] usb 1-1: config 7 has no interface number 0 [ 2331.797985][T17847] usb 1-1: config 7 interface 59 has no altsetting 0 [ 2331.810357][T17847] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2331.823500][T17847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.834338][T17847] usb 1-1: Product: syz [ 2331.838580][T17847] usb 1-1: Manufacturer: syz [ 2331.850051][T17847] usb 1-1: SerialNumber: syz [ 2332.191695][T17847] kobil_sct 1-1:7.59: KOBIL USB smart card terminal converter detected [ 2332.219952][T17847] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2332.226184][ T4917] tc_dump_action: action bad kind [ 2332.241399][ T4917] netlink: 'syz.2.7389': attribute type 10 has an invalid length. [ 2332.297727][ T4917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7389'. [ 2332.300306][T17847] usb 1-1: USB disconnect, device number 24 [ 2332.319608][ T4917] dummy0: entered promiscuous mode [ 2332.338756][ T4917] bridge0: port 1(dummy0) entered blocking state [ 2332.347862][ T4917] bridge0: port 1(dummy0) entered disabled state [ 2332.356086][ T4917] dummy0: entered allmulticast mode [ 2332.364034][T17847] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2332.384281][ T4917] bridge0: port 1(dummy0) entered blocking state [ 2332.390725][ T4917] bridge0: port 1(dummy0) entered forwarding state [ 2332.406518][T17847] kobil_sct 1-1:7.59: device disconnected [ 2334.212613][T17847] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2334.440575][T17847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2334.503394][T17847] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2334.564780][T17847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2334.741907][T17847] usb 1-1: config 0 descriptor?? [ 2334.919637][T17847] pwc: Askey VC010 type 2 USB webcam detected. [ 2335.699673][T17847] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2335.721380][T17847] pwc: recv_control_msg error -32 req 02 val 2700 [ 2335.826841][T17847] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2336.331691][T17847] pwc: recv_control_msg error -71 req 04 val 1000 [ 2336.384707][T17847] pwc: recv_control_msg error -71 req 04 val 1300 [ 2336.428984][T17847] pwc: recv_control_msg error -71 req 04 val 1400 [ 2336.445059][T17847] pwc: recv_control_msg error -71 req 02 val 2000 [ 2336.462093][T17847] pwc: recv_control_msg error -71 req 02 val 2100 [ 2336.470270][T17847] pwc: recv_control_msg error -71 req 04 val 1500 [ 2336.563947][T17847] pwc: recv_control_msg error -71 req 02 val 2500 [ 2336.575353][T17847] pwc: recv_control_msg error -71 req 02 val 2400 [ 2336.794787][T17847] pwc: recv_control_msg error -71 req 02 val 2600 [ 2336.972486][T17847] pwc: recv_control_msg error -71 req 02 val 2900 [ 2337.088659][ T5967] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2337.107698][T17847] pwc: recv_control_msg error -71 req 02 val 2800 [ 2337.120620][T17847] pwc: recv_control_msg error -71 req 04 val 1100 [ 2337.127377][T17847] pwc: recv_control_msg error -71 req 04 val 1200 [ 2337.270341][ T5967] usb 4-1: Using ep0 maxpacket: 8 [ 2337.668425][T17847] pwc: Registered as video103. [ 2337.678031][T17847] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input83 [ 2337.693513][ T4993] loop2: detected capacity change from 0 to 7 [ 2337.712385][ T5967] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2337.722504][T17847] usb 1-1: USB disconnect, device number 25 [ 2337.723572][ T5967] usb 4-1: config 7 has an invalid interface number: 59 but max is 0 [ 2337.755769][ T4993] Dev loop2: unable to read RDB block 7 [ 2337.762689][ T5967] usb 4-1: config 7 has no interface number 0 [ 2337.769073][ T4993] loop2: unable to read partition table [ 2337.776421][ T5967] usb 4-1: config 7 interface 59 has no altsetting 0 [ 2337.783386][ T4993] loop2: partition table beyond EOD, truncated [ 2337.798136][ T5967] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2337.807517][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.853220][ T4993] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2337.963313][ T5967] usb 4-1: Product: syz [ 2337.996942][ T5967] usb 4-1: Manufacturer: syz [ 2338.012965][ T5967] usb 4-1: SerialNumber: syz [ 2338.378849][ T5967] kobil_sct 4-1:7.59: KOBIL USB smart card terminal converter detected [ 2338.416973][ T5967] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2338.456871][ T5967] usb 4-1: USB disconnect, device number 120 [ 2338.478006][T22254] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2338.491335][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2338.519896][ T5967] kobil_sct 4-1:7.59: device disconnected [ 2338.638329][T22254] usb 3-1: Using ep0 maxpacket: 8 [ 2338.646739][T22254] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2338.655728][T22254] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2338.668462][T22254] usb 3-1: config 7 has no interface number 0 [ 2338.679485][T22254] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2338.703284][T22254] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2338.722479][T22254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.749347][T22254] usb 3-1: Product: syz [ 2338.764787][T22254] usb 3-1: Manufacturer: syz [ 2338.780091][T22254] usb 3-1: SerialNumber: syz [ 2339.224660][T22254] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2339.263422][T22254] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2339.714473][ T5020] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7404'. [ 2339.742568][T22254] usb 3-1: USB disconnect, device number 111 [ 2339.753783][T22254] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2339.771363][T22254] kobil_sct 3-1:7.59: device disconnected [ 2343.951629][T22254] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2344.144014][T17353] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2344.186809][T22254] usb 3-1: Using ep0 maxpacket: 8 [ 2344.194033][T22254] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2344.205759][T22254] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2344.214650][T22254] usb 3-1: config 7 has no interface number 0 [ 2344.223422][T22254] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2344.325733][T17353] usb 1-1: Using ep0 maxpacket: 8 [ 2344.351838][T17353] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2344.466866][T17353] usb 1-1: config 7 has an invalid interface number: 59 but max is 0 [ 2344.475464][T17353] usb 1-1: config 7 has no interface number 0 [ 2344.481634][T17353] usb 1-1: config 7 interface 59 has no altsetting 0 [ 2344.489564][T22254] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2344.498728][T22254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.511039][T22254] usb 3-1: Product: syz [ 2344.529213][T17353] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2344.555823][T17353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.594529][T22254] usb 3-1: Manufacturer: syz [ 2344.599147][T22254] usb 3-1: SerialNumber: syz [ 2344.626200][T17353] usb 1-1: Product: syz [ 2344.665408][T17353] usb 1-1: Manufacturer: syz [ 2344.673639][T17353] usb 1-1: SerialNumber: syz [ 2344.941404][T17353] kobil_sct 1-1:7.59: KOBIL USB smart card terminal converter detected [ 2345.253911][T22254] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2345.276939][T17353] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2345.317419][T22254] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB1 [ 2345.346045][T17353] usb 1-1: USB disconnect, device number 26 [ 2345.362761][T22254] usb 3-1: USB disconnect, device number 112 [ 2345.369612][T17353] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2345.538573][T22254] kobil ttyUSB1: KOBIL USB smart card terminal converter now disconnected from ttyUSB1 [ 2346.076082][T17353] kobil_sct 1-1:7.59: device disconnected [ 2346.084301][T22254] kobil_sct 3-1:7.59: device disconnected [ 2346.708762][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7425'. [ 2348.425697][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7428'. [ 2348.434818][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7428'. [ 2350.431397][ T5263] FAULT_INJECTION: forcing a failure. [ 2350.431397][ T5263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.473856][ T5263] CPU: 0 UID: 0 PID: 5263 Comm: syz.3.7433 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 2350.473879][ T5263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2350.473886][ T5263] Call Trace: [ 2350.473890][ T5263] [ 2350.473895][ T5263] dump_stack_lvl+0x16c/0x1f0 [ 2350.473916][ T5263] should_fail_ex+0x512/0x640 [ 2350.473936][ T5263] _copy_from_user+0x2e/0xd0 [ 2350.473949][ T5263] core_sys_select+0x2c8/0xc10 [ 2350.473966][ T5263] ? __pfx_core_sys_select+0x10/0x10 [ 2350.473981][ T5263] ? lock_acquire+0x179/0x350 [ 2350.474013][ T5263] ? set_user_sigmask+0x21b/0x2b0 [ 2350.474027][ T5263] ? __pfx_set_user_sigmask+0x10/0x10 [ 2350.474043][ T5263] do_pselect.constprop.0+0x19f/0x1e0 [ 2350.474056][ T5263] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 2350.474068][ T5263] ? __pfx___schedule+0x10/0x10 [ 2350.474088][ T5263] __x64_sys_pselect6+0x182/0x240 [ 2350.474101][ T5263] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 2350.474118][ T5263] do_syscall_64+0xcd/0x4c0 [ 2350.474136][ T5263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2350.474148][ T5263] RIP: 0033:0x7f430f58eb69 [ 2350.474157][ T5263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2350.474168][ T5263] RSP: 002b:00007f431041a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2350.474179][ T5263] RAX: ffffffffffffffda RBX: 00007f430f7b5fa0 RCX: 00007f430f58eb69 [ 2350.474187][ T5263] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000040 [ 2350.474193][ T5263] RBP: 00007f431041a090 R08: 0000000000000000 R09: 0000000000000000 [ 2350.474200][ T5263] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2350.474207][ T5263] R13: 0000000000000000 R14: 00007f430f7b5fa0 R15: 00007ffd4039d378 [ 2350.474221][ T5263] [ 2350.661793][ C0] vkms_vblank_simulate: vblank timer overrun [ 2350.817705][ T5265] input: syz0 as /devices/virtual/input/input84 [ 2351.153467][ T5283] wlan0 speed is unknown, defaulting to 1000 [ 2351.191414][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2351.688071][ T5283] lo speed is unknown, defaulting to 1000 [ 2351.703641][ T5283] lo speed is unknown, defaulting to 1000 [ 2352.121594][T22254] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2352.870184][T17847] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2352.963725][T22254] usb 4-1: Using ep0 maxpacket: 32 [ 2353.145448][T17847] usb 3-1: Using ep0 maxpacket: 32 [ 2353.173541][T17847] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2353.213539][T17847] usb 3-1: config 0 has no interface number 0 [ 2353.351644][T17847] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2353.361061][T17847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.400160][T17847] usb 3-1: Product: syz [ 2353.409429][T17847] usb 3-1: Manufacturer: syz [ 2353.418816][T17847] usb 3-1: SerialNumber: syz [ 2353.433183][T17847] usb 3-1: config 0 descriptor?? [ 2353.445458][T17847] smsc95xx v2.0.0 [ 2354.106610][T17847] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2354.133511][T17847] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2354.160856][T17847] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2354.200190][T17847] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 2354.258233][T17847] usb 3-1: USB disconnect, device number 113 [ 2355.477389][T22254] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2355.637621][T22254] usb 4-1: no configurations [ 2355.742901][T22254] usb 4-1: can't read configurations, error -22 [ 2356.231046][ T30] audit: type=1400 audit(1737581634.702:1657): avc: denied { audit_control } for pid=5390 comm="syz.7.7445" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2356.538180][ T5403] random: crng reseeded on system resumption [ 2356.544200][ T30] audit: type=1400 audit(1737581635.011:1658): avc: denied { ioctl } for pid=5402 comm="syz.5.7449" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2357.758347][ T5416] netlink: 'syz.0.7451': attribute type 1 has an invalid length. [ 2357.849113][ T5416] bond1: entered promiscuous mode [ 2357.935233][ T5416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2358.200228][ T5436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2358.208258][ T5436] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 2358.220611][ T5436] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 2358.239049][ T5436] bond1: (slave vcan1): making interface the new active one [ 2358.247865][ T5436] vcan1: entered promiscuous mode [ 2358.254780][ T5436] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 2359.113983][ T5472] wlan0 speed is unknown, defaulting to 1000 [ 2359.143007][ T5472] lo speed is unknown, defaulting to 1000 [ 2359.154056][ T5472] lo speed is unknown, defaulting to 1000 [ 2361.839073][ T5527] /dev/nullb0: Can't open blockdev [ 2361.872150][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7460'. [ 2363.199468][ T5537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2363.663880][ T5563] FAULT_INJECTION: forcing a failure. [ 2363.663880][ T5563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2363.677464][ T5563] CPU: 0 UID: 0 PID: 5563 Comm: syz.3.7468 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 2363.677481][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2363.677488][ T5563] Call Trace: [ 2363.677492][ T5563] [ 2363.677496][ T5563] dump_stack_lvl+0x16c/0x1f0 [ 2363.677517][ T5563] should_fail_ex+0x512/0x640 [ 2363.677538][ T5563] _copy_from_user+0x2e/0xd0 [ 2363.677550][ T5563] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 2363.677570][ T5563] snd_rawmidi_write+0x26e/0xc10 [ 2363.677587][ T5563] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2363.677600][ T5563] ? __import_iovec+0x1dd/0x650 [ 2363.677611][ T5563] ? avc_policy_seqno+0x9/0x20 [ 2363.677628][ T5563] ? selinux_file_permission+0x126/0x660 [ 2363.677642][ T5563] ? __pfx_default_wake_function+0x10/0x10 [ 2363.677657][ T5563] ? bpf_lsm_file_permission+0x9/0x10 [ 2363.677672][ T5563] ? security_file_permission+0x71/0x210 [ 2363.677688][ T5563] ? rw_verify_area+0xcf/0x6c0 [ 2363.677706][ T5563] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2363.677718][ T5563] vfs_writev+0x5df/0xde0 [ 2363.677732][ T5563] ? __pfx_vfs_writev+0x10/0x10 [ 2363.677742][ T5563] ? find_held_lock+0x2b/0x80 [ 2363.677765][ T5563] ? __fget_files+0x20e/0x3c0 [ 2363.677777][ T5563] ? __fget_files+0x1a0/0x3c0 [ 2363.677792][ T5563] ? do_writev+0x28c/0x340 [ 2363.677800][ T5563] do_writev+0x28c/0x340 [ 2363.677816][ T5563] ? __pfx_do_writev+0x10/0x10 [ 2363.677830][ T5563] do_syscall_64+0xcd/0x4c0 [ 2363.677848][ T5563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2363.677860][ T5563] RIP: 0033:0x7f430f58eb69 [ 2363.677869][ T5563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2363.677880][ T5563] RSP: 002b:00007f431041a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2363.677891][ T5563] RAX: ffffffffffffffda RBX: 00007f430f7b5fa0 RCX: 00007f430f58eb69 [ 2363.677898][ T5563] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 2363.677905][ T5563] RBP: 00007f431041a090 R08: 0000000000000000 R09: 0000000000000000 [ 2363.677911][ T5563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2363.677918][ T5563] R13: 0000000000000000 R14: 00007f430f7b5fa0 R15: 00007ffd4039d378 [ 2363.677932][ T5563] [ 2366.005653][ T5590] openvswitch: netlink: Flow actions attr not present in new flow. [ 2366.284238][T22254] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2367.079355][ T5601] block nbd0: shutting down sockets [ 2367.107556][T22254] usb 3-1: device descriptor read/64, error -71 [ 2367.306423][ T5592] netlink: zone id is out of range [ 2367.330752][ T5592] netlink: del zone limit has 4 unknown bytes [ 2367.406822][T22254] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2367.717536][T22254] usb 3-1: device descriptor read/64, error -71 [ 2367.910221][T22254] usb usb3-port1: attempt power cycle [ 2367.930951][ T5967] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2368.266793][ T5967] usb 1-1: Using ep0 maxpacket: 8 [ 2368.454797][T22254] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2368.559855][ T5967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2368.571304][T22254] usb 3-1: device descriptor read/8, error -71 [ 2368.578963][ T5967] usb 1-1: config 7 has an invalid interface number: 59 but max is 0 [ 2368.587251][ T5967] usb 1-1: config 7 has no interface number 0 [ 2368.596757][ T5967] usb 1-1: config 7 interface 59 has no altsetting 0 [ 2368.724339][ T5967] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2368.733927][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.742040][ T5967] usb 1-1: Product: syz [ 2368.746362][ T5967] usb 1-1: Manufacturer: syz [ 2368.751774][ T5967] usb 1-1: SerialNumber: syz [ 2369.317212][ T5967] kobil_sct 1-1:7.59: KOBIL USB smart card terminal converter detected [ 2369.336374][ T5967] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2369.345539][T22254] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2369.366246][ T5967] usb 1-1: USB disconnect, device number 27 [ 2369.374823][T22254] usb 3-1: device descriptor read/8, error -71 [ 2369.383987][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2369.402013][ T5967] kobil_sct 1-1:7.59: device disconnected [ 2369.491828][T22254] usb usb3-port1: unable to enumerate USB device [ 2369.672238][T17353] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2370.303916][T22254] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2370.326894][T17353] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 2370.341249][T17353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.352517][T17353] usb 4-1: config 0 descriptor?? [ 2371.500342][T22254] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2371.558175][T22254] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2371.567475][ T5670] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 2371.573993][ T5670] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2371.607711][ T30] audit: type=1400 audit(1737581649.051:1659): avc: denied { mount } for pid=5700 comm="syz.5.7492" name="/" dev="hugetlbfs" ino=131267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2371.635821][ T5670] vhci_hcd vhci_hcd.0: Device attached [ 2371.666430][T22254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2371.688585][T22254] usb 3-1: config 0 descriptor?? [ 2371.712385][T22254] pwc: Askey VC010 type 2 USB webcam detected. [ 2371.850285][ T30] audit: type=1400 audit(1737581649.079:1660): avc: denied { mounton } for pid=5700 comm="syz.5.7492" path="/261/file0" dev="hugetlbfs" ino=131267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 2371.918566][T29755] vhci_hcd: vhci_device speed not set [ 2371.982557][T29755] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 2372.490239][ T30] audit: type=1400 audit(1737581649.921:1661): avc: denied { unmount } for pid=29178 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2372.872682][T22254] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2372.879724][T22254] pwc: recv_control_msg error -32 req 02 val 2700 [ 2374.033323][T22254] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2374.040394][T22254] pwc: recv_control_msg error -71 req 04 val 1000 [ 2374.113519][ T5702] vhci_hcd: connection reset by peer [ 2374.128996][T22254] pwc: recv_control_msg error -71 req 04 val 1300 [ 2374.131071][ T1197] vhci_hcd: stop threads [ 2374.163238][T17353] kaweth 4-1:0.0: Firmware present in device. [ 2374.179547][T22254] pwc: recv_control_msg error -71 req 04 val 1400 [ 2374.185980][ T1197] vhci_hcd: release socket [ 2374.187310][ T1197] vhci_hcd: disconnect device [ 2374.204868][T17353] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 2374.216305][T17353] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 2374.233531][T22254] pwc: recv_control_msg error -71 req 02 val 2000 [ 2374.265477][T22254] pwc: recv_control_msg error -71 req 02 val 2100 [ 2374.274485][T17353] usb 4-1: USB disconnect, device number 123 [ 2374.285347][T22254] pwc: recv_control_msg error -71 req 04 val 1500 [ 2374.292562][T22254] pwc: recv_control_msg error -71 req 02 val 2500 [ 2374.301559][T22254] pwc: recv_control_msg error -71 req 02 val 2400 [ 2374.314041][T22254] pwc: recv_control_msg error -71 req 02 val 2600 [ 2374.320886][T22254] pwc: recv_control_msg error -71 req 02 val 2900 [ 2374.409660][T22254] pwc: recv_control_msg error -71 req 02 val 2800 [ 2374.417310][T22254] pwc: recv_control_msg error -71 req 04 val 1100 [ 2374.427493][T22254] pwc: recv_control_msg error -71 req 04 val 1200 [ 2374.436676][T22254] pwc: Registered as video103. [ 2374.918354][T22254] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input85 [ 2374.954686][T22254] usb 3-1: USB disconnect, device number 118 [ 2375.578620][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7499'. [ 2375.592580][ T30] audit: type=1326 audit(1737581652.830:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.5.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8798eb69 code=0x7ffc0000 [ 2375.866964][ T30] audit: type=1326 audit(1737581652.830:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.5.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8798eb69 code=0x7ffc0000 [ 2375.916417][ T30] audit: type=1326 audit(1737581652.887:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.5.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f5f8798eb69 code=0x7ffc0000 [ 2376.214569][ T30] audit: type=1326 audit(1737581653.401:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.5.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8798eb69 code=0x7ffc0000 [ 2376.238906][ T30] audit: type=1326 audit(1737581653.401:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.5.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8798eb69 code=0x7ffc0000 [ 2376.323330][T17847] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2376.504629][T17847] usb 1-1: Using ep0 maxpacket: 8 [ 2376.514856][T17847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2376.648898][T17847] usb 1-1: config 7 has an invalid interface number: 59 but max is 0 [ 2376.689426][T17847] usb 1-1: config 7 has no interface number 0 [ 2376.717095][T17847] usb 1-1: config 7 interface 59 has no altsetting 0 [ 2376.732336][T17847] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2376.862631][T17847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2376.878644][T17847] usb 1-1: Product: syz [ 2376.887961][T17847] usb 1-1: Manufacturer: syz [ 2377.345254][T17847] usb 1-1: SerialNumber: syz [ 2377.385311][T21912] libceph: connect (1)[c::]:6789 error -101 [ 2377.391402][T21912] libceph: mon0 (1)[c::]:6789 connect error [ 2377.550375][ T5788] ceph: No mds server is up or the cluster is laggy [ 2377.680731][T17847] kobil_sct 1-1:7.59: KOBIL USB smart card terminal converter detected [ 2377.720824][ T5802] loop6: detected capacity change from 0 to 7 [ 2377.736387][ T5802] Dev loop6: unable to read RDB block 7 [ 2377.742015][ T30] audit: type=1400 audit(1737581654.813:1667): avc: denied { append } for pid=5798 comm="syz.7.7506" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2377.765759][ T5802] loop6: unable to read partition table [ 2377.777479][ T5802] loop6: partition table beyond EOD, truncated [ 2377.777506][T17847] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2377.783647][ T5802] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2377.815069][T17847] usb 1-1: USB disconnect, device number 28 [ 2377.881772][ T5812] /dev/nullb0: Can't open blockdev [ 2377.958527][T29755] vhci_hcd: vhci_device speed not set [ 2378.590184][T17847] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2378.600990][T17847] kobil_sct 1-1:7.59: device disconnected [ 2380.536938][ T30] audit: type=1400 audit(1737581657.180:1668): avc: denied { cmd } for pid=5841 comm="syz.7.7511" path="socket:[131451]" dev="sockfs" ino=131451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2380.799882][ T5864] binder: BINDER_SET_CONTEXT_MGR already set [ 2380.806066][ T5864] binder: 5853:5864 ioctl 4018620d 2000000002c0 returned -16 [ 2380.811860][ T5866] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7516'. [ 2380.833226][ T5866] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7516'. [ 2382.619460][ T5836] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2383.177384][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2383.201648][ T5836] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2383.213942][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.238288][ T5836] usb 3-1: config 0 descriptor?? [ 2383.308758][ T5836] pwc: Askey VC010 type 2 USB webcam detected. [ 2383.775305][ T5836] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2383.785034][ T5836] pwc: recv_control_msg error -32 req 02 val 2700 [ 2383.905090][ T5836] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2384.565451][ T5915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2384.950503][ T5928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2385.131397][ T5942] wlan0 speed is unknown, defaulting to 1000 [ 2385.139107][ T5942] lo speed is unknown, defaulting to 1000 [ 2385.145932][ T5942] lo speed is unknown, defaulting to 1000 [ 2385.348727][ T5949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7531'. [ 2386.002847][ T5836] pwc: recv_control_msg error -71 req 04 val 1000 [ 2386.084122][ T5836] pwc: recv_control_msg error -71 req 04 val 1300 [ 2386.090910][ T5836] pwc: recv_control_msg error -71 req 04 val 1400 [ 2386.099122][ T5836] pwc: recv_control_msg error -71 req 02 val 2000 [ 2386.106741][ T5836] pwc: recv_control_msg error -71 req 02 val 2100 [ 2386.113501][ T5836] pwc: recv_control_msg error -71 req 04 val 1500 [ 2386.121168][ T5836] pwc: recv_control_msg error -71 req 02 val 2500 [ 2386.128926][ T5836] pwc: recv_control_msg error -71 req 02 val 2400 [ 2386.135686][ T5836] pwc: recv_control_msg error -71 req 02 val 2600 [ 2386.143646][ T5836] pwc: recv_control_msg error -71 req 02 val 2900 [ 2386.151324][ T5836] pwc: recv_control_msg error -71 req 02 val 2800 [ 2386.160468][ T5836] pwc: recv_control_msg error -71 req 04 val 1100 [ 2386.167217][ T5836] pwc: recv_control_msg error -71 req 04 val 1200 [ 2386.274825][ T5836] pwc: Registered as video103. [ 2386.306182][ T5836] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input86 [ 2386.895800][ T5836] usb 3-1: USB disconnect, device number 119 [ 2390.703120][ T5858] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2390.840759][ T5967] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2391.015508][ T5967] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2391.459817][ T5967] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2391.514904][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2391.634879][ T5967] usb 6-1: config 0 descriptor?? [ 2391.649039][ T5967] pwc: Askey VC010 type 2 USB webcam detected. [ 2392.530230][ T5967] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2392.538789][ T5967] pwc: recv_control_msg error -32 req 02 val 2700 [ 2392.547879][ T5967] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2393.187043][ T5967] pwc: recv_control_msg error -71 req 04 val 1000 [ 2393.197925][ T5967] pwc: recv_control_msg error -71 req 04 val 1300 [ 2393.207743][ T5967] pwc: recv_control_msg error -71 req 04 val 1400 [ 2393.278182][ T5967] pwc: recv_control_msg error -71 req 02 val 2000 [ 2393.290970][ T5967] pwc: recv_control_msg error -71 req 02 val 2100 [ 2393.306535][ T5967] pwc: recv_control_msg error -71 req 04 val 1500 [ 2393.353899][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7549'. [ 2393.577079][ T5967] pwc: recv_control_msg error -71 req 02 val 2500 [ 2393.578205][ T6084] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6084 comm=syz.7.7549 [ 2393.692533][ T6091] FAULT_INJECTION: forcing a failure. [ 2393.692533][ T6091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2393.718808][ T5967] pwc: recv_control_msg error -71 req 02 val 2400 [ 2393.737946][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.7.7549 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 2393.737974][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2393.737984][ T6091] Call Trace: [ 2393.737990][ T6091] [ 2393.737997][ T6091] dump_stack_lvl+0x16c/0x1f0 [ 2393.738028][ T6091] should_fail_ex+0x512/0x640 [ 2393.738059][ T6091] _copy_from_user+0x2e/0xd0 [ 2393.738079][ T6091] copy_msghdr_from_user+0x98/0x160 [ 2393.738105][ T6091] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2393.738143][ T6091] ___sys_sendmsg+0xfe/0x1d0 [ 2393.738169][ T6091] ? __pfx____sys_sendmsg+0x10/0x10 [ 2393.738216][ T6091] ? __mutex_unlock_slowpath+0x100/0x800 [ 2393.738259][ T6091] __sys_sendmsg+0x16d/0x220 [ 2393.738291][ T6091] ? __pfx___sys_sendmsg+0x10/0x10 [ 2393.738331][ T6091] do_syscall_64+0xcd/0x4c0 [ 2393.738359][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2393.738378][ T6091] RIP: 0033:0x7f40b758eb69 [ 2393.738392][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2393.738410][ T6091] RSP: 002b:00007f40b8359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2393.738427][ T6091] RAX: ffffffffffffffda RBX: 00007f40b77b6080 RCX: 00007f40b758eb69 [ 2393.738439][ T6091] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000005 [ 2393.738450][ T6091] RBP: 00007f40b8359090 R08: 0000000000000000 R09: 0000000000000000 [ 2393.738460][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2393.738470][ T6091] R13: 0000000000000000 R14: 00007f40b77b6080 R15: 00007ffdffd424d8 [ 2393.738493][ T6091] [ 2393.748735][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 2394.039925][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 2394.050582][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 2394.067137][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 2394.078265][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 2394.100307][ T5967] pwc: Registered as video103. [ 2394.111070][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input87 [ 2394.122625][T21912] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2394.273534][ T5967] usb 6-1: USB disconnect, device number 121 [ 2394.443270][T21912] usb 1-1: Using ep0 maxpacket: 8 [ 2394.508950][T21912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2394.523168][T21912] usb 1-1: config 7 has an invalid interface number: 59 but max is 0 [ 2394.536345][T21912] usb 1-1: config 7 has no interface number 0 [ 2394.546082][T21912] usb 1-1: config 7 interface 59 has no altsetting 0 [ 2395.102527][T21912] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2395.111812][T21912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.120041][T21912] usb 1-1: Product: syz [ 2395.124259][T21912] usb 1-1: Manufacturer: syz [ 2395.130422][T21912] usb 1-1: SerialNumber: syz [ 2395.416482][T17353] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2395.416901][T21912] kobil_sct 1-1:7.59: KOBIL USB smart card terminal converter detected [ 2395.517197][T21912] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2395.571424][T21912] usb 1-1: USB disconnect, device number 29 [ 2395.579916][T17353] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2395.597110][T17353] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2395.623133][T17353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.635410][T21912] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2395.654808][T17353] usb 6-1: config 0 descriptor?? [ 2395.660198][T21912] kobil_sct 1-1:7.59: device disconnected [ 2395.668123][T17353] pwc: Askey VC010 type 2 USB webcam detected. [ 2395.779634][ T5836] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2395.873162][ T6160] netlink: 'syz.7.7560': attribute type 3 has an invalid length. [ 2395.952197][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2395.998235][ T5836] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2396.015054][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.064913][ T5836] usb 3-1: config 0 descriptor?? [ 2396.087314][ T5836] pwc: Askey VC010 type 2 USB webcam detected. [ 2396.109792][T17353] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2396.131798][T17353] pwc: recv_control_msg error -32 req 02 val 2700 [ 2396.173367][T17353] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2396.634742][ T5836] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2396.741306][T17353] pwc: recv_control_msg error -71 req 04 val 1000 [ 2396.752094][T17353] pwc: recv_control_msg error -71 req 04 val 1300 [ 2396.759455][T17353] pwc: recv_control_msg error -71 req 04 val 1400 [ 2396.770307][T17353] pwc: recv_control_msg error -71 req 02 val 2000 [ 2396.781641][T17353] pwc: recv_control_msg error -71 req 02 val 2100 [ 2396.786431][ T5836] pwc: recv_control_msg error -32 req 02 val 2700 [ 2396.800769][T17353] pwc: recv_control_msg error -71 req 04 val 1500 [ 2396.812717][T17353] pwc: recv_control_msg error -71 req 02 val 2500 [ 2396.922443][T17353] pwc: recv_control_msg error -71 req 02 val 2400 [ 2396.929613][T17353] pwc: recv_control_msg error -71 req 02 val 2600 [ 2396.936691][T17353] pwc: recv_control_msg error -71 req 02 val 2900 [ 2396.944077][ T5836] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2396.944358][T17353] pwc: recv_control_msg error -71 req 02 val 2800 [ 2396.959875][T17353] pwc: recv_control_msg error -71 req 04 val 1100 [ 2396.966670][T17353] pwc: recv_control_msg error -71 req 04 val 1200 [ 2396.974604][T17353] pwc: Registered as video103. [ 2397.041271][T21912] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2397.862053][T17353] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input88 [ 2397.896185][T17353] usb 6-1: USB disconnect, device number 122 [ 2399.245164][T21912] usb 1-1: Using ep0 maxpacket: 8 [ 2399.254482][ T5836] pwc: recv_control_msg error -71 req 04 val 1000 [ 2399.282850][ T5836] pwc: recv_control_msg error -71 req 04 val 1300 [ 2399.316869][ T5836] pwc: recv_control_msg error -71 req 04 val 1400 [ 2399.334905][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7564'. [ 2399.351096][ T6204] 8021q: VLANs not supported on ipvlan1 [ 2399.391173][ T5836] pwc: recv_control_msg error -71 req 02 val 2000 [ 2399.447177][ T5836] pwc: recv_control_msg error -71 req 02 val 2100 [ 2399.475926][ T5836] pwc: recv_control_msg error -71 req 04 val 1500 [ 2399.510899][ T5836] pwc: recv_control_msg error -71 req 02 val 2500 [ 2399.536595][ T5836] pwc: recv_control_msg error -71 req 02 val 2400 [ 2399.552365][ T5836] pwc: recv_control_msg error -71 req 02 val 2600 [ 2399.584397][ T5836] pwc: recv_control_msg error -71 req 02 val 2900 [ 2399.611052][ T5836] pwc: recv_control_msg error -71 req 02 val 2800 [ 2399.635540][ T5836] pwc: recv_control_msg error -71 req 04 val 1100 [ 2399.662896][ T5836] pwc: recv_control_msg error -71 req 04 val 1200 [ 2399.825894][ T5836] pwc: Registered as video103. [ 2400.244102][ T5836] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input89 [ 2400.274877][ T5836] usb 3-1: USB disconnect, device number 120 [ 2400.697316][T21912] usb 1-1: device descriptor read/all, error -71 [ 2400.707989][ T5836] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2400.901278][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2400.921748][ T5836] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2400.944643][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2400.993502][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7569'. [ 2401.019946][ T5836] usb 3-1: config 0 descriptor?? [ 2401.272196][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7570'. [ 2401.663665][ T5836] lenovo 0003:17EF:6047.003A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 2401.868766][ T6204] netlink: 'syz.2.7565': attribute type 1 has an invalid length. [ 2401.876740][ T6204] netlink: 'syz.2.7565': attribute type 2 has an invalid length. [ 2401.895199][ T6204] netlink: 'syz.2.7565': attribute type 1 has an invalid length. [ 2402.122844][ T5836] lenovo 0003:17EF:6047.003A: Failed to switch F7/9/11 mode: -71 [ 2402.217922][ T5836] lenovo 0003:17EF:6047.003A: Failed to switch middle button: -71 [ 2402.226497][ T5836] lenovo 0003:17EF:6047.003A: Fn-lock setting failed: -71 [ 2402.235623][ T5836] lenovo 0003:17EF:6047.003A: Sensitivity setting failed: -71 [ 2402.255185][ T5836] usb 3-1: USB disconnect, device number 121 [ 2402.322355][ T5967] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2402.492482][ T5967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2402.519562][ T5967] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2402.544042][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2402.602679][ T5967] usb 4-1: config 0 descriptor?? [ 2402.623692][ T5967] pwc: Askey VC010 type 2 USB webcam detected. [ 2403.976278][ T5967] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2403.995555][ T5967] pwc: recv_control_msg error -32 req 02 val 2700 [ 2404.441901][ T5967] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2405.095525][ T5967] pwc: recv_control_msg error -71 req 04 val 1000 [ 2405.102500][ T5967] pwc: recv_control_msg error -71 req 04 val 1300 [ 2405.121158][ T5967] pwc: recv_control_msg error -71 req 04 val 1400 [ 2405.134363][ T5967] pwc: recv_control_msg error -71 req 02 val 2000 [ 2405.141191][ T5967] pwc: recv_control_msg error -71 req 02 val 2100 [ 2405.148424][ T5967] pwc: recv_control_msg error -71 req 04 val 1500 [ 2405.155746][ T5967] pwc: recv_control_msg error -71 req 02 val 2500 [ 2405.162854][ T5967] pwc: recv_control_msg error -71 req 02 val 2400 [ 2405.244166][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 2405.305002][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 2405.348479][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 2405.393626][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 2405.501873][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 2405.510341][ T5967] pwc: Registered as video103. [ 2405.535201][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input90 [ 2406.290196][ T5967] usb 4-1: USB disconnect, device number 124 [ 2406.326765][ T6336] nbd: must specify at least one socket [ 2406.684071][ T2750] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2406.876522][ T2750] usb 1-1: Using ep0 maxpacket: 8 [ 2406.899530][ T2750] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2406.930764][ T2750] usb 1-1: config 7 has an invalid interface number: 59 but max is 0 [ 2406.949696][ T2750] usb 1-1: config 7 has no interface number 0 [ 2406.967163][ T2750] usb 1-1: config 7 interface 59 has no altsetting 0 [ 2407.130340][T21912] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2407.144210][ T2750] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2407.176210][ T2750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.201108][ T2750] usb 1-1: Product: syz [ 2407.211751][ T2750] usb 1-1: Manufacturer: syz [ 2407.231784][ T2750] usb 1-1: SerialNumber: syz [ 2407.314770][T21912] usb 6-1: Using ep0 maxpacket: 8 [ 2407.336714][T21912] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2407.366237][T21912] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2407.398156][T21912] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2407.420012][T21912] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2407.496791][T21912] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2407.528360][T21912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2407.792584][T21912] usb 6-1: GET_CAPABILITIES returned 0 [ 2407.803686][T21912] usbtmc 6-1:16.0: can't read capabilities [ 2407.821830][ T2750] kobil_sct 1-1:7.59: KOBIL USB smart card terminal converter detected [ 2407.851898][ T2750] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2407.885852][ T2750] usb 1-1: USB disconnect, device number 32 [ 2408.791098][ T2750] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2408.815660][ T2750] kobil_sct 1-1:7.59: device disconnected [ 2408.853073][T17353] usb 6-1: USB disconnect, device number 123 [ 2409.608628][ T6414] netlink: 'syz.2.7590': attribute type 1 has an invalid length. [ 2409.616461][ T6414] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7590'. [ 2409.685944][ T6411] netlink: 'syz.2.7590': attribute type 2 has an invalid length. [ 2409.694903][ T6411] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.7590'. [ 2409.846641][ T30] audit: type=1400 audit(1737581684.837:1669): avc: denied { append } for pid=6426 comm="syz.2.7593" name="pfkey" dev="proc" ino=4026534496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2409.872230][ T30] audit: type=1400 audit(1737581684.846:1670): avc: denied { listen } for pid=6426 comm="syz.2.7593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2409.907996][T22254] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2410.002417][ T6440] trusted_key: encrypted_key: keyword 'efault' not recognized [ 2410.044528][T29755] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2410.182664][T22254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2410.193852][T22254] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 2410.202964][T22254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.212475][T22254] usb 4-1: config 0 descriptor?? [ 2410.212525][ T5836] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2410.297638][T17353] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2410.468827][T17353] usb 6-1: Using ep0 maxpacket: 16 [ 2410.521210][T17353] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2410.595154][T17353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.679598][T29755] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2410.683292][T17353] usb 6-1: config 0 descriptor?? [ 2410.692935][T29755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.701557][T29755] usb 1-1: Product: syz [ 2410.715016][T29755] usb 1-1: Manufacturer: syz [ 2410.719621][T29755] usb 1-1: SerialNumber: syz [ 2410.721694][T17353] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2410.736890][T29755] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2410.752684][ T5914] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2410.833581][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2410.843923][ T5836] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2410.853009][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.863491][ T5836] usb 3-1: config 0 descriptor?? [ 2410.871787][ T5836] pwc: Askey VC010 type 2 USB webcam detected. [ 2410.910820][T29755] usb 4-1: USB disconnect, device number 125 [ 2411.213903][ T6422] overlayfs: missing 'lowerdir' [ 2411.264778][T29755] usb 1-1: USB disconnect, device number 33 [ 2411.307705][ T5836] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2411.352129][ T5836] pwc: recv_control_msg error -32 req 02 val 2700 [ 2411.366910][ T5836] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2411.901538][ T5914] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2411.972561][ T5914] ath9k_htc: Failed to initialize the device [ 2411.981173][T29755] usb 1-1: ath9k_htc: USB layer deinitialized [ 2411.997565][T17353] gspca_sonixj: reg_r err -110 [ 2412.002704][T17353] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 2412.076974][ T6485] binder: 6441:6485 ioctl 4018620d 0 returned -22 [ 2412.092195][T17353] usb 6-1: USB disconnect, device number 124 [ 2413.013012][T29755] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 2413.218366][ T5836] pwc: recv_control_msg error -71 req 04 val 1000 [ 2413.229432][ T5836] pwc: recv_control_msg error -71 req 04 val 1300 [ 2413.242455][ T5836] pwc: recv_control_msg error -71 req 04 val 1400 [ 2413.273436][ T5836] pwc: recv_control_msg error -71 req 02 val 2000 [ 2413.295890][ T5836] pwc: recv_control_msg error -71 req 02 val 2100 [ 2413.303926][ T5836] pwc: recv_control_msg error -71 req 04 val 1500 [ 2413.312814][ T5836] pwc: recv_control_msg error -71 req 02 val 2500 [ 2413.319880][T29755] usb 1-1: not running at top speed; connect to a high speed hub [ 2413.328145][ T5836] pwc: recv_control_msg error -71 req 02 val 2400 [ 2413.343039][T29755] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2413.353472][ T5836] pwc: recv_control_msg error -71 req 02 val 2600 [ 2413.372906][T29755] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2413.385111][ T5836] pwc: recv_control_msg error -71 req 02 val 2900 [ 2413.415877][ T5836] pwc: recv_control_msg error -71 req 02 val 2800 [ 2413.436190][T29755] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2414.230941][T29755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.239325][ T5836] pwc: recv_control_msg error -71 req 04 val 1100 [ 2414.247020][T29755] usb 1-1: Product: syz [ 2414.251283][ T5836] pwc: recv_control_msg error -71 req 04 val 1200 [ 2414.257911][T29755] usb 1-1: Manufacturer: syz [ 2414.262551][T29755] usb 1-1: SerialNumber: syz [ 2414.268827][ T5836] pwc: Registered as video103. [ 2414.276425][ T5836] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input91 [ 2414.311385][ T5836] usb 3-1: USB disconnect, device number 122 [ 2414.439240][ T6536] FAULT_INJECTION: forcing a failure. [ 2414.439240][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 2414.452112][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.2.7607 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 2414.452135][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2414.452145][ T6536] Call Trace: [ 2414.452151][ T6536] [ 2414.452157][ T6536] dump_stack_lvl+0x16c/0x1f0 [ 2414.452186][ T6536] should_fail_ex+0x512/0x640 [ 2414.452216][ T6536] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2414.452237][ T6536] should_failslab+0xc2/0x120 [ 2414.452257][ T6536] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2414.452275][ T6536] ? __alloc_skb+0x2b2/0x380 [ 2414.452301][ T6536] __alloc_skb+0x2b2/0x380 [ 2414.452322][ T6536] ? __pfx___alloc_skb+0x10/0x10 [ 2414.452345][ T6536] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2414.452367][ T6536] netlink_alloc_large_skb+0x69/0x130 [ 2414.452385][ T6536] netlink_sendmsg+0x6a1/0xdd0 [ 2414.452413][ T6536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2414.452447][ T6536] ____sys_sendmsg+0xa98/0xc70 [ 2414.452466][ T6536] ? lockdep_hardirqs_on+0x7c/0x110 [ 2414.452487][ T6536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2414.452506][ T6536] ___sys_sendmsg+0x134/0x1d0 [ 2414.452523][ T6536] ? __pfx____sys_sendmsg+0x10/0x10 [ 2414.452568][ T6536] __sys_sendmsg+0x16d/0x220 [ 2414.452592][ T6536] ? __pfx___sys_sendmsg+0x10/0x10 [ 2414.452614][ T6536] ? sched_clock_cpu+0x6c/0x530 [ 2414.452638][ T6536] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 2414.452658][ T6536] do_syscall_64+0xcd/0x4c0 [ 2414.452676][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2414.452688][ T6536] RIP: 0033:0x7fd2a4d8eb69 [ 2414.452703][ T6536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2414.452720][ T6536] RSP: 002b:00007fd2a2bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2414.452737][ T6536] RAX: ffffffffffffffda RBX: 00007fd2a4fb6080 RCX: 00007fd2a4d8eb69 [ 2414.452748][ T6536] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000d [ 2414.452758][ T6536] RBP: 00007fd2a2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2414.452768][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2414.452775][ T6536] R13: 0000000000000000 R14: 00007fd2a4fb6080 R15: 00007ffdee333be8 [ 2414.452790][ T6536] [ 2415.061797][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7606'. [ 2415.071072][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7606'. [ 2416.408860][T29755] usb 1-1: 0:2 : does not exist [ 2416.894411][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2417.497964][T29755] usb 1-1: USB disconnect, device number 34 [ 2418.136653][ T5967] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2418.320473][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 2418.333146][ T5967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2418.363308][ T5967] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2418.379540][ T5967] usb 3-1: config 7 has no interface number 0 [ 2418.407314][ T5967] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2418.420991][ T5967] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2418.441088][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2418.460061][ T5967] usb 3-1: Product: syz [ 2418.471153][ T5967] usb 3-1: Manufacturer: syz [ 2418.482699][ T5967] usb 3-1: SerialNumber: syz [ 2418.610350][ T30] audit: type=1400 audit(1737581693.068:1671): avc: denied { write } for pid=6596 comm="syz.5.7616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2419.605396][ T5967] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2419.654137][ T5967] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2419.734801][ T5967] usb 3-1: USB disconnect, device number 123 [ 2419.747390][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2419.765371][ T5967] kobil_sct 3-1:7.59: device disconnected [ 2420.220183][ T2750] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2420.754502][ T2750] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2420.769976][ T2750] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2420.884073][ T2750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2420.898514][ T2750] usb 1-1: config 0 descriptor?? [ 2420.911101][ T2750] pwc: Askey VC010 type 2 USB webcam detected. [ 2421.643679][ T2750] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2421.757587][ T2750] pwc: recv_control_msg error -32 req 02 val 2700 [ 2421.812729][ T2750] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2422.839724][ T6680] FAULT_INJECTION: forcing a failure. [ 2422.839724][ T6680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2423.147607][ T6680] CPU: 1 UID: 0 PID: 6680 Comm: syz.5.7626 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 2423.147634][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2423.147645][ T6680] Call Trace: [ 2423.147651][ T6680] [ 2423.147659][ T6680] dump_stack_lvl+0x16c/0x1f0 [ 2423.147690][ T6680] should_fail_ex+0x512/0x640 [ 2423.147721][ T6680] _copy_from_iter+0x29f/0x16f0 [ 2423.147742][ T6680] ? __alloc_skb+0x200/0x380 [ 2423.147769][ T6680] ? __pfx__copy_from_iter+0x10/0x10 [ 2423.147783][ T6680] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2423.147812][ T6680] netlink_sendmsg+0x829/0xdd0 [ 2423.147842][ T6680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2423.147876][ T6680] ____sys_sendmsg+0xa98/0xc70 [ 2423.147891][ T6680] ? copy_msghdr_from_user+0x10a/0x160 [ 2423.147907][ T6680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2423.147925][ T6680] ___sys_sendmsg+0x134/0x1d0 [ 2423.147942][ T6680] ? __pfx____sys_sendmsg+0x10/0x10 [ 2423.147988][ T6680] ? __mutex_unlock_slowpath+0x100/0x800 [ 2423.148021][ T6680] __sys_sendmsg+0x16d/0x220 [ 2423.148046][ T6680] ? __pfx___sys_sendmsg+0x10/0x10 [ 2423.148086][ T6680] do_syscall_64+0xcd/0x4c0 [ 2423.148113][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2423.148132][ T6680] RIP: 0033:0x7f5f8798eb69 [ 2423.148146][ T6680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2423.148161][ T6680] RSP: 002b:00007f5f888aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2423.148178][ T6680] RAX: ffffffffffffffda RBX: 00007f5f87bb5fa0 RCX: 00007f5f8798eb69 [ 2423.148188][ T6680] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 2423.148195][ T6680] RBP: 00007f5f888aa090 R08: 0000000000000000 R09: 0000000000000000 [ 2423.148201][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2423.148208][ T6680] R13: 0000000000000000 R14: 00007f5f87bb5fa0 R15: 00007ffe0c3ca798 [ 2423.148222][ T6680] [ 2423.351520][ C1] vkms_vblank_simulate: vblank timer overrun [ 2423.608323][ T6684] /dev/nullb0: Can't open blockdev [ 2423.669269][ T2750] pwc: recv_control_msg error -71 req 04 val 1000 [ 2423.693143][ T2750] pwc: recv_control_msg error -71 req 04 val 1300 [ 2423.731291][ T2750] pwc: recv_control_msg error -71 req 04 val 1400 [ 2423.850439][ T2750] pwc: recv_control_msg error -71 req 02 val 2000 [ 2423.883282][ T2750] pwc: recv_control_msg error -71 req 02 val 2100 [ 2423.901453][ T2750] pwc: recv_control_msg error -71 req 04 val 1500 [ 2424.003455][ T5914] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2424.232246][ T2750] pwc: recv_control_msg error -71 req 02 val 2500 [ 2424.257315][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 2424.299983][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2424.608459][ T2750] pwc: recv_control_msg error -71 req 02 val 2400 [ 2424.609115][ T5914] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2424.632236][ T5914] usb 3-1: config 7 has no interface number 0 [ 2424.639123][ T5914] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2424.651460][ T2750] pwc: recv_control_msg error -71 req 02 val 2600 [ 2424.653401][ T5914] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2424.666093][ T2750] pwc: recv_control_msg error -71 req 02 val 2900 [ 2424.679554][ T2750] pwc: recv_control_msg error -71 req 02 val 2800 [ 2424.698011][ T2750] pwc: recv_control_msg error -71 req 04 val 1100 [ 2424.704917][ T2750] pwc: recv_control_msg error -71 req 04 val 1200 [ 2424.717222][ T2750] pwc: Registered as video103. [ 2424.728284][ T2750] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input92 [ 2424.736317][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.816737][ T2750] usb 1-1: USB disconnect, device number 35 [ 2424.822850][ T5914] usb 3-1: Product: syz [ 2424.830781][ T5914] usb 3-1: Manufacturer: syz [ 2424.854367][ T5914] usb 3-1: SerialNumber: syz [ 2425.172529][ T5914] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2425.191898][ T5914] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2425.687520][ T5914] usb 3-1: USB disconnect, device number 124 [ 2425.706754][ T5914] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2425.729491][ T5914] kobil_sct 3-1:7.59: device disconnected [ 2427.553722][ T6765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7636'. [ 2427.778015][ T30] audit: type=1326 audit(1737581701.646:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.5.7634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f8798eb69 code=0x0 [ 2429.633127][ T30] audit: type=1400 audit(1737581703.301:1673): avc: denied { setopt } for pid=6797 comm="syz.0.7645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2429.947024][ T5914] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2430.001355][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7646'. [ 2430.160776][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 2430.170264][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2430.216302][ T5914] usb 6-1: config 7 has an invalid interface number: 59 but max is 0 [ 2430.227231][ T5914] usb 6-1: config 7 has no interface number 0 [ 2430.233521][ T5914] usb 6-1: config 7 interface 59 has no altsetting 0 [ 2430.296922][ T5914] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2430.308901][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.373397][ T5914] usb 6-1: Product: syz [ 2430.410574][ T5914] usb 6-1: Manufacturer: syz [ 2430.430753][ T5914] usb 6-1: SerialNumber: syz [ 2430.723849][ T5914] kobil_sct 6-1:7.59: KOBIL USB smart card terminal converter detected [ 2430.741834][ T5914] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2430.955834][ T5914] usb 6-1: USB disconnect, device number 125 [ 2430.973901][ T5914] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2430.984414][ T5914] kobil_sct 6-1:7.59: device disconnected [ 2431.096120][ T30] audit: type=1400 audit(1737581704.751:1674): avc: denied { write } for pid=6833 comm="syz.0.7648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2432.550233][ T6844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7650'. [ 2433.196753][ T5967] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2433.299278][ T6855] 9pnet_fd: Insufficient options for proto=fd [ 2433.378696][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 2433.394259][ T5967] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2433.421441][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2433.453812][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2433.463561][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2433.474549][ T6873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7655'. [ 2433.517291][ T6873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7655'. [ 2433.517773][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2433.543608][ T6873] netlink: 'syz.2.7655': attribute type 4 has an invalid length. [ 2433.562286][ T6874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7655'. [ 2433.606927][ T5967] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2433.645635][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2433.656393][ T5967] usb 1-1: Product: syz [ 2433.660566][ T5967] usb 1-1: Manufacturer: syz [ 2433.665155][ T5967] usb 1-1: SerialNumber: syz [ 2433.864877][ T5967] usb 1-1: config 0 descriptor?? [ 2434.000083][ T6888] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7657'. [ 2434.020738][ T6888] binder: BINDER_SET_CONTEXT_MGR already set [ 2434.028971][ T6888] binder: 6887:6888 ioctl 4018620d 2000000002c0 returned -16 [ 2434.042804][ T6888] netlink: 'syz.2.7657': attribute type 10 has an invalid length. [ 2434.052199][ T6888] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7657'. [ 2434.068026][ T6888] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.7657'. [ 2434.078135][ T6888] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 2434.309687][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7651'. [ 2434.847556][ T6906] gfs2: path_lookup on  returned error -2 [ 2434.868191][ T30] audit: type=1400 audit(1737581708.278:1675): avc: denied { setattr } for pid=6845 comm="syz.0.7651" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2435.000586][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 2435.007069][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.013334][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.061528][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7658'. [ 2435.070529][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7658'. [ 2435.103187][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.124224][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.145921][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.163003][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.178337][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.339711][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.369914][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.422831][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.436144][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.444932][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.451490][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.467525][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.658027][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.675590][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.956611][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.972098][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2435.985976][ T5967] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 2436.003580][ T5967] input input93: Timeout waiting for response from device. [ 2436.115279][T17353] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2436.275840][T17353] usb 4-1: Using ep0 maxpacket: 8 [ 2436.287941][T17353] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2436.330907][T17353] usb 4-1: config 7 has an invalid interface number: 59 but max is 0 [ 2436.339146][T17353] usb 4-1: config 7 has no interface number 0 [ 2436.420997][T17353] usb 4-1: config 7 interface 59 has no altsetting 0 [ 2436.430576][ T5967] usb 1-1: USB disconnect, device number 36 [ 2436.486748][T17353] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2436.496099][T17353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.504257][T17353] usb 4-1: Product: syz [ 2436.509360][T17353] usb 4-1: Manufacturer: syz [ 2436.715826][T17353] usb 4-1: SerialNumber: syz [ 2437.477123][ T6946] netlink: 'syz.0.7667': attribute type 16 has an invalid length. [ 2437.485204][ T6946] netlink: 'syz.0.7667': attribute type 17 has an invalid length. [ 2437.691807][T17353] kobil_sct 4-1:7.59: KOBIL USB smart card terminal converter detected [ 2437.704485][T17353] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2438.280858][T17353] usb 4-1: USB disconnect, device number 126 [ 2438.524110][ T6974] fuse: Bad value for 'fd' [ 2438.589109][T17353] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2438.604494][T17353] kobil_sct 4-1:7.59: device disconnected [ 2438.649011][ T5967] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2438.776770][ T6990] syz.3.7672: attempt to access beyond end of device [ 2438.776770][ T6990] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2438.791839][ T6990] syz.3.7672: attempt to access beyond end of device [ 2438.791839][ T6990] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2438.804110][ T5967] usb 3-1: device descriptor read/64, error -71 [ 2438.818372][ T6990] Mount JFS Failure: -5 [ 2438.831338][T29755] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2439.076563][T29755] usb 1-1: Using ep0 maxpacket: 16 [ 2439.875946][T29755] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2439.884367][T29755] usb 1-1: config 0 has no interface number 0 [ 2439.891264][T29755] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2439.903221][T29755] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2439.914524][T29755] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 2439.934660][T29755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2439.957802][ T5967] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2439.976526][T29755] usb 1-1: config 0 descriptor?? [ 2440.012330][ T7001] FAULT_INJECTION: forcing a failure. [ 2440.012330][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.047672][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.7.7675 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 2440.047701][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2440.047712][ T7001] Call Trace: [ 2440.047719][ T7001] [ 2440.047727][ T7001] dump_stack_lvl+0x16c/0x1f0 [ 2440.047758][ T7001] should_fail_ex+0x512/0x640 [ 2440.047785][ T7001] ? __kmalloc_noprof+0xbf/0x510 [ 2440.047809][ T7001] ? kernfs_fop_write_iter+0x237/0x510 [ 2440.047828][ T7001] should_failslab+0xc2/0x120 [ 2440.047849][ T7001] __kmalloc_noprof+0xd2/0x510 [ 2440.047873][ T7001] kernfs_fop_write_iter+0x237/0x510 [ 2440.047896][ T7001] vfs_write+0x6c4/0x1150 [ 2440.047915][ T7001] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2440.047936][ T7001] ? __pfx___mutex_lock+0x10/0x10 [ 2440.047962][ T7001] ? __pfx_vfs_write+0x10/0x10 [ 2440.047998][ T7001] ksys_write+0x12a/0x250 [ 2440.048015][ T7001] ? __pfx_ksys_write+0x10/0x10 [ 2440.048041][ T7001] do_syscall_64+0xcd/0x4c0 [ 2440.048069][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2440.048086][ T7001] RIP: 0033:0x7f40b758eb69 [ 2440.048101][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2440.048119][ T7001] RSP: 002b:00007f40b837a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2440.048136][ T7001] RAX: ffffffffffffffda RBX: 00007f40b77b5fa0 RCX: 00007f40b758eb69 [ 2440.048148][ T7001] RDX: 0000000000000012 RSI: 0000200000000300 RDI: 0000000000000003 [ 2440.048159][ T7001] RBP: 00007f40b837a090 R08: 0000000000000000 R09: 0000000000000000 [ 2440.048169][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2440.048179][ T7001] R13: 0000000000000000 R14: 00007f40b77b5fa0 R15: 00007ffdffd424d8 [ 2440.048204][ T7001] [ 2440.225636][ C0] vkms_vblank_simulate: vblank timer overrun [ 2440.338051][ T5967] usb 3-1: device descriptor read/64, error -71 [ 2440.456045][ T5967] usb usb3-port1: attempt power cycle [ 2440.585949][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7677'. [ 2440.597558][ T7016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2440.620891][T29755] usbhid 1-1:0.1: can't add hid device: -71 [ 2440.629382][T29755] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 2440.655378][T29755] usb 1-1: USB disconnect, device number 37 [ 2440.872617][ T5967] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2441.666559][ T5967] usb 3-1: device not accepting address 127, error -71 [ 2441.717403][ T7010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2442.622711][ T5967] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2442.723161][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 2442.742639][ T5967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2442.754997][ T5967] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2442.763415][ T5967] usb 3-1: config 7 has no interface number 0 [ 2442.817426][ T5967] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2443.099826][ T5967] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2443.129321][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.139314][ T5967] usb 3-1: Product: syz [ 2443.154412][ T5967] usb 3-1: Manufacturer: syz [ 2443.160756][ T5967] usb 3-1: SerialNumber: syz [ 2443.882979][ T5967] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2443.916227][ T5967] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2444.001286][ T5967] usb 3-1: USB disconnect, device number 2 [ 2444.096949][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2444.120956][ T5967] kobil_sct 3-1:7.59: device disconnected [ 2444.828915][ T7090] syz_tun: entered allmulticast mode [ 2444.999484][T29755] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2445.160809][T29755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2445.172428][T29755] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2445.181508][T29755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.190991][T29755] usb 3-1: config 0 descriptor?? [ 2445.198106][T29755] pwc: Askey VC010 type 2 USB webcam detected. [ 2445.691958][T29755] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2445.711127][T29755] pwc: recv_control_msg error -32 req 02 val 2700 [ 2445.729615][T29755] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2448.680015][T29755] pwc: recv_control_msg error -71 req 04 val 1000 [ 2448.711095][T29755] pwc: recv_control_msg error -71 req 04 val 1300 [ 2448.734430][T29755] pwc: recv_control_msg error -71 req 04 val 1400 [ 2449.117620][T29755] pwc: recv_control_msg error -71 req 02 val 2000 [ 2449.136201][T29755] pwc: recv_control_msg error -71 req 02 val 2100 [ 2449.157536][T29755] pwc: recv_control_msg error -71 req 04 val 1500 [ 2449.275990][T29755] pwc: recv_control_msg error -71 req 02 val 2500 [ 2449.297319][T29755] pwc: recv_control_msg error -71 req 02 val 2400 [ 2449.304295][T29755] pwc: recv_control_msg error -71 req 02 val 2600 [ 2449.314368][T29755] pwc: recv_control_msg error -71 req 02 val 2900 [ 2449.322443][T29755] pwc: recv_control_msg error -71 req 02 val 2800 [ 2449.329299][T29755] pwc: recv_control_msg error -71 req 04 val 1100 [ 2449.336042][T29755] pwc: recv_control_msg error -71 req 04 val 1200 [ 2449.361274][T29755] pwc: Registered as video103. [ 2449.386288][T29755] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input94 [ 2449.427973][T29755] usb 3-1: USB disconnect, device number 3 [ 2449.574728][ T5914] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2449.756920][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 2449.776550][ T5914] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2449.844541][ T5914] usb 1-1: config 7 has an invalid interface number: 59 but max is 0 [ 2449.857485][ T5914] usb 1-1: config 7 has no interface number 0 [ 2449.864242][ T5914] usb 1-1: config 7 interface 59 has no altsetting 0 [ 2449.882713][ T5914] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2449.892369][T29755] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2449.900563][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.911516][ T5914] usb 1-1: Product: syz [ 2449.916255][ T5914] usb 1-1: Manufacturer: syz [ 2449.921386][ T5914] usb 1-1: SerialNumber: syz [ 2450.066674][T29755] usb 3-1: Using ep0 maxpacket: 8 [ 2450.078999][T29755] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2450.091764][T29755] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 2450.099996][T29755] usb 3-1: config 7 has no interface number 0 [ 2450.106537][T29755] usb 3-1: config 7 interface 59 has no altsetting 0 [ 2450.116775][T29755] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2450.126260][T29755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.135270][T29755] usb 3-1: Product: syz [ 2450.139627][T29755] usb 3-1: Manufacturer: syz [ 2450.144686][T29755] usb 3-1: SerialNumber: syz [ 2450.221379][ T5914] kobil_sct 1-1:7.59: KOBIL USB smart card terminal converter detected [ 2450.254785][ T5914] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2450.281491][ T5914] usb 1-1: USB disconnect, device number 38 [ 2450.436860][ T5914] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2450.645566][T29755] kobil_sct 3-1:7.59: KOBIL USB smart card terminal converter detected [ 2450.655039][ T5914] kobil_sct 1-1:7.59: device disconnected [ 2450.684744][T29755] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2450.703031][T29755] usb 3-1: USB disconnect, device number 4 [ 2450.714036][T29755] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2450.726667][T29755] kobil_sct 3-1:7.59: device disconnected [ 2451.343414][ T7223] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7704'. [ 2451.659801][ T5967] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2452.023807][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2452.039104][ T5967] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2452.048279][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.210230][ T5967] usb 3-1: config 0 descriptor?? [ 2452.218892][ T5967] pwc: Askey VC010 type 2 USB webcam detected. [ 2452.328883][ T7246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2452.335399][ T7246] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2452.375815][ T7246] vhci_hcd vhci_hcd.0: Device attached [ 2452.394791][ T7254] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 2452.401403][ T7254] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2452.414652][ T7254] vhci_hcd vhci_hcd.0: Device attached [ 2452.568932][T22254] vhci_hcd: vhci_device speed not set [ 2452.643192][T22254] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 2452.658288][ T5967] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2452.672516][ T5967] pwc: recv_control_msg error -32 req 02 val 2700 [ 2452.774272][ T5967] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2452.835614][T17353] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 2453.669287][T17353] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 2453.681325][T17353] usb 4-1: config 0 has no interface number 0 [ 2453.687439][T17353] usb 4-1: config 0 interface 29 has no altsetting 0 [ 2453.699837][T17353] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 2454.087381][T17353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.135708][T17353] usb 4-1: Product: syz [ 2454.157473][T17353] usb 4-1: Manufacturer: syz [ 2454.173442][T17353] usb 4-1: SerialNumber: syz [ 2454.205965][T17353] usb 4-1: config 0 descriptor?? [ 2454.353668][ T2750] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2454.476756][T17353] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2454.545946][ T2750] usb 1-1: Using ep0 maxpacket: 8 [ 2454.561564][ T2750] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2454.577686][ T2750] usb 1-1: config 7 has an invalid interface number: 59 but max is 0 [ 2454.600461][ T2750] usb 1-1: config 7 has no interface number 0 [ 2454.615209][ T2750] usb 1-1: config 7 interface 59 has no altsetting 0 [ 2454.635667][ T5967] pwc: recv_control_msg error -71 req 04 val 1000 [ 2454.689587][ T5967] pwc: recv_control_msg error -71 req 04 val 1300 [ 2454.699805][ T2750] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 2454.746267][ T5967] pwc: recv_control_msg error -71 req 04 val 1400 [ 2454.752881][ T2750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.776127][ T5967] pwc: recv_control_msg error -71 req 02 val 2000 [ 2454.784627][ T2750] usb 1-1: Product: syz [ 2454.787485][ T7294] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2454.793007][ T2750] usb 1-1: Manufacturer: syz [ 2454.801456][ T5967] pwc: recv_control_msg error -71 req 02 val 2100 [ 2454.808423][T17353] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 2454.822581][T17353] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 2454.830700][ T2750] usb 1-1: SerialNumber: syz [ 2454.840703][ T5967] pwc: recv_control_msg error -71 req 04 val 1500 [ 2454.848594][T17353] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 2454.856108][ T5967] pwc: recv_control_msg error -71 req 02 val 2500 [ 2454.870980][ T5967] pwc: recv_control_msg error -71 req 02 val 2400 [ 2454.888221][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 2454.913945][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 2454.946918][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 2454.958006][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 2454.965082][T17353] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 2454.983387][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 2455.002617][ T5967] pwc: Registered as video103. [ 2455.015901][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input95 [ 2455.039504][ T5967] usb 3-1: USB disconnect, device number 5 [ 2455.075515][ T30] audit: type=1400 audit(1737581727.173:1676): avc: denied { map } for pid=7308 comm="syz.2.7717" path="socket:[135193]" dev="sockfs" ino=135193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2455.076087][ T5914] usb 4-1: USB disconnect, device number 127 [ 2455.121240][ T2750] kobil_sct 1-1:7.59: KOBIL USB smart card terminal converter detected [ 2455.124956][ T7255] vhci_hcd: connection closed [ 2455.133847][ T7252] vhci_hcd: connection reset by peer [ 2455.137812][ T30] audit: type=1400 audit(1737581727.201:1677): avc: denied { read } for pid=7308 comm="syz.2.7717" path="socket:[135193]" dev="sockfs" ino=135193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2455.155719][ T1253] vhci_hcd: stop threads [ 2455.187078][ T2750] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2455.188835][ T1253] vhci_hcd: release socket [ 2455.206737][ T2750] usb 1-1: USB disconnect, device number 39 [ 2455.217582][ T2750] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2455.230433][ T1253] vhci_hcd: disconnect device [ 2455.235862][ T1253] vhci_hcd: stop threads [ 2455.240110][ T1253] vhci_hcd: release socket [ 2455.245264][ T2750] kobil_sct 1-1:7.59: device disconnected [ 2455.251711][ T1253] vhci_hcd: disconnect device [ 2456.087468][ T7345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2457.269790][ T7353] wlan0 speed is unknown, defaulting to 1000 [ 2457.398462][ T7365] netlink: 'syz.3.7723': attribute type 4 has an invalid length. [ 2457.408570][ T7353] lo speed is unknown, defaulting to 1000 [ 2457.415833][ T7353] lo speed is unknown, defaulting to 1000 [ 2457.945457][ T2750] lo speed is unknown, defaulting to 1000 [ 2457.957315][ T2750] sz1: Port: 1 Link DOWN [ 2457.967863][ T2750] lo speed is unknown, defaulting to 1000 [ 2457.968668][ T7365] netlink: 'syz.3.7723': attribute type 4 has an invalid length. [ 2458.007557][T29755] lo speed is unknown, defaulting to 1000 [ 2458.016933][T29755] sz1: Port: 1 Link ACTIVE [ 2458.028998][T17847] lo speed is unknown, defaulting to 1000 [ 2458.075749][T22254] vhci_hcd: vhci_device speed not set [ 2488.116555][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2589.429163][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2589.436128][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7353/1:b..l P17353/1:b..l [ 2589.445762][ C1] rcu: (detected by 1, t=10502 jiffies, g=188361, q=614 ncpus=2) [ 2589.453538][ C1] task:kworker/0:1 state:R running task stack:22200 pid:17353 tgid:17353 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2589.468068][ C1] Workqueue: events_power_efficient gc_worker [ 2589.474134][ C1] Call Trace: [ 2589.477387][ C1] [ 2589.480306][ C1] __schedule+0x1190/0x5de0 [ 2589.484785][ C1] ? find_held_lock+0x2b/0x80 [ 2589.489443][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2589.495228][ C1] ? __pfx___schedule+0x10/0x10 [ 2589.500071][ C1] ? mark_held_locks+0x49/0x80 [ 2589.504823][ C1] preempt_schedule_irq+0x51/0x90 [ 2589.509836][ C1] irqentry_exit+0x36/0x90 [ 2589.514237][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2589.520195][ C1] RIP: 0010:gc_worker+0x2d5/0x16e0 [ 2589.525282][ C1] Code: 00 00 48 c7 c7 a8 97 ab 90 e8 b7 96 de f7 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 35 61 02 f8 58 48 85 db 0f 85 d4 0f 00 00 b6 65 02 f8 8b 1d e0 6a f2 06 41 89 dc 31 ff 41 83 e4 01 44 89 [ 2589.544876][ C1] RSP: 0018:ffffc90003807b58 EFLAGS: 00000293 [ 2589.550933][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89b937f9 [ 2589.558893][ C1] RDX: ffff888030f94880 RSI: ffffffff89b93808 RDI: 0000000000000007 [ 2589.566837][ C1] RBP: ffffffff9b2ba46c R08: 0000000000000007 R09: 0000000000000000 [ 2589.574780][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024800000 [ 2589.582736][ C1] R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001770 [ 2589.590686][ C1] ? gc_worker+0xe19/0x16e0 [ 2589.595178][ C1] ? gc_worker+0xe28/0x16e0 [ 2589.599670][ C1] ? gc_worker+0xe28/0x16e0 [ 2589.604145][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 2589.609758][ C1] ? __pfx_gc_worker+0x10/0x10 [ 2589.614505][ C1] ? rcu_is_watching+0x12/0xc0 [ 2589.619244][ C1] process_one_work+0x9cf/0x1b70 [ 2589.624160][ C1] ? __pfx_br_fdb_cleanup+0x10/0x10 [ 2589.629335][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2589.634685][ C1] ? assign_work+0x1a0/0x250 [ 2589.639247][ C1] worker_thread+0x6c8/0xf10 [ 2589.643814][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2589.648899][ C1] kthread+0x3c2/0x780 [ 2589.652950][ C1] ? __pfx_kthread+0x10/0x10 [ 2589.657511][ C1] ? rcu_is_watching+0x12/0xc0 [ 2589.662250][ C1] ? __pfx_kthread+0x10/0x10 [ 2589.666810][ C1] ret_from_fork+0x5d7/0x6f0 [ 2589.671371][ C1] ? __pfx_kthread+0x10/0x10 [ 2589.675932][ C1] ret_from_fork_asm+0x1a/0x30 [ 2589.680676][ C1] [ 2589.683667][ C1] task:syz.5.7721 state:R running task stack:26360 pid:7353 tgid:7350 ppid:29178 task_flags:0x400140 flags:0x00004002 [ 2589.697106][ C1] Call Trace: [ 2589.700360][ C1] [ 2589.703265][ C1] __schedule+0x1190/0x5de0 [ 2589.707756][ C1] ? __pfx___schedule+0x10/0x10 [ 2589.712578][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2589.717497][ C1] ? mark_held_locks+0x49/0x80 [ 2589.722238][ C1] preempt_schedule_irq+0x51/0x90 [ 2589.727235][ C1] irqentry_exit+0x36/0x90 [ 2589.731624][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2589.737585][ C1] RIP: 0010:unwind_next_frame+0xdd4/0x20a0 [ 2589.743365][ C1] Code: 00 00 00 fc ff df 48 c1 e8 03 0f b6 34 10 49 8d 40 01 48 89 c7 48 c1 ef 03 0f b6 14 17 4c 89 c7 83 e7 07 40 38 fe 40 0f 9e c7 <40> 84 f6 40 0f 95 c6 40 84 f7 0f 85 dc 11 00 00 83 e0 07 38 c2 40 [ 2589.762943][ C1] RSP: 0018:ffffc9000ff8f268 EFLAGS: 00000297 [ 2589.768983][ C1] RAX: ffffffff914250ef RBX: 0000000000000001 RCX: ffffffff914250ea [ 2589.776938][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2589.784879][ C1] RBP: ffffc9000ff8f320 R08: ffffffff914250ee R09: 0000000000000000 [ 2589.792831][ C1] R10: 0000000000000004 R11: 00000000000085b3 R12: ffffc9000ff8f328 [ 2589.800783][ C1] R13: ffffc9000ff8f2d8 R14: ffffc9000ff8fe28 R15: ffffc9000ff8f30c [ 2589.808734][ C1] ? unwind_next_frame+0xd10/0x20a0 [ 2589.813907][ C1] ? create_new_namespaces+0x3ea/0xa90 [ 2589.819343][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2589.825479][ C1] arch_stack_walk+0x94/0x100 [ 2589.830130][ C1] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2589.835913][ C1] stack_trace_save+0x8e/0xc0 [ 2589.840566][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2589.845913][ C1] ? kasan_save_stack+0x42/0x60 [ 2589.850734][ C1] ? kasan_save_stack+0x33/0x60 [ 2589.855555][ C1] ? kasan_save_track+0x14/0x30 [ 2589.860384][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 2589.865117][ C1] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 2589.871676][ C1] ? kstrdup+0x53/0x100 [ 2589.875803][ C1] kasan_save_stack+0x33/0x60 [ 2589.880451][ C1] ? kasan_save_stack+0x33/0x60 [ 2589.885284][ C1] ? kasan_save_track+0x14/0x30 [ 2589.890105][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 2589.895099][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 2589.900713][ C1] ? __kernfs_new_node+0xd2/0x8e0 [ 2589.905710][ C1] ? kernfs_new_node+0x13c/0x1e0 [ 2589.910636][ C1] ? __kernfs_create_file+0x53/0x350 [ 2589.915892][ C1] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 2589.921408][ C1] ? internal_create_group+0x578/0xf30 [ 2589.926838][ C1] ? internal_create_groups+0x9d/0x150 [ 2589.932269][ C1] ? ib_setup_port_attrs+0x41f/0x600 [ 2589.937538][ C1] ? add_one_compat_dev+0x558/0x7d0 [ 2589.942712][ C1] ? rdma_dev_init_net+0x2b1/0x530 [ 2589.947802][ C1] ? ops_init+0x1e2/0x5f0 [ 2589.952106][ C1] ? setup_net+0x10f/0x380 [ 2589.956495][ C1] ? copy_net_ns+0x2a6/0x5f0 [ 2589.961055][ C1] ? create_new_namespaces+0x3ea/0xa90 [ 2589.966504][ C1] kasan_save_track+0x14/0x30 [ 2589.971156][ C1] __kasan_slab_alloc+0x89/0x90 [ 2589.975979][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 2589.981406][ C1] ? __asan_memcpy+0x3c/0x60 [ 2589.985971][ C1] ? __kernfs_new_node+0xd2/0x8e0 [ 2589.990971][ C1] __kernfs_new_node+0xd2/0x8e0 [ 2589.995802][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 2590.001241][ C1] ? find_held_lock+0x2b/0x80 [ 2590.005894][ C1] ? kernfs_root+0xee/0x2a0 [ 2590.010373][ C1] kernfs_new_node+0x13c/0x1e0 [ 2590.015112][ C1] ? irqentry_exit_to_user_mode+0x1d0/0x270 [ 2590.020983][ C1] __kernfs_create_file+0x53/0x350 [ 2590.026080][ C1] sysfs_add_file_mode_ns+0x207/0x3c0 [ 2590.031428][ C1] internal_create_group+0x578/0xf30 [ 2590.036692][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 2590.042470][ C1] ? __pfx_kobject_add+0x10/0x10 [ 2590.047382][ C1] internal_create_groups+0x9d/0x150 [ 2590.052642][ C1] ib_setup_port_attrs+0x41f/0x600 [ 2590.057742][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 2590.063363][ C1] ? __init_waitqueue_head+0xca/0x150 [ 2590.068709][ C1] add_one_compat_dev+0x558/0x7d0 [ 2590.073725][ C1] rdma_dev_init_net+0x2b1/0x530 [ 2590.078633][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 2590.084062][ C1] ? trace_kmalloc+0x2b/0xd0 [ 2590.088628][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 2590.094057][ C1] ops_init+0x1e2/0x5f0 [ 2590.098191][ C1] setup_net+0x10f/0x380 [ 2590.102409][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 2590.107751][ C1] ? __pfx_setup_net+0x10/0x10 [ 2590.112490][ C1] ? debug_mutex_init+0x37/0x70 [ 2590.117314][ C1] copy_net_ns+0x2a6/0x5f0 [ 2590.121701][ C1] create_new_namespaces+0x3ea/0xa90 [ 2590.126963][ C1] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2590.132572][ C1] ksys_unshare+0x45b/0xa40 [ 2590.137056][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 2590.142067][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2590.148021][ C1] __x64_sys_unshare+0x31/0x40 [ 2590.152762][ C1] do_syscall_64+0xcd/0x4c0 [ 2590.157242][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2590.163125][ C1] RIP: 0033:0x7f5f8798eb69 [ 2590.167509][ C1] RSP: 002b:00007f5f88889038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2590.175890][ C1] RAX: ffffffffffffffda RBX: 00007f5f87bb6080 RCX: 00007f5f8798eb69 [ 2590.183834][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040000 [ 2590.191776][ C1] RBP: 00007f5f87a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 2590.199716][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2590.207657][ C1] R13: 0000000000000000 R14: 00007f5f87bb6080 R15: 00007ffe0c3ca798 [ 2590.215606][ C1]