last executing test programs: 23m4.300973814s ago: executing program 1 (id=130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) syz_io_uring_setup(0x4, &(0x7f0000000580), &(0x7f0000000080), 0x0) r5 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(r4, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f0000000080)="8c", 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2, r3}]) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x50}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7", 0x7b}, {&(0x7f0000000300)}], 0x4}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6690000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x20, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r10, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, &(0x7f0000000000), 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="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", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}, &(0x7f0000000380)=0x40) 23m3.632298612s ago: executing program 1 (id=133): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) unshare(0xc040480) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000080)=0xa) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x4}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) unshare(0xc040480) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x4) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000080)=0xa) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x4}) (async) 23m3.41807144s ago: executing program 1 (id=134): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d", 0x24) 23m3.384812245s ago: executing program 1 (id=135): r0 = fsopen(&(0x7f0000000280)='ntfs\x00', 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x1f00}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000100)='::,:/', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000240)='./file0/file0\x00', 0x272) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) 23m3.22252793s ago: executing program 1 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r4, 0xd, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sched_setscheduler(0x0, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x4000814) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r7, 0x8004745a, 0x0) 23m2.860587861s ago: executing program 1 (id=137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) 23m2.60867317s ago: executing program 32 (id=137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) 11m45.219066911s ago: executing program 4 (id=2432): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) (async) r2 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) (async) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) recvfrom$inet6(r0, &(0x7f0000000200)=""/165, 0xa5, 0x10000, &(0x7f0000000080)={0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x88080, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000140)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @remote, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0xff000000, 0xffffff00], 'macvtap0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x5c, 0x1f, 0x5, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x75, '\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @local, [0xff000000], [0x0, 0x0, 0xff, 0xffffff00], 'veth1\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'xfrm0\x00', {0xe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 11m44.091428775s ago: executing program 3 (id=2436): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xf88e470f}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000180)) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) 11m44.025752909s ago: executing program 4 (id=2438): close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000580)={@private2, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000000, 0x0, 0x6d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x400, 0x4000000000000009, 0x10200}) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000115, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x80000) fsetxattr(r5, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0, 0x3) mkdir(0x0, 0x0) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r6, &(0x7f0000000040)="0600", 0x2) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r6, r6, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000280)=[{}, {0x5, 0x7, 0x8b, 0x4}, {0x1, 0x8, 0x3e, 0x2cc}]}, 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x5411, 0x1000000000000) 11m42.839788432s ago: executing program 4 (id=2440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00'}, 0x18) socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) syslog(0x3, &(0x7f0000003640)=""/95, 0x5f) 11m41.881701954s ago: executing program 3 (id=2441): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/218, 0xda}, {0x0, 0x20}], 0x2) getpriority(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x8080) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r6 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000030000000000000000000000000000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe4]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r8, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c0875}, 0xc000) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x33, 0x1, [{0xfe, 0x80000000}]}}) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1, 0x70bd26}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11m41.87115042s ago: executing program 4 (id=2442): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000deb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000dea000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ca6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x1fffffffffffffd, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x0, 0xfb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m41.743727827s ago: executing program 4 (id=2444): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r0, 0x0, 0x0, 0x0) 11m41.477142799s ago: executing program 4 (id=2447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x111, 0x4000002, 0x0, 0x0) 11m40.984459804s ago: executing program 33 (id=2447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x111, 0x4000002, 0x0, 0x0) 11m40.757992346s ago: executing program 3 (id=2451): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00006c4000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x40000000, 0x1, 0x101, 0x0}) 11m39.981766448s ago: executing program 3 (id=2453): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) tee(r1, 0xffffffffffffffff, 0xbfff, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mkdir(0x0, 0x54) chdir(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) bind$bt_hci(r2, &(0x7f0000000480)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="3b000000010002", 0x7) 11m39.329628583s ago: executing program 3 (id=2456): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="2534f77d1744f933cfe4dda5bfb85c277268c0527c5dc8d0d9357c", @ANYBLOB="c139209259b991c2ed8e3e6a8098538beedc4e1cb6ebd58c36f6a867fb7551e49fd874e69f8879d33127c4ddbf13cdcfb4b18aabc282f6c532948b06daf3afbe50ed57374bc8587aa851da523f96f2d020ecdfaa7c2853ee941badf45f0f7b3af9d75406543adad2bf8915847a4b3ff7d193f052c3b23f1e2e4ca6d6", @ANYBLOB="fd84b0da104df6eb6e126c16f3c13fde14c18ff72b44233572d73996cd31b21b45b8779df5391b4ad3b9af605c95c48ab2f573108dc3f9ad682b864a2beffdda8ed6db1e8093e46be94376b88f3fd4", @ANYRESOCT=r2, @ANYBLOB="72121d407485de151d4758e77ae54c9619da45fcc5fbed779abf58a8dc14d9879d7cd5cfe98f782090bb2aa72e5d90ae7fd5530a3030f7e2ec3fc313fc544d3a0c1eb9f687703d11e3a9c4951ebe8b454a1b032b52651601da64a0dc6df03e8a6a10c5e42befd417d2dfd16774f5b32fccf4f8b4cc2f3775413cfb17cc00658d858a23e9102e", @ANYRES64=0x0, @ANYRESHEX=r0, @ANYBLOB="5e732e300bdeae2a3317a1a1f2323641219a4fb3440d94bbbab4e25906aaf656921a7f696cd37eeefe7a4b0219a85169fd13607f6b361a0e6e1ee86b3dcb94feab3857e4067cd323de6a93df3363fe77ea4bf95a3512fbd2eea11f2e069b79c00bd1f580b95382725bbc", @ANYRES8=r0], 0x509) close(r2) (async) close(r2) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) (async) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000002040)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 11m38.708619318s ago: executing program 3 (id=2457): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x4a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x4, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m37.751793637s ago: executing program 34 (id=2457): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x4a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x4, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m6.039916449s ago: executing program 0 (id=3357): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x4}}]}}]}, 0x3c}}, 0x4000010) memfd_create(&(0x7f0000000040)='/dev/sg#\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) write$char_usb(r0, &(0x7f0000000240)="3e7bc7158c3fe38a674391ab06e98db0e0b2e2b948174be9a3ac689fbfc6c925d3ea96e0bf4006079c5b9ebeb3bd1ff27a13dcc3189d1150a7a29cb05ef04f2f11e4bac434440d22a50bbbaf9cbec72ee6e5bf7271d58457300b1691afe19e693e31ea57a4c7e712edc4980614620a2a311a12382fde5e1137d38c4be5569464996ac691ccf4bd5da6093b442a44107c97f0ba14eba25bde352895096413a80bc96429", 0xa3) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x2c, 0xa, 0x0, "3ccfa4000000aafffffffff4dd4007400000e4000000adaf04008f097a8800", 0x31435750}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) 7m3.182774925s ago: executing program 0 (id=3361): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_TIOCOUTQ(r3, 0x5411, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x81) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{@fixed}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r7, 0x28, 0x0, 0x0, &(0x7f0000000080)=0xfffffffffffffe34) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r8, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 7m0.182289374s ago: executing program 0 (id=3370): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x3d21b000) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'sed\x00', 0x1, 0x4, 0x17}, 0x2c) socket$kcm(0xa, 0x2, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) lseek(r5, 0x9, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) (async) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 6m59.869881186s ago: executing program 0 (id=3371): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) timer_create(0x1, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r10 = ioctl$KVM_GET_STATS_FD_cpu(r9, 0xaece) getsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f00000002c0)={@initdev, 0x0}, &(0x7f0000000340)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r11, 0x25, 0x1f, @val=@uprobe_multi={&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=[0x81, 0x400], &(0x7f0000000400)=[0x1, 0x0, 0x1], 0x8, 0x2, 0x0, r3}}, 0x40) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008"], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4e82c41af04a82b80887c5ae"], 0x4) 6m58.937765559s ago: executing program 0 (id=3372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000c1ba0b2c575f35438ead2bb82f82d565905148e6781d933215e188503e544c618fa65b881225ba3f97f4653f0fc65343fe539dc9185a2fd620a478f7d39807966dfe541a9e53615276dea7d152c1e773a7334eae304ee9ecb0534bf84dde2e6581886f11ec08ad7bfd5a68980e8f3cb6013ab946b7000962f3c5ed7aa1bd4d1f5e571551e76da6bc3a01f2f0c0c1d9b87aff30ad", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r0}, 0x38) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x1, 0x7fff, 0x8, 0x8000005, 0x20, 0x99, 0xee}, &(0x7f0000000000)=0x9c) bind$llc(r6, &(0x7f0000000180)={0x1a, 0x20, 0x7, 0x96, 0x4, 0x9, @remote}, 0x10) 6m58.870627485s ago: executing program 0 (id=3373): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30202d303030301d303030303030303030313030ba5c302c75736916890e08b772febe20fd8d403ab11e643d000000", @ANYBLOB="c9bc52fb5119984249271d50b0129f7b07263da0fd564126cc89c3a1b71d453bc6e263c1954dbc86d110716102b904fbb744d1ec8df202abd7f2da6e5655ba32be42af03c9d90b20e40090f0145dd2b0a3015974b255a525c9ce63621823a8ea6f0205e8ef493a1cfe9896a81a331db46940d717b5b40d7ea8b761407db9186f171a955565ec96bb3099", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xe, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) r6 = dup3(r5, r0, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2, r4}) 6m43.79333215s ago: executing program 35 (id=3373): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30202d303030301d303030303030303030313030ba5c302c75736916890e08b772febe20fd8d403ab11e643d000000", @ANYBLOB="c9bc52fb5119984249271d50b0129f7b07263da0fd564126cc89c3a1b71d453bc6e263c1954dbc86d110716102b904fbb744d1ec8df202abd7f2da6e5655ba32be42af03c9d90b20e40090f0145dd2b0a3015974b255a525c9ce63621823a8ea6f0205e8ef493a1cfe9896a81a331db46940d717b5b40d7ea8b761407db9186f171a955565ec96bb3099", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xe, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) r6 = dup3(r5, r0, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2, r4}) 5m31.792916562s ago: executing program 6 (id=3691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x5ff6ca2b, 0x919e, 0x2, 0x6, 0xf, 0x5, 0x1, 0x35f}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffde6, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x1, 0x2}) r4 = socket(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r5, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x44e}], 0x1, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000000000003a00000008000300"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) creat(0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) 5m31.210154276s ago: executing program 6 (id=3693): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) r1 = socket(0x2, 0x2, 0x1) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4fe9}, 0x1c) 5m31.068228272s ago: executing program 6 (id=3694): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40480, 0x0) unshare(0x40400) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x7fffffffffffffff, 0x9}, 0x0, 0x0, 0x0, 0x0) 5m30.948756694s ago: executing program 6 (id=3695): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/276], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xf8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e74, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff2d76}, 0x1c) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, 0x0, &(0x7f00000010c0)=0x90) listen(r2, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[], 0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="80007f0a0a0002000080c2000003000008000f"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) close_range(r2, r2, 0x0) 5m30.496603328s ago: executing program 6 (id=3698): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x10000000, 0x0, {}, {0x0, 0x5, 0xffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) 5m30.109343474s ago: executing program 6 (id=3702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000340)=0x2) 5m29.589345215s ago: executing program 36 (id=3702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000340)=0x2) 10.00712349s ago: executing program 5 (id=5044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa42080049000024"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r5, 0x0, 0x0, 'syz1\x00', 0x0}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 9.327698978s ago: executing program 8 (id=5048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) accept4(r2, 0x0, &(0x7f00000001c0), 0x800) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r9, 0x1, 0x1}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x803, 0x0) 7.051143064s ago: executing program 5 (id=5052): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="6ddc4b9b236a761499809b03e6d6efe1c4abfb0b36075f29f4b20b0dea743c88bcac6f99282a0a1461001d2bbf15a673", 0x30, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000380), 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086", 0xb3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 6.866891307s ago: executing program 8 (id=5054): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) recvmmsg(r7, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000004f40)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000005040)=0xe8) (async) fstat(r2, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r9, &(0x7f0000005200)=[{{&(0x7f0000000340)=@file={0x0, './mnt/file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000400)="bb7f09f30bf3f6a5785f32fb35baa49dd6f75a164692c45ac5052446d4ff270f6bd7e61ba5aefe8c0c3864b695203b82fb89f1bed2ed50c63dc4eb66030d36951a5b7c983bbc9ba8d1ddd3cf454a4577ef599ad5231b8fe3248101858b6fddd7e769f57b8ae691f57110c3eeefaf248dad01700cbe2ad863c6347a930dca6082ef97e0355a53d7981bb5cea751d0fdba94b4e63f6255cc1bb7e29fbeffe80e34e241736f7a917fc2dc60bd3897ef91b7ab623354aa4cf21d58cc2c5b7578", 0xbe}, {&(0x7f0000000240)="3136af422a8fea8dadf5508d41363068719fe4ffe61e2eec459b31437eddc138", 0x20}, {&(0x7f00000002c0)="6e365fa6c1", 0x5}, {&(0x7f00000004c0)="ca6d106e931d8ec5e041a7a15a3935cc4864577d875cb31da98b175d36bb2a8248126ee1e5ab938e292154ff01ac0bc73064ea0a578c394ab4f5eae1bcce2e1e725a83664a27e44cc60d38593e812dfb5511978c9a8bf07e6e13ecb6f0604636293c9cbaaf36a0c5ef14ac441f18165284738cec2596bd91b92e9183c8d3be0bacc9acc61c81791b60d72825eb7f2c788f5c71440c60fe98a4228135a93c8d8a4d39f1ac841c12b869a4f809ba874f305f17802b2a05b338bfa09badd746aefc6ad3a5e193b90faa30aaaf09badd05f6fcd13bf43cd44cff5cb35fdd704411aa0c9c0c38cb567b296c6c58600a5c0a9adce445957c66", 0xf6}, {&(0x7f00000006c0)="ebafbc345dae2d2c2339ccfd691b9dfb8fa22c59564789bea8b79c918e5a74f010912f139e97c028692230316bb47eac921826ba43494afdeba0b64b39484c89faf23404360a83f966ec522378bcd03b23a4a8f422f2df29d3be00f5882bd087d79d391445505440d4bf99b28deafd9654f5640439289fb4d5fb573ab829abb9e6b925a452134b0d291063e37fac04237e895688ed19920ad3d9189e039d1fca5e64355d5036c198cade6ccdfd1fd186f5e9bef995a2919783cf0c0800b54e75054dca", 0xc3}, {&(0x7f0000000600)="947aa48f6f84c4dad7544f84c02fd8cb396b48ab8d4b89349991c2a021197dccf5a5215ee8f6ace10a2934162611ebd81f756d1ffbd0ab8cd67c44057316d8045b6bd99fd94963a522708f06669fd41bad153a571b0e70", 0x57}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}], 0x20, 0x11}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000b80)}, {&(0x7f0000000c00)="629e7525586619a318e264f67a744dc0fb65096373eb05c9defd9c65c30c3ddead4ed08680bb1cead41d1b0940de850c5c920d8bb0b4439c374bc43fb820bf9f2e0eea06aa4452d999de918764019c8703de4a70bbd0c99870e806e232e2645c3c28cc94713ba3258e6d0279b9a9c623bcf6c6d76403d6d3e078f83e1ca25e8b960b0a3902dbc883b2aae45726a1d46b6e6979ba5b52da011a4b1ad14dbf43eaf1dc3313ab9c4b56e0abee04859eb654691796355fac8f2fad6a53d73aca3bcd", 0xc0}, {&(0x7f0000000cc0)="8c6091ca0906e2bb12e2d9d7b01346e080a2c98b79376b54808b1b47edbff649ee05186a7433b34579128f3d5b3aad80ef4cdd30accaabe46ff4d5ef45dcd7078e263083336968c6cb7c16696356052f0ca9277221a3cd30dafbc73f344e53fa8408025b898eb9d4f0b548cc6db679873cce2b48677309b6adcbe0ff9f8a2887b2ac0f9d3a491956ee73cf46d08a062d5f73c940228526b40dcb6a75b360083ab54a5baa13fb150b77713948033058d6e2cfc857b196660330f40b2753394bd54027c466d698c37db9214a8c5acb90194253101f2beccda28d94a348a81c03", 0xdf}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000010000000100000a0000001791aabc6cf7081642e1633833bc02131020cfb9b5a87e75939ce45eaf86cd2aa562432c506efc695d8da47c887c8d8ee479219ce8dc3e049b00cf4d7bfba6919347e26fd0b2564f6d5647fa26be5c7b6cbe41edbd0d5f30c38d88a1ee42404647b680e9db6e849ed6b623c004b8e959df2195c47a1fd6", @ANYRES32=r7, @ANYRES32, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000001000000000000000010000000100000024000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x40000}}], 0x2, 0x640c0) r12 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r12, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) 6.827245511s ago: executing program 2 (id=5055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14, 0x4000}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 6.074169926s ago: executing program 8 (id=5058): mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs\x00', &(0x7f00000001c0), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setrlimit(0x7, &(0x7f0000000180)={0x5, 0x95}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) connect$netlink(r4, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newchain={0x44, 0x64, 0xa09, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x6, 0xffe0}, {0x7, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x50}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40040d0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000000)="240000001e005f800040000000000000ff000000000000000000080008000100000000ff", 0x24) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000380)=""/80, 0x401}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 6.060538931s ago: executing program 5 (id=5059): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00'/20, @ANYRES32=0x0, @ANYBLOB="01400200040206000400140008001e0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044081) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) syz_io_uring_setup(0xac9, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) open_tree(0xffffffffffffff9c, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x9d, @loopback}, @in={0x2, 0x4002, @broadcast}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {0x0, 0x4, r5, 0x30, 0x1, @in6={0xa, 0x4e23, 0x4b1, @mcast2, 0x685}}}, 0xa0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000010000000000000008f700b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x169d0000) 5.941650723s ago: executing program 7 (id=5060): syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0xfffffffe) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b20, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x7b3c, 0x10100, 0x0, 0x20}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040035000311feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x250, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x224, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xa, 0x5}}, @TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x214, 0x5, {0x6, 0x80, 0x20, 0x8, 0xc363, 0x6061, 0x707e, 0x6, [{0x1, 0x10001, 0xeb43, 0xff}, {0x7, 0x0, 0x8, 0x4d}, {0x4, 0xc4, 0x7, 0x10}, {0x5, 0x1, 0x19, 0xffffff82}, {0x401, 0x8, 0xfd7, 0x29}, {0x10001, 0x9, 0x3, 0x7f}, {0x1, 0x2, 0xd1f1, 0x1}, {0x655, 0x2, 0x7ff, 0x1f3}, {0x1000, 0xb, 0x7fc, 0x4}, {0x100, 0x5, 0x9, 0x8}, {0x57c, 0x7fff, 0x10000, 0xe}, {0x8, 0x10, 0x0, 0x83}, {0x400, 0x5, 0xba60, 0xa63}, {0x5, 0x677, 0xffffffff, 0x10}, {0x7, 0x1, 0x7, 0x10001}, {0x8, 0x2, 0x200, 0x741}, {0x10001, 0x3ff, 0x80, 0xffffffff}, {0x9, 0x1, 0x805, 0x76efab38}, {0x0, 0xffffffff, 0x1, 0x8001}, {0x7, 0x8, 0x1000, 0xff}, {0x4, 0x8, 0x75de, 0x3}, {0x98b, 0xa, 0x3, 0x6}, {0x2, 0x61d, 0x52ed, 0x9}, {0x9, 0x0, 0x0, 0x1b3f}, {0x2, 0x6, 0x8001, 0x10000}, {0x5, 0x3, 0x5, 0x800}, {0x100, 0x0, 0x9, 0x6}, {0x9, 0xfff, 0x6, 0x2}, {0x827, 0x0, 0x40, 0x3}, {0x4, 0xe294, 0x4, 0x2}, {0x7, 0x4000000, 0x74f, 0x4}, {0x10001, 0x806bcc, 0x1, 0x8}]}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000003c0)={@loopback, 0xe, r10}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000740)={0x27, 0x47f, 0x2, 0x1, 0x2, "ec83490cd157171f70a4bbb1e4253ae1732eaa"}) r11 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYRES32], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x600}, 0x800, 0x0, 0x1, 0x8, 0x40}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) 5.882361127s ago: executing program 9 (id=5061): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0x1}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x3, 0x1000000}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x42, 0x0, 0x0, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) 5.22625132s ago: executing program 2 (id=5062): r0 = socket(0x1e, 0xa, 0x200004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0/file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0x6}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x48014) 4.977698638s ago: executing program 8 (id=5063): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x9a4ad435807aedad}, 0x40000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xfffe) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000180)={0x9, &(0x7f0000000340)=[{0xff41, 0x0, 0xcc, 0x80000000}, {0x4, 0xe0, 0x2, 0x6}, {0xa, 0xc, 0x40, 0xffff9320}, {0x3, 0x2, 0x2, 0x4}, {0x7, 0x9, 0x0, 0x7}, {0xff80, 0x3, 0x4, 0x4}, {0xfff1, 0x7, 0x0, 0xea6}, {0x6, 0x8, 0x43, 0x4}, {0x7, 0x8, 0x0, 0xffffffff}]}, 0x10) bind$inet(r5, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) writev(r5, &(0x7f0000000640)=[{&(0x7f00000001c0)="7a76663f4889d470b45705a0288f1ebe8b509127b8b587b2fce7daff32f61d0a58688a27989f9510f283840ddef411b1e61a2988b93e0c93ff9937b0819569976c09e9b1", 0x44}, {&(0x7f0000000080)}, {&(0x7f0000000440)="7399aec3e67ca47a", 0x8}, {&(0x7f0000000700)="3533abcadaa3f1cfbea1aad6d82ac6", 0xf}], 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fcdbdf253700000008000300", @ANYRES32=r1, @ANYBLOB="0c000000bd7db6b9f3d7c7000000000000000040531d1a0605169bc38380a56cba547f93473670e5be4d71dba25c0241e230c77e1d7bafc53ee06ff75e0e70950dfde1d3ebe3d749ce5e8f1c59d560fbfb67114b22fa40b36ce77e96bbddb354f32360b38af98b27ba7b4b8d9f2b705606a1"], 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x40004) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 4.755807659s ago: executing program 9 (id=5064): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) accept4(r2, 0x0, &(0x7f00000001c0), 0x800) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r9, 0x1, 0x1}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x803, 0x0) 4.641437197s ago: executing program 5 (id=5065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_usb_connect(0x4, 0xbd2, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0xf5, 0x9e, 0xcc, 0x40, 0x1a8d, 0x1002, 0xe8f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc0, 0x4, 0xfc, 0x0, 0x40, 0x72, [{{0x9, 0x4, 0xe7, 0x9, 0x9, 0xff, 0xa7, 0x5a, 0x73, [@hid_hid={0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xf77}}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x6, 0x53, 0x0, [@generic={0x3b, 0x3, "055cf813783f52468b06b9625681b867d08c732486543830d0fa7d36ea6eba362a4cec4b322b5212b2424d3c8c2403ac5b15d9d5fc7e9119ea"}, @generic={0x82, 0x9, "43969749fcc29f6f2d0bf91d55ad211b484c9423cc549500f14bc09e1edbffc3e37a7673cd36d630aed6e14d7c352a84b04efd254d37d70bb7cebec2204e17b3ac65580531a010c5692f5d83a637fe1c52bbb6ddcc64bb35b2abf09d04d2e959229912ec5ea346ef515334bf9ba115ecfae41ebb1af00b5a081a24beba51f830"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x5, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1c, 0x2}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x4, 0x84, 0x4, [@generic={0xea, 0x2, "c3e74d1213353658af5e950c1de846c01f59076e1f7dd371f872780a3c223f843dcbae5d7a6d48bffc95c4d7ea0eeb7dc931d7dc8a194c17a951597ea3ba7fe02e4316732df4787004084f1d4fbeb35b88b09a8adfdd2d5579e0a1cdeeebe1d37d5f74cc933d27e1fb1bd2181d1479b39c59760283d33f8217c844ede6255f94dd0f9294268613a952e550add27d1ed344d6a38b44df3c244c1f5ed5afceb35bc3d570cf650f0c21dbb4291f99af54386272a0855e00c5f89fc2fb5bebfc275e20b05f430d07d311d999326415a42df2e802fbef96ab9df2a4f582828f17def2e4c34684a6d83117"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xc1, 0x5, 0x5, [@generic={0xbc, 0x21, "2a5726b010120ee20c1e27be1abe8e21eee6ca6264ad5ca7c6ec8d12933df663c7235eaf72269b40f7c8469d7e5958e4bc63bff1c390a66f561c38145369a68400b393586e965dfe34aedac685c0b6eddc31d8e1dce8cb5ada5a633fe89bd8f83ad82d06a9b1867fd68b646d1f1e7f7332ed4fb01bea8fed827c4bbcb60da8c02abcf7ded9d2320354910dc7a79271c81bc9b3f7112b388c362bfdc36bfb5d9992492acf910b470014e6ee6e57e954a34afe525db0aa789015cf"}]}}, {{0x9, 0x5, 0x85, 0x1, 0x440, 0x3, 0x7, 0x77, [@generic={0x15, 0x2, "d4eb8200f00800e84bbc2976355f8547ef0baa"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x1, 0x0, 0x9, [@generic={0x91, 0x3, "58806e7d30dfa90dc7abf7a906e135540f4f924671c189cf7fe3a3767aa680aa92348c5d395c92dd9e339d5032e84a08482e4c52d6b7f2d8fb37be16f9b4062bf4c89588fa32f7088e5fb0b78088f875a83a99259d1534b163400bea3af44dff267bc4961516c5e2307c765264919b0b15b98ba5de6538e9497a66c689435e9e8528f5e10a417007691dfe9babd3b3"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x6, 0x1f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x98, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x9, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3af, 0x4, 0xef, 0x8, [@generic={0x1d, 0x0, "ccc473ae7806bbb8b116d36458d1514b33d4568b1cd6cdb3bf6154"}]}}]}}, {{0x9, 0x4, 0xe6, 0x8, 0x5, 0x20, 0x24, 0xa5, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x80, 'f'}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x6, 0x6, [0x8, 0x2, 0x1, 0x2, 0x3, 0x5], 0x3}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x1d, "09cf35"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x6, 0x1, [0x7], 0x1}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x1, 0x5, "2f057249dd"}]}], [{{0x9, 0x5, 0xd, 0x1, 0x400, 0x2, 0x5, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}, @generic={0xe2, 0xf, "ed9575a7c7923a3f13b0625287bc9b2582af653eb75e0be46f02d63b9c558d4d0ad97be480c03290e8aeb46ce65cb286407954a52431c2f38280523869e238a1207666bfa60a988795f9314f43ea0eed37ae0b0bdb4aeeb96ad10b0bae2de0a0fe65604f65911d40fdf68c867136cab7c450f0c1866c663d9647929692704a432065701d3ad66479c9cf0cbeb452cf718e87cfae15ce4b07ea1620aadb8387b8b94981c553ee844401bb6f97cda9b3740fd1f0891fe657a1c7418937e64e9f47c1a335babbcd1e4f9f36eccc6c09fbcaaa6350c43ba3f0f5e71493f75dfbcc06"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x9, 0x0, 0x4, [@generic={0xdb, 0x6, "ddae69784a6de0c767e8ba8f254782d0b730ed473a63444b2d966336a8374eb3ffc66b529344e8c0d013a6a913dabf3c3295dd0baa88d36380f1e55c6765856c22dadf90a80731d6f257ff51c2c170bd8a7cb53e9fdb1fd5f741618b88ff6616d7d04ef866c0268abc228291397250b19423bc1d3917cba94be8c58df9042146d531a337f4b7d378b6b93adcba7deb43e52dc73966a28bb3461521018507f0287f763023e8619285439f418e9f1ae2324e4c7ed5b5ed57b02e1021dc6959ba9ed24a7e17654a145893bba02ba61859b6163d2a547e54f4cd41"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x7, 0xe, 0xff, [@generic={0x3f, 0x3, "784fca51d6da0961f41448fcaf58152bf8453bf4e207bd2c05da733fbc7b3f54778743000e76fe0d73f8e7e9e440990005442dcfada58f0aaf0b57bcc6"}, @generic={0xcd, 0x1, "464e22e171b7b6b32e9f3257650e2ab33c96ea57ca18ff10aa3e573618841cb6f4514f3d715db4dc860e3865a5cd35dc33676996622612afcf9c12ed343155554c05e8cb3790a89b4ccd7259c76a07f397ba74090ce199f2dcfd30e4aaeaf0c64fce5fd4daf631230e383413fc03c964e98dba6c9d347080e28d057b3197df6abfd3ab7ade2165dad9a0ba497c253fb1bcadacddabeb0406e34b0b8876f1eda1a31e4d60b28193d0a352563cbbbd5573fd796e3f045c6ec83e787892d2176f11651e271b73e393dd290d28"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x1, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xd45}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x45, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}]}}, {{0x9, 0x4, 0x2a, 0xcf, 0xf, 0xfb, 0xbe, 0x2c, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x1f}, [@extension_unit={0x8, 0x24, 0x8, 0x1, 0x80, 0x4, "9e"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x8, 0x7fff, 0x8, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x2, 0x7, 0x1, 0x5], 0x5}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x5, 0x4, '_\v'}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x1, 0xc, "83c8"}]}], [{{0x9, 0x5, 0xd, 0x13, 0x10, 0xfc, 0xd4, 0x99, [@generic={0xb, 0x21, "bbb8da2dee855008f5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x7}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x5, 0x7, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0xf, 0x4, 0x448, 0x3, 0x4, 0x5, [@generic={0xf1, 0x31, "cc4212e864aaa0028da1d6e56e6233c04636896b26a160311b7d8e062e5602ddf046e13a5d6b08f5681984f8d8ecb1cd89be3f828596d80615cba828f32481896dd48c42c089551872cd55f8af5edd1000cd44ebd9fea975bba1628e83ed800e4d97ea616492cf7cdfe64d42eda31c926130ee0980d6b8eeb761bcf0fa731a1a5c8d5c04a237bd6b4156e77003cfe4c602f5eff302b16d74f9365f1c084c46100902b4effe3d282554438199a239f875722fa40b52df5c4676a036e36609d77fac375cd947e2a9768ffff0613aa59234957e7ab63d244e94bb4b6aeba13d52ac4eef3fcd65495231a639b46a378aac"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xf56}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x1, 0xd, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x1, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}, @generic={0xcf, 0x6, "1a8b9a1525e08e16e582f9c7d5e0ec20f7f83217f9abe3608ef7db7375076d7b9ae8fe10e219a06c747216678ec88f3be0cac0312b9cb546b9cb8d5583797aa41a5ccfafc0159d5412e343eca9be5a07c5c7287efe0a2ce1bf08eed20a996a823194fde4ea1c6fe21df280c0221acf83ab0fd399c7dcbd1a3b978df4ad3ce569c4e4a97ce0f95fb2da865936e631a1b029cd53ceb8a5d2285555ef0460cbe80dcc2fc19123d5dec9c7f7552bf49261e2414b74cd2b27dbeedafe189aeecc1359813dedc5f5d3ca746872421873"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x7, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7b, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfc, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x4, 0x20, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x5, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x6, 0xe2, [@generic={0x1c, 0x21, "2d9a78a2d36e94fea93d01ff14ef2c4d35a43530b55b23d570ad"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0xff, 0x5, 0x7f, [@generic={0xd4, 0x10, "dd2fb2f0ca5564a0144a29fd9b56bd562e2038ba1852baa2d70bb2cc62e5e76d2be2e0ec321ab8387054f2f2fd0d551821c468b8dea6375d0754de9de01c1f79f3fcf56ad1fffe9024243e0df0f74b8509b7bfd31195af8cc21a891e314c9752cde339f5b8ffe258db3e02e5c969474a454dee9bf54bae68846db291f4d82b1171064740769ccb135cb6a5e52fbfa689c19203bbb70311d49bd0494121ffdf36a63fd5c3ec59906d00f6540bee1a4e0578f2f4addb28a70dd6b14d14b92158a36f965e5d4c504f8d5e5b1888584bd65deee5"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0xd, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x5}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0xe, 0x8, 0x1, [@generic={0x51, 0x21, "ebd42ea8698b27d45d737d60e97c6e8fd359775160999f999f7a94999cfce829f629dd1a6a2b095467e09e1affae8777dc711d3c93bda0ec6bd0c59aec503d31192632d96ce7add55bd4dd3d519c71"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x0, 0x81, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2e1}]}}]}}, {{0x9, 0x4, 0xa1, 0x6, 0x1, 0xa6, 0x83, 0x6f, 0x1, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0xf8, "", "df"}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x6, 0x9, "f188f4"}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x0, 0x4, "d57e"}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x5, 0x5}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x2, 0xc5, 0x8, [@generic={0x43, 0x23, "f29388c22a1bcaac81223686e28dfc4f5c1266027f86e8c07c7de81b44af614e6e5c1d0762bdf8c0df6866651e13cf2591725a81098b4ab896e2ba0f3117b656fe"}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x23, 0x3, 0x4, 0x8}, 0xd2, &(0x7f0000000440)={0x5, 0xf, 0xd2, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x3, 0x4}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x6, 0x0, 0x2a1, [0xff00c0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x77, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5, 0xfb, 0x7, 0xf3}, @generic={0x9a, 0x10, 0xb, "9d48b3df1659a6dfb6cec6418c26431060f847bcd7ece8dbb38c0ca456b66135f61964563f2ac80f7de76235eb9494092bf545c04261737e626f7ef537e69f0360d01591040739ff4ed29c0f8dfba6e45fc01fe1267f53114a08436364a143db8e72843e85f180d204955b281337a1daa1c0ee9aaa51c0525e26bbc33578c28e771ba43adba69ade6d824ed90048adda1a0cca53159aa3"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}, {0xb8, &(0x7f00000002c0)=@string={0xb8, 0x3, "f3f151fabe86588ed565b32295eb1f9403ee612fa2bb0068d07ea2146ca3e945a4c79139f3bddecec468cae888f1363dcf015556b3ff05f269e3605a251a2242953dafc68adb62723c3cfeb2adf923ebf8cd5f4f897f0d02327cbe3e72fbbbc70be1de1dcea16a3ff6eff64323da1a5450f7a5680a8c916eb5d4c79059a36435c24f9b05d411d34046628a0ff7a277d77301cc832dd8b9e1f89ddfb99058dc8bccc730a8fa5e409507aa28fb607976c7b6062b79a1f3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x6b, &(0x7f00000011c0)=@string={0x6b, 0x3, "e9a96fdcf78a659aea83d1d8ddce97a5887007bbc411d8112e7b503bef2f4bb8b1b47d4b1f05232a9a97d55d9dac16945daf2629261930940f79c590710b7549b3674ba4705e117fe7352fe9ddd94a32522e8117bbff735ed45991a303a4ebbaa262c7bc7e7e7f8830"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x405}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001380)={0x14, &(0x7f0000001300)={0x40, 0xd, 0x15, {0x15, 0x3, "cc5e2bb3655d82fe887b4145d169d9d1b2b969"}}, &(0x7f0000001340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000014c0)={0x1c, &(0x7f00000013c0)={0x40, 0xe, 0x5b, "aa84ab03b6a12b803051f9fb4860bf20494b95daed9ba7cc64a9344f03bda8c90dee6414daf16974aef50a4e4c220d2a2b5010ccdad1eaabc13af5e87d1501211e3141515fabf033c22016bf7b951c852080a975bfb1d5c79a5fca"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x7}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000540)=0x1) write$cgroup_pid(r2, &(0x7f0000000180)=r0, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) syz_usb_connect(0x4, 0xbd2, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0xf5, 0x9e, 0xcc, 0x40, 0x1a8d, 0x1002, 0xe8f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc0, 0x4, 0xfc, 0x0, 0x40, 0x72, [{{0x9, 0x4, 0xe7, 0x9, 0x9, 0xff, 0xa7, 0x5a, 0x73, [@hid_hid={0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xf77}}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x6, 0x53, 0x0, [@generic={0x3b, 0x3, "055cf813783f52468b06b9625681b867d08c732486543830d0fa7d36ea6eba362a4cec4b322b5212b2424d3c8c2403ac5b15d9d5fc7e9119ea"}, @generic={0x82, 0x9, "43969749fcc29f6f2d0bf91d55ad211b484c9423cc549500f14bc09e1edbffc3e37a7673cd36d630aed6e14d7c352a84b04efd254d37d70bb7cebec2204e17b3ac65580531a010c5692f5d83a637fe1c52bbb6ddcc64bb35b2abf09d04d2e959229912ec5ea346ef515334bf9ba115ecfae41ebb1af00b5a081a24beba51f830"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x5, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1c, 0x2}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x4, 0x84, 0x4, [@generic={0xea, 0x2, "c3e74d1213353658af5e950c1de846c01f59076e1f7dd371f872780a3c223f843dcbae5d7a6d48bffc95c4d7ea0eeb7dc931d7dc8a194c17a951597ea3ba7fe02e4316732df4787004084f1d4fbeb35b88b09a8adfdd2d5579e0a1cdeeebe1d37d5f74cc933d27e1fb1bd2181d1479b39c59760283d33f8217c844ede6255f94dd0f9294268613a952e550add27d1ed344d6a38b44df3c244c1f5ed5afceb35bc3d570cf650f0c21dbb4291f99af54386272a0855e00c5f89fc2fb5bebfc275e20b05f430d07d311d999326415a42df2e802fbef96ab9df2a4f582828f17def2e4c34684a6d83117"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xc1, 0x5, 0x5, [@generic={0xbc, 0x21, "2a5726b010120ee20c1e27be1abe8e21eee6ca6264ad5ca7c6ec8d12933df663c7235eaf72269b40f7c8469d7e5958e4bc63bff1c390a66f561c38145369a68400b393586e965dfe34aedac685c0b6eddc31d8e1dce8cb5ada5a633fe89bd8f83ad82d06a9b1867fd68b646d1f1e7f7332ed4fb01bea8fed827c4bbcb60da8c02abcf7ded9d2320354910dc7a79271c81bc9b3f7112b388c362bfdc36bfb5d9992492acf910b470014e6ee6e57e954a34afe525db0aa789015cf"}]}}, {{0x9, 0x5, 0x85, 0x1, 0x440, 0x3, 0x7, 0x77, [@generic={0x15, 0x2, "d4eb8200f00800e84bbc2976355f8547ef0baa"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x1, 0x0, 0x9, [@generic={0x91, 0x3, "58806e7d30dfa90dc7abf7a906e135540f4f924671c189cf7fe3a3767aa680aa92348c5d395c92dd9e339d5032e84a08482e4c52d6b7f2d8fb37be16f9b4062bf4c89588fa32f7088e5fb0b78088f875a83a99259d1534b163400bea3af44dff267bc4961516c5e2307c765264919b0b15b98ba5de6538e9497a66c689435e9e8528f5e10a417007691dfe9babd3b3"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x6, 0x1f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x98, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x9, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3af, 0x4, 0xef, 0x8, [@generic={0x1d, 0x0, "ccc473ae7806bbb8b116d36458d1514b33d4568b1cd6cdb3bf6154"}]}}]}}, {{0x9, 0x4, 0xe6, 0x8, 0x5, 0x20, 0x24, 0xa5, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x80, 'f'}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x6, 0x6, [0x8, 0x2, 0x1, 0x2, 0x3, 0x5], 0x3}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x1d, "09cf35"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x6, 0x1, [0x7], 0x1}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x1, 0x5, "2f057249dd"}]}], [{{0x9, 0x5, 0xd, 0x1, 0x400, 0x2, 0x5, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}, @generic={0xe2, 0xf, "ed9575a7c7923a3f13b0625287bc9b2582af653eb75e0be46f02d63b9c558d4d0ad97be480c03290e8aeb46ce65cb286407954a52431c2f38280523869e238a1207666bfa60a988795f9314f43ea0eed37ae0b0bdb4aeeb96ad10b0bae2de0a0fe65604f65911d40fdf68c867136cab7c450f0c1866c663d9647929692704a432065701d3ad66479c9cf0cbeb452cf718e87cfae15ce4b07ea1620aadb8387b8b94981c553ee844401bb6f97cda9b3740fd1f0891fe657a1c7418937e64e9f47c1a335babbcd1e4f9f36eccc6c09fbcaaa6350c43ba3f0f5e71493f75dfbcc06"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x9, 0x0, 0x4, [@generic={0xdb, 0x6, "ddae69784a6de0c767e8ba8f254782d0b730ed473a63444b2d966336a8374eb3ffc66b529344e8c0d013a6a913dabf3c3295dd0baa88d36380f1e55c6765856c22dadf90a80731d6f257ff51c2c170bd8a7cb53e9fdb1fd5f741618b88ff6616d7d04ef866c0268abc228291397250b19423bc1d3917cba94be8c58df9042146d531a337f4b7d378b6b93adcba7deb43e52dc73966a28bb3461521018507f0287f763023e8619285439f418e9f1ae2324e4c7ed5b5ed57b02e1021dc6959ba9ed24a7e17654a145893bba02ba61859b6163d2a547e54f4cd41"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x7, 0xe, 0xff, [@generic={0x3f, 0x3, "784fca51d6da0961f41448fcaf58152bf8453bf4e207bd2c05da733fbc7b3f54778743000e76fe0d73f8e7e9e440990005442dcfada58f0aaf0b57bcc6"}, @generic={0xcd, 0x1, "464e22e171b7b6b32e9f3257650e2ab33c96ea57ca18ff10aa3e573618841cb6f4514f3d715db4dc860e3865a5cd35dc33676996622612afcf9c12ed343155554c05e8cb3790a89b4ccd7259c76a07f397ba74090ce199f2dcfd30e4aaeaf0c64fce5fd4daf631230e383413fc03c964e98dba6c9d347080e28d057b3197df6abfd3ab7ade2165dad9a0ba497c253fb1bcadacddabeb0406e34b0b8876f1eda1a31e4d60b28193d0a352563cbbbd5573fd796e3f045c6ec83e787892d2176f11651e271b73e393dd290d28"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x1, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xd45}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x45, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}]}}, {{0x9, 0x4, 0x2a, 0xcf, 0xf, 0xfb, 0xbe, 0x2c, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x1f}, [@extension_unit={0x8, 0x24, 0x8, 0x1, 0x80, 0x4, "9e"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x6, 0x8, 0x7fff, 0x8, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x2, 0x7, 0x1, 0x5], 0x5}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x5, 0x4, '_\v'}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x1, 0xc, "83c8"}]}], [{{0x9, 0x5, 0xd, 0x13, 0x10, 0xfc, 0xd4, 0x99, [@generic={0xb, 0x21, "bbb8da2dee855008f5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x7}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x5, 0x7, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0xf, 0x4, 0x448, 0x3, 0x4, 0x5, [@generic={0xf1, 0x31, "cc4212e864aaa0028da1d6e56e6233c04636896b26a160311b7d8e062e5602ddf046e13a5d6b08f5681984f8d8ecb1cd89be3f828596d80615cba828f32481896dd48c42c089551872cd55f8af5edd1000cd44ebd9fea975bba1628e83ed800e4d97ea616492cf7cdfe64d42eda31c926130ee0980d6b8eeb761bcf0fa731a1a5c8d5c04a237bd6b4156e77003cfe4c602f5eff302b16d74f9365f1c084c46100902b4effe3d282554438199a239f875722fa40b52df5c4676a036e36609d77fac375cd947e2a9768ffff0613aa59234957e7ab63d244e94bb4b6aeba13d52ac4eef3fcd65495231a639b46a378aac"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xf56}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x1, 0xd, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x1, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}, @generic={0xcf, 0x6, "1a8b9a1525e08e16e582f9c7d5e0ec20f7f83217f9abe3608ef7db7375076d7b9ae8fe10e219a06c747216678ec88f3be0cac0312b9cb546b9cb8d5583797aa41a5ccfafc0159d5412e343eca9be5a07c5c7287efe0a2ce1bf08eed20a996a823194fde4ea1c6fe21df280c0221acf83ab0fd399c7dcbd1a3b978df4ad3ce569c4e4a97ce0f95fb2da865936e631a1b029cd53ceb8a5d2285555ef0460cbe80dcc2fc19123d5dec9c7f7552bf49261e2414b74cd2b27dbeedafe189aeecc1359813dedc5f5d3ca746872421873"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x7, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7b, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfc, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x4, 0x20, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x5, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x6, 0xe2, [@generic={0x1c, 0x21, "2d9a78a2d36e94fea93d01ff14ef2c4d35a43530b55b23d570ad"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0xff, 0x5, 0x7f, [@generic={0xd4, 0x10, "dd2fb2f0ca5564a0144a29fd9b56bd562e2038ba1852baa2d70bb2cc62e5e76d2be2e0ec321ab8387054f2f2fd0d551821c468b8dea6375d0754de9de01c1f79f3fcf56ad1fffe9024243e0df0f74b8509b7bfd31195af8cc21a891e314c9752cde339f5b8ffe258db3e02e5c969474a454dee9bf54bae68846db291f4d82b1171064740769ccb135cb6a5e52fbfa689c19203bbb70311d49bd0494121ffdf36a63fd5c3ec59906d00f6540bee1a4e0578f2f4addb28a70dd6b14d14b92158a36f965e5d4c504f8d5e5b1888584bd65deee5"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0xd, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x5}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0xe, 0x8, 0x1, [@generic={0x51, 0x21, "ebd42ea8698b27d45d737d60e97c6e8fd359775160999f999f7a94999cfce829f629dd1a6a2b095467e09e1affae8777dc711d3c93bda0ec6bd0c59aec503d31192632d96ce7add55bd4dd3d519c71"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x0, 0x81, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2e1}]}}]}}, {{0x9, 0x4, 0xa1, 0x6, 0x1, 0xa6, 0x83, 0x6f, 0x1, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0xf8, "", "df"}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x6, 0x9, "f188f4"}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x0, 0x4, "d57e"}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x5, 0x5}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x2, 0xc5, 0x8, [@generic={0x43, 0x23, "f29388c22a1bcaac81223686e28dfc4f5c1266027f86e8c07c7de81b44af614e6e5c1d0762bdf8c0df6866651e13cf2591725a81098b4ab896e2ba0f3117b656fe"}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x23, 0x3, 0x4, 0x8}, 0xd2, &(0x7f0000000440)={0x5, 0xf, 0xd2, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x3, 0x4}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x6, 0x0, 0x2a1, [0xff00c0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x77, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5, 0xfb, 0x7, 0xf3}, @generic={0x9a, 0x10, 0xb, "9d48b3df1659a6dfb6cec6418c26431060f847bcd7ece8dbb38c0ca456b66135f61964563f2ac80f7de76235eb9494092bf545c04261737e626f7ef537e69f0360d01591040739ff4ed29c0f8dfba6e45fc01fe1267f53114a08436364a143db8e72843e85f180d204955b281337a1daa1c0ee9aaa51c0525e26bbc33578c28e771ba43adba69ade6d824ed90048adda1a0cca53159aa3"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}, {0xb8, &(0x7f00000002c0)=@string={0xb8, 0x3, "f3f151fabe86588ed565b32295eb1f9403ee612fa2bb0068d07ea2146ca3e945a4c79139f3bddecec468cae888f1363dcf015556b3ff05f269e3605a251a2242953dafc68adb62723c3cfeb2adf923ebf8cd5f4f897f0d02327cbe3e72fbbbc70be1de1dcea16a3ff6eff64323da1a5450f7a5680a8c916eb5d4c79059a36435c24f9b05d411d34046628a0ff7a277d77301cc832dd8b9e1f89ddfb99058dc8bccc730a8fa5e409507aa28fb607976c7b6062b79a1f3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x6b, &(0x7f00000011c0)=@string={0x6b, 0x3, "e9a96fdcf78a659aea83d1d8ddce97a5887007bbc411d8112e7b503bef2f4bb8b1b47d4b1f05232a9a97d55d9dac16945daf2629261930940f79c590710b7549b3674ba4705e117fe7352fe9ddd94a32522e8117bbff735ed45991a303a4ebbaa262c7bc7e7e7f8830"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x405}}]}) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001380)={0x14, &(0x7f0000001300)={0x40, 0xd, 0x15, {0x15, 0x3, "cc5e2bb3655d82fe887b4145d169d9d1b2b969"}}, &(0x7f0000001340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000014c0)={0x1c, &(0x7f00000013c0)={0x40, 0xe, 0x5b, "aa84ab03b6a12b803051f9fb4860bf20494b95daed9ba7cc64a9344f03bda8c90dee6414daf16974aef50a4e4c220d2a2b5010ccdad1eaabc13af5e87d1501211e3141515fabf033c22016bf7b951c852080a975bfb1d5c79a5fca"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x7}}) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) (async) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000540)=0x1) (async) write$cgroup_pid(r2, &(0x7f0000000180)=r0, 0x12) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) 4.472479097s ago: executing program 2 (id=5066): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000100)='::,:/', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5200fff402"], 0x8) 4.448655436s ago: executing program 7 (id=5067): r0 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x2, 0x9d, 0x18, 0xb, 0x14, 0x6}}]}}]}, 0x148}}, 0x4008010) process_mrelease(0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000940)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8fy\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93h\xfc\xb4\xc7$\x81\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xde\xba\x9em\xe9\"\x03|3P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xee#\xed(\xed\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x97\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xc4\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\t\x00\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f\xff\x11\x8b\x8cH\xa7\xc1\x8e\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\x00\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\x1f\x05\xba\xce~\x02\x83\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19\x16\b\xb1\xae\xe3b\x9b\xb7?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\x8d{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c\xf1\xce\xf6\xb8\xbb\xc9f\xe5a\xf4Y,\x18\x8c\xbc`\xbe\xa2\xc5\xcacD\xf5\xc5;\xc6a\x9e\xcc\x96@\xce+\xbc\x1d\xa7\xb0\x81\a3\xe32&\xcf\xe1\x12>\x00\x11\x007\xdd\n\x94\x9c\xff:\xe7\x1d\xc9\xc5\xb1r\xbf\x15\xfe\xe7H\xed\xa6t\xd0\xacB\xc8\xba\x89-\xd5\x02\xe7\xe0\x84q\xbcb\xceb\x8a\n\xcfo;\xd4bH\xd4k\x9a+\xfaO5_\x01\xae\xd2\xf9J\x0f\xb6y\xb5X\xff\x19\x9af\xc3\x04\xcc\x9f/\\\x80*\xf7\x0ek\xb3\x88\x93\xdb\x8fx\xb4\xa4!\x1e\xec\x13\x98f\xbf\xe4=n\x0e\xbdvS\x13b3\xe4\a\x89\xfb\xd6m\x00\x89\x83\xeb8ol\x85~\xcc\xcc\x06.\xb9\t5\x8e\xb0*\x9f\xcd\x81\x99\xd0r\xf7\x85\x15\xf7\x97P1\xa62\xc1\x10ib\x8c', 0x4) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e04032420"], 0x7) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x6, r0, 'id1\x00'}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 4.428474557s ago: executing program 8 (id=5068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7010f5ffffff04000000080009"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = eventfd(0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) r6 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r10, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r11}, &(0x7f0000000240), &(0x7f00000002c0)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) 3.566108701s ago: executing program 5 (id=5069): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="6ddc4b9b236a761499809b03e6d6efe1c4abfb0b36075f29f4b20b0dea743c88bcac6f99282a0a1461001d2bbf15a673", 0x30, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086", 0xb3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 3.507037839s ago: executing program 9 (id=5070): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x3, 0x3, 0x6, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000240)={0x12, {{0x29, 0x0, 0x36000000, @local}}}, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)={0x4bc, 0x1, 0x5, 0x5, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x0, 0xca6}, 0x5, 0x9, 0x8, 0x9, 0x8, 'syz1\x00', "994d2635813721b7a4822055af6dd02eb9b7f7d29249e0805566446e3a427bab", "7411e7ad989958fd4ef886e78677c7c10823efb84ad728fe1f7d376252a14771", [{0x9, 0x5, {0x3, 0x43e1b825}}, {0x5, 0xd29, {0x3, 0x9}}, {0x0, 0x3, {0x0, 0x6}}, {0x4718, 0x400, {0x2, 0xff}}, {0xfff, 0x4, {0x3, 0x5}}, {0x9, 0x58, {0x2, 0x5}}, {0xffff, 0x5, {0x0, 0xac}}, {0xff, 0x0, {0x1, 0xa}}, {0x8, 0x7de, {0x3, 0x5}}, {0x4, 0xa620, {0x3, 0x39d1}}, {0x400, 0x401, {0x2, 0x800}}, {0x8, 0x3, {0x3, 0x7}}, {0x5, 0xe, {0x1, 0x2}}, {0xa, 0x200, {0x3, 0x9}}, {0xcbee, 0xff29, {0x1, 0x800}}, {0x6, 0x8, {0x2, 0x9}}, {0x3, 0xff43, {0x2, 0x7fffffff}}, {0xa, 0x0, {0x1, 0x9}}, {0x6, 0xf, {0x0, 0x80000000}}, {0x8, 0x8000, {0x3, 0x7}}, {0xff6c, 0x5, {0x1}}, {0x7, 0x6, {0x0, 0x5}}, {0xfffd, 0x3, {0x0, 0x66}}, {0xffff, 0x9, {0x0, 0x4}}, {0x765, 0x101, {0x2, 0x81}}, {0x0, 0x75, {0x2, 0x80}}, {0x6, 0x7, {0x2, 0xc962}}, {0x2, 0x7, {0x0, 0x3}}, {0x85b, 0x0, {0x2, 0x8}}, {0xed7, 0x3, {0x1, 0x8}}, {0x0, 0x0, {0x2, 0xe}}, {0x3, 0xf, {0x6, 0x5}}, {0x9, 0x4, {0x1, 0x3}}, {0x8, 0x8, {0x3, 0x4d93f25f}}, {0x7fff, 0x1000, {0x1, 0x1}}, {0x1ff, 0x7f, {0x1, 0x3}}, {0x8, 0x6, {0x2, 0x80}}, {0x0, 0x8, {0x0, 0x8}}, {0x4, 0x0, {0x1, 0x88}}, {0x6, 0x5, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x7, 0x5, 0x7, 0x9, 0x15, 'syz1\x00', "abe4ef06dfdad29a549e369da5c276c54edf8c1761737db534c34e0fa8353a4c", "9b53a6b2f30aab04d72e727f231718736f4ceb0c923cf6e2afa6841a2ea8d833", [{0xfe01, 0x6, {0x0, 0xfa}}, {0x3, 0xf7, {0x3, 0x6}}, {0x92, 0x6, {0x1, 0x3}}, {0xd, 0x7, {0x1, 0x4}}, {0x8, 0xb38, {0x1, 0x67567156}}, {0x90, 0xb, {0x3, 0x400}}, {0x2, 0x8, {0x2, 0x8}}, {0x7, 0x71, {0x0, 0x9}}, {0x0, 0x2, {0x3, 0xffffffff}}, {0x92, 0x6, {0x3, 0x7}}, {0x2, 0x3, {0x1, 0x5}}, {0xafef, 0x6, {0x3, 0x9}}, {0x4384, 0x8, {0x2, 0xffff}}, {0x5, 0xb, {0x3, 0x141}}, {0xe, 0x400, {0x1, 0xe}}, {0x2, 0x3, {0x0, 0x8}}, {0xffff, 0xb1, {0x1, 0x9}}, {0x2c57, 0x45, {0x0, 0x401}}, {0x4, 0xf, {0x3, 0x80000000}}, {0x0, 0xffff, {0x1, 0x6}}, {0x5c5, 0x9, {0x2, 0x7fff}}, {0x4, 0xfc00, {0x2, 0xc77}}, {0x5, 0x8000, {0x0, 0xa}}, {0x1, 0xab, {0x1, 0x6}}, {0x8, 0x0, {0x3, 0x4}}, {0x6, 0x5, {0x3, 0xf4}}, {0x6, 0x400, {0x3, 0x1}}, {0x5, 0x200, {0x3, 0x80000001}}, {0xacf0, 0x5b, {0x1, 0x10}}, {0x6, 0xd, {0x1, 0x7}}, {0x6ce4, 0x5, {0x3, 0x7f}}, {0xa, 0x0, {0x2, 0xef}}, {0x3, 0xfff, {0x2, 0x1}}, {0x80, 0x5, {0x3, 0x8}}, {0xfffb, 0xe24, {0x3, 0x5}}, {0x1, 0x9, {0x0, 0x8}}, {0x1, 0x8, {0x1, 0x1}}, {0xb, 0x200, {0x2, 0xa}}, {0x4, 0x5, {0xbc83346e91229dc2, 0x40}}, {0xfffa, 0xfa, {0x0, 0xea01}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x8004}, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 3.378161701s ago: executing program 2 (id=5071): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000000600000000000000"], 0x50) prlimit64(r2, 0xd, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca6433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84222000000005335001db43a5c000000000000000024000000000000000000e75a812ded5297d531afbf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cbc30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a3830007462b5543f2c1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f401058690350000000000000000000000000025902e4a196fb169780000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad39e42a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e80b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d575a83f33e75011ed8b48a2f52a03ec09c277b596d5eb491b6b380533be019894e7fc1a414ae38f1f448a7f6423bb12169d6f41665c5edfa3b47acd4d23b826d15361528d7c5a27e1120ca9537c8c8cccbb3ae86a91894372120488b82ecad3538899e53a36844aa515ebdbb1cd69a33b584f8e1c796827703f3894c93dd5a77607cb6c1191b89b303c1381f3e6016bf6c0e710750b43eb9a8fd0d7d71492ac43baec4994396f0fdfe7cecf248b88ba9406c7b8e5ec4882d52a0cd4b9b1c8327e811e6ba2572ff5a59dc8c5c90464aa3942b4a256e8a513155fae5b3ebcc47d2e1a8768c2da219f47595f83239688ef9f55937c9e3447fb532cabc44bd5b805356cf12b89514"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r7}, 0x4) 1.320096092s ago: executing program 9 (id=5077): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) eventfd(0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) syz_io_uring_setup(0x835, &(0x7f0000000240)={0x0, 0x679d, 0x8000, 0x2000006, 0x1ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x104, &(0x7f0000000080)=0x9, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x14, 0x2007, @fd_index=0x5, 0x7106, &(0x7f0000000380)=""/106, 0x6a}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) pipe(0x0) io_setup(0x3ff, 0x0) io_submit(0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.242089673s ago: executing program 2 (id=5078): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 170.533867ms ago: executing program 7 (id=5079): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000140)={'veth0_vlan\x00', 0x400}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(r0, 0xb, &(0x7f0000000040)={0x1200000000000, 0xf}, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3]}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) 158.934471ms ago: executing program 9 (id=5080): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_procfs(0x0, 0x0) timer_delete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x4, r6}, 0x14) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, &(0x7f00000000c0), &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x2e, &(0x7f00000002c0)=""/46, 0xace3a4afe1970363, 0x1, '\x00', r6, 0x1c, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x3, 0x2, 0x9}, 0x10, 0x2d191, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000004c0)=[{0x1, 0x4, 0x9}, {0x1, 0x1, 0x4, 0x7}, {0x6, 0x1, 0x0, 0xb}, {0x4, 0x3, 0x1, 0x2}, {0x2, 0x4, 0x9, 0x6}, {0x3, 0x2, 0x8, 0x8}, {0x0, 0x4, 0x1, 0x6}], 0x10, 0xaa7}, 0x94) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r8, 0x80) listen(r8, 0x7fffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x12d, &(0x7f0000000200)=ANY=[@ANYBLOB="12000002020000082505a1a440000102030109021b0102010430030904800001020d000005240600010524000a000d240f0107000000020009000501241a0100081524120800a317a88b045e4f01a607c0ffcb7e392a00240101ef0905810300020706030904010000020d00000904010102020d0000090582021000ad031c0000000010003e0200"], 0x0) 106.113879ms ago: executing program 2 (id=5081): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 0s ago: executing program 8 (id=5082): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) setresgid(0xee00, 0x0, 0xee00) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'veth0_to_hsr\x00'}}, 0x1e) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000080)=0x1) setresgid(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffff8) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0xff, 0xfffffffffffffd89) kernel console output (not intermixed with test programs): 0x243/0xab0 [ 1279.853643][T21846] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1279.853676][T21846] get_arg_page+0xf4/0x310 [ 1279.853703][T21846] ? __pfx_get_arg_page+0x10/0x10 [ 1279.853728][T21846] ? irqentry_exit+0x3b/0x90 [ 1279.853744][T21846] ? lockdep_hardirqs_on+0x7c/0x110 [ 1279.853767][T21846] copy_string_kernel+0x182/0x520 [ 1279.853783][T21846] ? get_user_arg_ptr.isra.0+0x4c/0xb0 [ 1279.853815][T21846] do_execveat_common.isra.0+0x2ed/0x610 [ 1279.853840][T21846] __x64_sys_execve+0x8e/0xb0 [ 1279.853859][T21846] do_syscall_64+0xcd/0xfa0 [ 1279.853877][T21846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.853892][T21846] RIP: 0033:0x7f0bba78f749 [ 1279.853906][T21846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.853922][T21846] RSP: 002b:00007f0bbb63a038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1279.853939][T21846] RAX: ffffffffffffffda RBX: 00007f0bba9e6180 RCX: 00007f0bba78f749 [ 1279.853951][T21846] RDX: 0000200000000b80 RSI: 0000200000000ac0 RDI: 0000200000000040 [ 1279.853962][T21846] RBP: 00007f0bbb63a090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.853972][T21846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1279.853982][T21846] R13: 00007f0bba9e6218 R14: 00007f0bba9e6180 R15: 00007fff5b625f08 [ 1279.854008][T21846] [ 1280.177416][ T5961] usb usb10-port1: attempt power cycle [ 1280.239430][T21835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4214'. [ 1280.252532][T18984] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1280.260135][T18984] usb 3-1: can't read configurations, error -71 [ 1280.513978][ T5961] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1280.550127][ T5961] usb 10-1: device descriptor read/8, error -71 [ 1280.824246][ T5961] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1280.884934][ T5961] usb 10-1: device descriptor read/8, error -71 [ 1281.045109][ T5961] usb usb10-port1: unable to enumerate USB device [ 1282.873547][T21877] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4224'. [ 1282.882799][T21877] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1283.399035][T21884] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4227'. [ 1284.032339][T18984] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1284.303927][T21892] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4230'. [ 1284.535609][T15612] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1284.601573][T18984] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1284.612599][T18984] usb 10-1: can't read configurations, error -71 [ 1284.785321][T15612] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1284.807177][T15612] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1284.835699][T15612] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1284.875168][T15612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.896637][T21900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1284.906425][T15612] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1285.309204][T21900] zonefs (nullb0) ERROR: Not a zoned block device [ 1285.490960][T21919] input: syz0 as /devices/virtual/input/input59 [ 1285.501911][T21919] input: failed to attach handler leds to device input59, error: -6 [ 1285.924916][T21930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21930 comm=syz.9.4241 [ 1286.019477][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4241'. [ 1286.314081][T15612] usb 3-1: USB disconnect, device number 125 [ 1286.491833][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4245'. [ 1287.772567][ T30] audit: type=1400 audit(1764453429.771:1874): avc: denied { unmount } for pid=20040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1288.870163][ T30] audit: type=1401 audit(1764453430.871:1875): op=fscreate invalid_context=CF [ 1289.425870][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4259'. [ 1290.801242][ T30] audit: type=1400 audit(1764453432.281:1876): avc: denied { setattr } for pid=21989 comm="syz.5.4260" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1292.014065][T22011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4265'. [ 1292.378808][T22020] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4270'. [ 1293.357182][T22030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4272'. [ 1293.366688][T22030] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1293.620981][T22032] FAULT_INJECTION: forcing a failure. [ 1293.620981][T22032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.640100][T22032] CPU: 0 UID: 0 PID: 22032 Comm: syz.5.4273 Not tainted syzkaller #0 PREEMPT(full) [ 1293.640128][T22032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1293.640138][T22032] Call Trace: [ 1293.640146][T22032] [ 1293.640154][T22032] dump_stack_lvl+0x16c/0x1f0 [ 1293.640177][T22032] should_fail_ex+0x512/0x640 [ 1293.640203][T22032] _copy_from_iter+0x29f/0x1720 [ 1293.640229][T22032] ? __alloc_skb+0x200/0x380 [ 1293.640251][T22032] ? __pfx__copy_from_iter+0x10/0x10 [ 1293.640272][T22032] ? netlink_autobind.isra.0+0x158/0x370 [ 1293.640308][T22032] netlink_sendmsg+0x820/0xdd0 [ 1293.640339][T22032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.640375][T22032] ____sys_sendmsg+0xa98/0xc70 [ 1293.640394][T22032] ? copy_msghdr_from_user+0x10a/0x160 [ 1293.640417][T22032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1293.640447][T22032] ___sys_sendmsg+0x134/0x1d0 [ 1293.640472][T22032] ? __pfx____sys_sendmsg+0x10/0x10 [ 1293.640494][T22032] ? __lock_acquire+0x622/0x1c90 [ 1293.640542][T22032] __sys_sendmsg+0x16d/0x220 [ 1293.640566][T22032] ? __pfx___sys_sendmsg+0x10/0x10 [ 1293.640607][T22032] do_syscall_64+0xcd/0xfa0 [ 1293.640630][T22032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.640649][T22032] RIP: 0033:0x7f8e2298f749 [ 1293.640669][T22032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1293.640687][T22032] RSP: 002b:00007f8e237fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1293.640704][T22032] RAX: ffffffffffffffda RBX: 00007f8e22be5fa0 RCX: 00007f8e2298f749 [ 1293.640715][T22032] RDX: 0000000000020000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1293.640725][T22032] RBP: 00007f8e237fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.640735][T22032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.640746][T22032] R13: 00007f8e22be6038 R14: 00007f8e22be5fa0 R15: 00007ffeb4766e58 [ 1293.640771][T22032] [ 1295.436932][T22051] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1295.648998][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4285'. [ 1296.574290][ T1221] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1296.612635][T22073] FAULT_INJECTION: forcing a failure. [ 1296.612635][T22073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.637960][T22073] CPU: 0 UID: 0 PID: 22073 Comm: syz.9.4288 Not tainted syzkaller #0 PREEMPT(full) [ 1296.637987][T22073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1296.637998][T22073] Call Trace: [ 1296.638005][T22073] [ 1296.638012][T22073] dump_stack_lvl+0x16c/0x1f0 [ 1296.638034][T22073] should_fail_ex+0x512/0x640 [ 1296.638061][T22073] _copy_from_user+0x2e/0xd0 [ 1296.638086][T22073] memdup_user+0x6b/0xe0 [ 1296.638105][T22073] msr_io+0xea/0x480 [ 1296.638125][T22073] ? __pfx_do_set_msr+0x10/0x10 [ 1296.638148][T22073] ? __pfx_msr_io+0x10/0x10 [ 1296.638168][T22073] ? arch_stack_walk+0xa6/0x100 [ 1296.638193][T22073] kvm_arch_vcpu_ioctl+0x1455/0x5510 [ 1296.638213][T22073] ? kvm_arch_vcpu_ioctl+0x1430/0x5510 [ 1296.638236][T22073] ? stack_trace_save+0x8e/0xc0 [ 1296.638262][T22073] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1296.638282][T22073] ? stack_depot_save_flags+0x29/0x9c0 [ 1296.638305][T22073] ? __lock_acquire+0xb8a/0x1c90 [ 1296.638324][T22073] ? kasan_save_stack+0x42/0x60 [ 1296.638342][T22073] ? kasan_save_stack+0x33/0x60 [ 1296.638358][T22073] ? kasan_save_track+0x14/0x30 [ 1296.638374][T22073] ? __kasan_save_free_info+0x3b/0x60 [ 1296.638398][T22073] ? __kasan_slab_free+0x5f/0x80 [ 1296.638415][T22073] ? kfree+0x2b8/0x6d0 [ 1296.638437][T22073] ? tomoyo_path_number_perm+0x470/0x580 [ 1296.638454][T22073] ? security_file_ioctl+0x9b/0x240 [ 1296.638474][T22073] ? do_syscall_64+0xcd/0xfa0 [ 1296.638494][T22073] ? __lock_acquire+0xb8a/0x1c90 [ 1296.638519][T22073] ? __mutex_trylock_common+0xe9/0x250 [ 1296.638539][T22073] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1296.638558][T22073] ? __pfx___might_resched+0x10/0x10 [ 1296.638584][T22073] ? rcu_is_watching+0x12/0xc0 [ 1296.638607][T22073] ? trace_contention_end+0xdd/0x130 [ 1296.638625][T22073] ? __mutex_lock+0x1c5/0x1060 [ 1296.638653][T22073] ? kasan_quarantine_put+0x10a/0x240 [ 1296.638673][T22073] ? __pfx___mutex_lock+0x10/0x10 [ 1296.638702][T22073] ? tomoyo_path_number_perm+0x18d/0x580 [ 1296.638724][T22073] ? kvm_vcpu_ioctl+0x1235/0x1690 [ 1296.638748][T22073] kvm_vcpu_ioctl+0x1235/0x1690 [ 1296.638776][T22073] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1296.638801][T22073] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1296.638828][T22073] ? do_vfs_ioctl+0x128/0x14f0 [ 1296.638854][T22073] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1296.638880][T22073] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1296.638909][T22073] ? hook_file_ioctl_common+0x145/0x410 [ 1296.638941][T22073] ? selinux_file_ioctl+0x180/0x270 [ 1296.638961][T22073] ? selinux_file_ioctl+0xb4/0x270 [ 1296.638983][T22073] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1296.639009][T22073] __x64_sys_ioctl+0x18e/0x210 [ 1296.639036][T22073] do_syscall_64+0xcd/0xfa0 [ 1296.639055][T22073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.639073][T22073] RIP: 0033:0x7faa3918f749 [ 1296.639089][T22073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1296.639106][T22073] RSP: 002b:00007faa3a0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.639124][T22073] RAX: ffffffffffffffda RBX: 00007faa393e5fa0 RCX: 00007faa3918f749 [ 1296.639136][T22073] RDX: 0000200000000000 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1296.639147][T22073] RBP: 00007faa3a0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.639158][T22073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.639168][T22073] R13: 00007faa393e6038 R14: 00007faa393e5fa0 R15: 00007fff4738e658 [ 1296.639195][T22073] [ 1297.399681][ T1221] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 1297.410811][ T1221] usb 6-1: config 0 has no interface number 0 [ 1297.420662][ T1221] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1297.488531][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.526940][ T1221] usb 6-1: config 0 descriptor?? [ 1297.538556][ T1221] cp210x 6-1:0.99: cp210x converter detected [ 1297.683978][T18984] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1297.858896][T22082] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4291'. [ 1297.872978][T18984] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1297.884315][T18984] usb 10-1: can't read configurations, error -71 [ 1297.946447][ T1221] cp210x 6-1:0.99: failed to get vendor val 0x000e size 3: -71 [ 1297.958104][ T1221] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1297.987220][ T1221] usb 6-1: USB disconnect, device number 119 [ 1298.008556][ T1221] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1298.034711][ T1221] cp210x 6-1:0.99: device disconnected [ 1298.339390][T22096] netlink: 'syz.2.4296': attribute type 27 has an invalid length. [ 1298.463508][T22105] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1298.687449][T22096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.694722][T22096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.117462][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.426091][T22096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.473657][T22096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.695024][T22096] veth0_macvtap: left allmulticast mode [ 1299.700908][T22096] macvtap0: left allmulticast mode [ 1299.754562][T22096] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1299.815112][T22096] veth0_to_hsr: left promiscuous mode [ 1299.835850][T22096] team0: left allmulticast mode [ 1299.840804][T22096] team_slave_0: left allmulticast mode [ 1299.846429][T22096] team_slave_1: left allmulticast mode [ 1299.851951][T22096] macvlan2: left allmulticast mode [ 1299.857541][T22096] team0: left promiscuous mode [ 1299.862381][T22096] team_slave_0: left promiscuous mode [ 1299.868185][T22096] team_slave_1: left promiscuous mode [ 1299.873775][T22096] macvlan2: left promiscuous mode [ 1299.891601][T22096] macvtap1: left promiscuous mode [ 1299.923467][T22096] macvtap1: left allmulticast mode [ 1299.931779][T22096] vlan2: left promiscuous mode [ 1299.936880][T22096] vlan2: left allmulticast mode [ 1299.941945][T22096] hsr_slave_1: left allmulticast mode [ 1299.949045][T22096] bond0: left promiscuous mode [ 1299.957581][T22096] veth1_vlan: left allmulticast mode [ 1299.963303][T22096] macvtap2: left promiscuous mode [ 1299.968460][T22096] macvtap2: left allmulticast mode [ 1300.039440][T22102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.050248][T22102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1300.144976][T22119] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4301'. [ 1300.164026][T22119] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4301'. [ 1300.186559][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.219672][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.238864][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.376614][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.813105][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.823781][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.942516][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.982200][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.481939][T22154] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4311'. [ 1301.524647][T22156] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4310'. [ 1303.054354][ T30] audit: type=1400 audit(1764453445.031:1877): avc: denied { write } for pid=22168 comm="syz.9.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1305.489889][T22208] macvlan0: entered allmulticast mode [ 1305.495759][T22208] veth1_vlan: entered allmulticast mode [ 1305.648625][ T30] audit: type=1400 audit(1764453447.651:1878): avc: denied { listen } for pid=22211 comm="syz.2.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1306.005654][ T30] audit: type=1800 audit(1764453448.011:1879): pid=22221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4329" name="bus" dev="tmpfs" ino=1465 res=0 errno=0 [ 1306.365683][ T30] audit: type=1804 audit(1764453448.041:1880): pid=22221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.4329" name="/newroot/282/bus" dev="tmpfs" ino=1465 res=1 errno=0 [ 1307.414758][T22241] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4334'. [ 1307.424494][T22241] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1309.352100][T22219] tmpfs: Bad value for 'mpol' [ 1309.390726][T22262] lo speed is unknown, defaulting to 1000 [ 1311.051312][T22279] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1311.084882][T22279] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1311.313195][T22258] Trying to write to read-only block-device nullb0 [ 1311.539734][T22293] 9p: Unknown Cache mode or invalid value Π[ 1311.594659][ T30] audit: type=1400 audit(1764453453.591:1881): avc: denied { listen } for pid=22292 comm="syz.5.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1311.633114][ T30] audit: type=1400 audit(1764453453.591:1882): avc: denied { getopt } for pid=22292 comm="syz.5.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1312.146903][ T30] audit: type=1326 audit(1764453454.151:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22286 comm="syz.9.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3918f749 code=0x7fc00000 [ 1312.514004][ T30] audit: type=1326 audit(1764453454.171:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22286 comm="syz.9.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa3918f749 code=0x7fc00000 [ 1312.547540][ T30] audit: type=1326 audit(1764453454.171:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22286 comm="syz.9.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3918f749 code=0x7fc00000 [ 1312.572001][ T30] audit: type=1326 audit(1764453454.171:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22286 comm="syz.9.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3918f749 code=0x7fc00000 [ 1312.595515][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.803195][ T30] audit: type=1326 audit(1764453454.171:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22286 comm="syz.9.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3918f749 code=0x7fc00000 [ 1312.826708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.950955][ T30] audit: type=1326 audit(1764453454.181:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22286 comm="syz.9.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3918f749 code=0x7fc00000 [ 1312.973072][T22317] macvlan0: entered allmulticast mode [ 1313.158868][ T30] audit: type=1326 audit(1764453454.181:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22286 comm="syz.9.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3918f749 code=0x7fc00000 [ 1313.182341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.241994][ T30] audit: type=1326 audit(1764453454.181:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22286 comm="syz.9.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3918f749 code=0x7fc00000 [ 1313.265458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.902164][T22333] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4360'. [ 1314.141562][T22337] fuse: Unknown parameter '' [ 1315.018470][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4364'. [ 1315.226471][T18984] kernel write not supported for file /admmidi2 (pid: 18984 comm: kworker/1:1) [ 1315.261233][T22101] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 1315.455522][T22101] usb 6-1: config 0 has no interfaces? [ 1315.461139][T22101] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1315.492002][T22101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.511795][T22101] usb 6-1: config 0 descriptor?? [ 1315.851590][T22370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.865761][T22370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.054226][ T5961] usb 6-1: USB disconnect, device number 120 [ 1320.871690][T22419] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4384'. [ 1320.883147][T22419] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1321.271947][T22426] overlay: ./file0 is not a directory [ 1321.769484][T19895] Bluetooth: hci2: command 0x0406 tx timeout [ 1324.019795][T22471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4399'. [ 1324.398836][T22482] overlayfs: failed to resolve './file1': -2 [ 1325.162353][T22486] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4401'. [ 1325.331323][T22123] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1325.693914][T22123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.711668][T22123] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1325.727721][T22123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.757685][T22123] usb 6-1: config 0 descriptor?? [ 1326.193927][T22123] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 1326.232968][T22123] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001D/input/input61 [ 1326.322376][T22502] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1327.163044][T22123] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1328.340207][T22101] usb 6-1: USB disconnect, device number 121 [ 1328.490555][T22523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1328.624161][ T5961] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1328.780866][T22523] bond_slave_0: entered promiscuous mode [ 1328.787513][T22523] bond_slave_1: entered promiscuous mode [ 1328.825492][T22523] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1328.931888][T22523] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 1329.237241][ T5961] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1329.254025][ T5961] usb 3-1: can't read configurations, error -61 [ 1329.404090][ T5961] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1329.645527][ T5961] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1329.699337][ T5961] usb 3-1: can't read configurations, error -61 [ 1329.731504][ T5961] usb usb3-port1: attempt power cycle [ 1330.184078][ T5961] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1330.184193][T22101] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1330.283069][ T5961] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1330.302951][ T5961] usb 3-1: can't read configurations, error -61 [ 1330.471917][T22101] usb 10-1: not running at top speed; connect to a high speed hub [ 1330.496536][T22101] usb 10-1: config 10 has an invalid interface number: 5 but max is 3 [ 1330.521322][T22101] usb 10-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.857331][T22101] usb 10-1: config 10 has 1 interface, different from the descriptor's value: 4 [ 1330.881615][T22101] usb 10-1: config 10 has no interface number 0 [ 1330.891078][T22101] usb 10-1: config 10 interface 5 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1330.906653][T22101] usb 10-1: config 10 interface 5 has no altsetting 0 [ 1330.914315][ T5961] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1330.926035][T22101] usb 10-1: New USB device found, idVendor=19d2, idProduct=1485, bcdDevice= b.9b [ 1330.942378][T22101] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.950961][T22101] usb 10-1: Product: syz [ 1331.012281][ T5961] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1331.028238][ T5961] usb 3-1: can't read configurations, error -61 [ 1331.061195][ T5961] usb usb3-port1: unable to enumerate USB device [ 1331.061926][T22101] usb 10-1: Manufacturer: syz [ 1331.074419][T22101] usb 10-1: SerialNumber: syz [ 1331.343239][T22101] usb 10-1: USB disconnect, device number 24 [ 1333.521586][T22607] ieee802154 phy1 wpan1: encryption failed: -90 [ 1333.559671][T22610] vxfs: unable to read disk superblock at 1 [ 1333.578768][T22610] vxfs: unable to read disk superblock at 8 [ 1333.597264][T22610] vxfs: can't find superblock. [ 1333.672015][T22614] evm: overlay not supported [ 1336.286049][T22101] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1336.634051][T22101] usb 6-1: Using ep0 maxpacket: 32 [ 1336.650442][T22101] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.663676][T22101] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1336.670289][T22101] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1336.679435][T22101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.761247][T22101] usb 6-1: config 0 descriptor?? [ 1336.930742][T22654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63546 sclass=netlink_route_socket pid=22654 comm=syz.8.4446 [ 1337.114008][T22656] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20004 [ 1337.221827][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1337.221844][ T30] audit: type=1400 audit(1764453479.221:1904): avc: denied { ioctl } for pid=22655 comm="syz.9.4447" path="socket:[94266]" dev="sockfs" ino=94266 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1337.419560][T22661] netlink: 'syz.2.4448': attribute type 1 has an invalid length. [ 1337.457121][T22661] bond1: entered promiscuous mode [ 1337.462731][T22661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1337.660894][T22661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1337.661172][T22664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1337.674847][T22664] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.682021][T22664] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.774517][T22661] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1337.806869][T22661] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1337.834919][T22664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1337.848658][T22672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1337.938953][T22656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1337.946485][T22656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1337.952624][T22661] bond1: (slave wireguard0): making interface the new active one [ 1337.960601][T22661] wireguard0: entered promiscuous mode [ 1337.985947][T22656] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1338.009800][T22656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1338.030926][T22661] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1338.046075][T22656] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1338.056715][T22664] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1338.114823][T22656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1338.121064][T22656] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1338.137341][T22664] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 1339.189812][T22691] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4456'. [ 1339.340228][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout [ 1339.404703][T22101] usbhid 6-1:0.0: can't add hid device: -71 [ 1339.410793][T22101] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1339.442089][T22101] usb 6-1: USB disconnect, device number 122 [ 1339.514102][T18984] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1339.688851][T18984] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1339.699042][T18984] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1340.003359][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 1340.104599][ T5133] Bluetooth: hci3: command 0x0405 tx timeout [ 1340.153898][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 1340.191321][T18984] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1340.208251][T18984] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1340.218262][T18984] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1340.236424][T18984] usb 10-1: Product: syz [ 1340.240954][T18984] usb 10-1: Manufacturer: syz [ 1340.245798][T18984] usb 10-1: SerialNumber: syz [ 1340.963069][T22713] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4460'. [ 1340.972164][T22713] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4460'. [ 1341.484253][T18984] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1341.522051][T18984] usb 10-1: USB disconnect, device number 25 [ 1341.545266][T18984] usblp0: removed [ 1341.573453][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4463'. [ 1341.765576][T22725] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4466'. [ 1342.074351][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 1342.153948][ T5133] Bluetooth: hci3: command 0x0405 tx timeout [ 1342.233999][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 1343.304612][T22750] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1343.337647][T22750] ip6tnl2: entered promiscuous mode [ 1343.510542][T22752] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1343.804089][T22756] binder: 22753:22756 ioctl c0306201 0 returned -14 [ 1343.811167][T22756] binder: 22753:22756 ioctl c0306201 200000000780 returned -11 [ 1343.822102][T22756] virtio-fs: tag not found [ 1344.829012][ T5814] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1345.023914][ T5814] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 1345.116080][ T5814] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.203550][ T5814] usb 3-1: config 8 has no interface number 0 [ 1345.318954][ T5814] usb 3-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1345.554454][ T5814] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1345.564323][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.585296][ T5814] usb 3-1: NFC: intf ffff888045ff1000 id ffffffff8f2de200 [ 1346.435960][ T5814] usb 3-1: USB disconnect, device number 4 [ 1347.187622][T22810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=22810 comm=syz.9.4489 [ 1347.200907][ T5814] IPVS: starting estimator thread 0... [ 1347.304283][T22814] IPVS: using max 44 ests per chain, 105600 per kthread [ 1347.314130][T18984] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1347.484015][T18984] usb 6-1: Using ep0 maxpacket: 8 [ 1347.498755][T18984] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1347.524495][T18984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.608470][T18984] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1347.629816][T18984] pvrusb2: ********** [ 1347.635108][T18984] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1347.654167][T18984] pvrusb2: Important functionality might not be entirely working. [ 1347.664013][T18984] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1347.676906][T18984] pvrusb2: ********** [ 1347.826438][ T2335] pvrusb2: Invalid write control endpoint [ 1348.075579][T22808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.111782][T22808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.187247][ T2335] pvrusb2: Invalid write control endpoint [ 1348.197648][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1348.216216][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1348.224745][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1348.242419][ T2335] pvrusb2: Device being rendered inoperable [ 1348.252458][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1348.364577][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1348.434336][ T2335] pvrusb2: Attached sub-driver cx25840 [ 1348.441071][ T5856] usb 6-1: USB disconnect, device number 123 [ 1348.447957][T22825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1348.462669][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1348.473528][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1348.483217][T22808] orangefs_mount: mount request failed with -4 [ 1349.169563][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4500'. [ 1349.180756][T22843] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1349.302097][T22844] binder: BINDER_SET_CONTEXT_MGR already set [ 1349.308511][T22844] binder: 22842:22844 ioctl 4018620d 200000004a80 returned -16 [ 1349.540868][ T30] audit: type=1400 audit(1764453491.541:1905): avc: denied { listen } for pid=22845 comm="syz.2.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1349.615656][ T30] audit: type=1400 audit(1764453491.611:1906): avc: denied { module_load } for pid=22849 comm="syz.5.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1349.924134][ T5856] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1350.126368][ T5856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.141724][ T5856] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1350.158091][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.179855][ T30] audit: type=1400 audit(1764453492.181:1907): avc: denied { map } for pid=22863 comm="syz.9.4505" path="socket:[94572]" dev="sockfs" ino=94572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1350.204862][ T5856] usb 6-1: config 0 descriptor?? [ 1350.213631][ T5856] pwc: Askey VC010 type 2 USB webcam detected. [ 1350.225629][ T30] audit: type=1400 audit(1764453492.181:1908): avc: denied { accept } for pid=22863 comm="syz.9.4505" path="socket:[94572]" dev="sockfs" ino=94572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1350.249625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.305701][T22874] netlink: 'syz.9.4508': attribute type 1 has an invalid length. [ 1350.342488][ T30] audit: type=1107 audit(1764453492.321:1909): pid=22867 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1350.386084][T22874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1350.477077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.488721][T22853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.746819][T22880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4509'. [ 1350.756557][T22880] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1350.824637][T22853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.283055][ T5856] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1351.293138][ T5856] pwc: recv_control_msg error -32 req 02 val 2700 [ 1351.302739][ T5856] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1351.318376][ T5856] pwc: recv_control_msg error -32 req 04 val 1000 [ 1351.329597][ T5856] pwc: recv_control_msg error -32 req 04 val 1300 [ 1351.339054][ T5856] pwc: recv_control_msg error -32 req 04 val 1400 [ 1351.351350][ T5856] pwc: recv_control_msg error -32 req 02 val 2000 [ 1351.362788][ T5856] pwc: recv_control_msg error -32 req 02 val 2100 [ 1351.374413][ T5856] pwc: recv_control_msg error -32 req 04 val 1500 [ 1351.389889][ T5856] pwc: recv_control_msg error -32 req 02 val 2500 [ 1351.401643][ T5856] pwc: recv_control_msg error -32 req 02 val 2400 [ 1351.686837][ T5856] pwc: recv_control_msg error -71 req 02 val 2900 [ 1351.700397][ T5856] pwc: recv_control_msg error -71 req 02 val 2800 [ 1351.709909][ T5856] pwc: recv_control_msg error -71 req 04 val 1100 [ 1351.716853][ T5856] pwc: recv_control_msg error -71 req 04 val 1200 [ 1351.748817][ T5856] pwc: Registered as video103. [ 1351.776690][ T5856] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input62 [ 1351.809978][ T5856] usb 6-1: USB disconnect, device number 124 [ 1352.000169][T22892] FAULT_INJECTION: forcing a failure. [ 1352.000169][T22892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.013693][T22892] CPU: 0 UID: 0 PID: 22892 Comm: syz.9.4512 Not tainted syzkaller #0 PREEMPT(full) [ 1352.013718][T22892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1352.013729][T22892] Call Trace: [ 1352.013736][T22892] [ 1352.013743][T22892] dump_stack_lvl+0x16c/0x1f0 [ 1352.013766][T22892] should_fail_ex+0x512/0x640 [ 1352.013792][T22892] _copy_from_user+0x2e/0xd0 [ 1352.013819][T22892] copy_msghdr_from_user+0x98/0x160 [ 1352.013844][T22892] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1352.013872][T22892] ? kfree+0x252/0x6d0 [ 1352.013897][T22892] ? ___sys_recvmsg+0xb8/0x1a0 [ 1352.013920][T22892] ? ___sys_recvmsg+0xc6/0x1a0 [ 1352.013946][T22892] ___sys_recvmsg+0xdb/0x1a0 [ 1352.013971][T22892] ? __pfx____sys_recvmsg+0x10/0x10 [ 1352.014010][T22892] ? __pfx___might_resched+0x10/0x10 [ 1352.014040][T22892] do_recvmmsg+0x2fe/0x750 [ 1352.014068][T22892] ? __pfx_do_recvmmsg+0x10/0x10 [ 1352.014098][T22892] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1352.014126][T22892] ? __fget_files+0x20e/0x3c0 [ 1352.014165][T22892] __x64_sys_recvmmsg+0x22a/0x280 [ 1352.014192][T22892] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1352.014225][T22892] do_syscall_64+0xcd/0xfa0 [ 1352.014246][T22892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.014264][T22892] RIP: 0033:0x7faa3918f749 [ 1352.014281][T22892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1352.014298][T22892] RSP: 002b:00007faa3a0d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1352.014316][T22892] RAX: ffffffffffffffda RBX: 00007faa393e6090 RCX: 00007faa3918f749 [ 1352.014328][T22892] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000005 [ 1352.014339][T22892] RBP: 00007faa3a0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.014350][T22892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.014361][T22892] R13: 00007faa393e6128 R14: 00007faa393e6090 R15: 00007fff4738e658 [ 1352.014385][T22892] [ 1353.589868][ T30] audit: type=1400 audit(1764453495.591:1910): avc: denied { setattr } for pid=22909 comm="syz.8.4519" path="socket:[94631]" dev="sockfs" ino=94631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1354.548888][T22914] bridge1: entered promiscuous mode [ 1355.899992][T22936] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1356.909782][T22945] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1356.975249][T22946] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1357.300750][T22950] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1358.754241][T22970] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4533'. [ 1359.350886][ T5814] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1359.971442][T22984] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 1360.035104][ T5814] usb 6-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1360.049508][ T5814] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1360.061641][ T5814] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1360.074162][ T5814] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1360.106772][ T5814] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1360.207610][ T5814] usb 6-1: Manufacturer: syz [ 1360.212241][ T5814] usb 6-1: SerialNumber: syz [ 1360.562366][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.644409][ T5814] yealink 6-1:36.0: invalid payload size 0, expected 16 [ 1360.774380][ T5814] input: Yealink usb-p1k as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:36.0/input/input64 [ 1360.889369][T22998] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1361.771426][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 1361.778428][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 1361.785387][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 1361.792318][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 1361.799230][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 1361.806137][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 1361.813050][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 1361.819954][ C0] yealink 6-1:36.0: urb_ctl_callback - urb status -71 [ 1361.826699][ C0] yealink 6-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1361.845125][ T5814] usb 6-1: USB disconnect, device number 125 [ 1362.195494][ T30] audit: type=1107 audit(1764453504.191:1911): pid=23000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1363.658599][T23031] overlayfs: missing 'lowerdir' [ 1363.999803][ T5856] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1364.012736][T23034] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1364.143889][ T5856] usb 3-1: device descriptor read/64, error -71 [ 1364.404174][ T5856] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1365.230395][T23045] SELinux: failed to load policy [ 1365.244049][ T5856] usb 3-1: device descriptor read/64, error -71 [ 1365.354425][ T5856] usb usb3-port1: attempt power cycle [ 1365.402362][ T30] audit: type=1107 audit(1764453507.401:1912): pid=23046 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1365.723938][ T5856] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1365.913995][T18984] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1365.984519][ T5856] usb 3-1: device descriptor read/8, error -71 [ 1366.083878][T18984] usb 10-1: Using ep0 maxpacket: 32 [ 1366.101943][T18984] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1366.114206][T18984] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.124123][T18984] usb 10-1: Product: syz [ 1366.128352][T18984] usb 10-1: Manufacturer: syz [ 1366.133285][T18984] usb 10-1: SerialNumber: syz [ 1366.144909][T18984] usb 10-1: config 0 descriptor?? [ 1366.152664][T18984] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1366.246818][ T5856] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1366.275930][ T5856] usb 3-1: device descriptor read/8, error -71 [ 1366.402745][ T5856] usb usb3-port1: unable to enumerate USB device [ 1366.873434][T23088] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20004 [ 1367.114880][ T9338] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1367.632610][ T30] audit: type=1400 audit(1764453509.631:1913): avc: denied { bind } for pid=23058 comm="syz.9.4562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1367.658119][ T9338] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1367.672995][ T9338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.691629][ T9338] usb 6-1: Product: syz [ 1367.698965][ T9338] usb 6-1: Manufacturer: syz [ 1367.708997][ T9338] usb 6-1: SerialNumber: syz [ 1367.940635][T18984] gspca_stk1135: reg_w 0xf err -110 [ 1367.948291][T23098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.948485][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.966213][T18984] gspca_stk1135: Sensor write failed [ 1367.972547][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1367.979267][T23098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.988461][T18984] gspca_stk1135: Sensor write failed [ 1367.996065][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1368.002524][T18984] gspca_stk1135: Sensor read failed [ 1368.021073][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1368.319842][ T9338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1368.320837][T18984] gspca_stk1135: Sensor read failed [ 1368.339740][T18984] gspca_stk1135: Detected sensor type unknown (0x0) [ 1368.378502][ T9338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1368.389484][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1368.389520][T18984] gspca_stk1135: Sensor read failed [ 1368.389651][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1368.389678][T18984] gspca_stk1135: Sensor read failed [ 1368.389807][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1368.389833][T18984] gspca_stk1135: Sensor write failed [ 1368.389963][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1368.389990][T18984] gspca_stk1135: Sensor write failed [ 1368.390196][T18984] stk1135 10-1:0.0: probe with driver stk1135 failed with error -110 [ 1368.397169][ T9338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1368.459215][ T9338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1368.469662][ T9338] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1368.483794][ T9338] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1368.520615][ T9338] usb 6-1: USB disconnect, device number 126 [ 1368.704258][ T5814] usb 10-1: USB disconnect, device number 26 [ 1368.710611][T23061] delete_channel: no stack [ 1369.685802][T23133] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4585'. [ 1371.290140][ T30] audit: type=1800 audit(1764453513.261:1914): pid=23143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4588" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1371.622574][ T30] audit: type=1326 audit(1764453513.531:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1371.726954][ T30] audit: type=1326 audit(1764453513.531:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1371.802666][ T30] audit: type=1326 audit(1764453513.531:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1371.882494][T23166] FAULT_INJECTION: forcing a failure. [ 1371.882494][T23166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1371.977729][T23176] FAULT_INJECTION: forcing a failure. [ 1371.977729][T23176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1371.990905][T23176] CPU: 0 UID: 0 PID: 23176 Comm: syz.5.4599 Not tainted syzkaller #0 PREEMPT(full) [ 1371.990930][T23176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1371.990941][T23176] Call Trace: [ 1371.990947][T23176] [ 1371.990955][T23176] dump_stack_lvl+0x16c/0x1f0 [ 1371.990976][T23176] should_fail_ex+0x512/0x640 [ 1371.991002][T23176] _copy_from_user+0x2e/0xd0 [ 1371.991031][T23176] copy_msghdr_from_user+0x98/0x160 [ 1371.991056][T23176] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1371.991086][T23176] ? __lock_acquire+0x622/0x1c90 [ 1371.991109][T23176] ___sys_recvmsg+0xdb/0x1a0 [ 1371.991134][T23176] ? __pfx____sys_recvmsg+0x10/0x10 [ 1371.991160][T23176] ? find_held_lock+0x2b/0x80 [ 1371.991199][T23176] do_recvmmsg+0x2fe/0x750 [ 1371.991226][T23176] ? __pfx_do_recvmmsg+0x10/0x10 [ 1371.991255][T23176] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1371.991281][T23176] ? __fget_files+0x20e/0x3c0 [ 1371.991298][T23176] ? rcu_watching_snap_stopped_since+0xb0/0x110 [ 1371.991329][T23176] __x64_sys_recvmmsg+0x22a/0x280 [ 1371.991356][T23176] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1371.991388][T23176] do_syscall_64+0xcd/0xfa0 [ 1371.991407][T23176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.991426][T23176] RIP: 0033:0x7f8e2298f749 [ 1371.991441][T23176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.991458][T23176] RSP: 002b:00007f8e237d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1371.991476][T23176] RAX: ffffffffffffffda RBX: 00007f8e22be6090 RCX: 00007f8e2298f749 [ 1371.991488][T23176] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000008 [ 1371.991499][T23176] RBP: 00007f8e237d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.991509][T23176] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1371.991520][T23176] R13: 00007f8e22be6128 R14: 00007f8e22be6090 R15: 00007ffeb4766e58 [ 1371.991545][T23176] [ 1372.264282][ T30] audit: type=1326 audit(1764453513.531:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1372.290981][T23166] CPU: 1 UID: 0 PID: 23166 Comm: syz.9.4597 Not tainted syzkaller #0 PREEMPT(full) [ 1372.291006][T23166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1372.291016][T23166] Call Trace: [ 1372.291022][T23166] [ 1372.291029][T23166] dump_stack_lvl+0x16c/0x1f0 [ 1372.291047][T23166] should_fail_ex+0x512/0x640 [ 1372.291063][T23166] _copy_from_user+0x2e/0xd0 [ 1372.291078][T23166] do_sock_getsockopt+0x3ca/0x440 [ 1372.291096][T23166] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1372.291112][T23166] ? __fget_files+0x204/0x3c0 [ 1372.291131][T23166] __sys_getsockopt+0x12f/0x260 [ 1372.291148][T23166] __x64_sys_getsockopt+0xbd/0x160 [ 1372.291161][T23166] ? do_syscall_64+0x91/0xfa0 [ 1372.291171][T23166] ? lockdep_hardirqs_on+0x7c/0x110 [ 1372.291181][T23166] do_syscall_64+0xcd/0xfa0 [ 1372.291192][T23166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.291204][T23166] RIP: 0033:0x7faa3918f749 [ 1372.291213][T23166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.291226][T23166] RSP: 002b:00007faa3a0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1372.291237][T23166] RAX: ffffffffffffffda RBX: 00007faa393e5fa0 RCX: 00007faa3918f749 [ 1372.291244][T23166] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 1372.291250][T23166] RBP: 00007faa3a0f7090 R08: 0000200000000400 R09: 0000000000000000 [ 1372.291256][T23166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.291263][T23166] R13: 00007faa393e6038 R14: 00007faa393e5fa0 R15: 00007fff4738e658 [ 1372.291282][T23166] [ 1372.487349][ T30] audit: type=1326 audit(1764453513.531:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1372.513153][ T30] audit: type=1326 audit(1764453513.531:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1372.537114][ T30] audit: type=1326 audit(1764453513.531:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1372.656807][ T30] audit: type=1326 audit(1764453513.531:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1372.727394][ T30] audit: type=1326 audit(1764453513.531:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19b918df90 code=0x7ffc0000 [ 1372.750851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.775122][ T30] audit: type=1326 audit(1764453513.531:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1372.798580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.805297][ T30] audit: type=1326 audit(1764453513.531:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1372.828733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.836860][ T30] audit: type=1326 audit(1764453513.531:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1372.912948][ T30] audit: type=1326 audit(1764453513.531:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1373.137387][T23181] binder: BINDER_SET_CONTEXT_MGR already set [ 1373.143519][T23181] binder: 23175:23181 ioctl 4018620d 200000000040 returned -16 [ 1373.158905][T23181] binder: 23175:23181 ioctl c0306201 0 returned -14 [ 1373.204855][ T30] audit: type=1326 audit(1764453513.531:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1373.228450][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.321282][ T30] audit: type=1326 audit(1764453513.531:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1373.367709][ T30] audit: type=1326 audit(1764453513.531:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1373.401606][ T30] audit: type=1326 audit(1764453513.541:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz.7.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1373.418957][T23171] lo speed is unknown, defaulting to 1000 [ 1374.112322][T23194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1374.128469][T18984] lo speed is unknown, defaulting to 1000 [ 1374.331219][T23172] lo speed is unknown, defaulting to 1000 [ 1375.354054][ T5856] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1375.513893][ T5856] usb 6-1: Using ep0 maxpacket: 16 [ 1375.532561][ T5856] usb 6-1: config 253 has an invalid interface number: 184 but max is 0 [ 1375.547474][ T5856] usb 6-1: config 253 has no interface number 0 [ 1375.634226][ T5856] usb 6-1: config 253 interface 184 has no altsetting 0 [ 1375.658765][ T5856] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1375.669953][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.721243][ T5856] usb 6-1: Product: syz [ 1375.725577][ T5856] usb 6-1: Manufacturer: syz [ 1375.730248][ T5856] usb 6-1: SerialNumber: syz [ 1375.816820][ T5856] go7007 6-1:253.184: probe with driver go7007 failed with error -12 [ 1376.007543][ T5961] usb 6-1: USB disconnect, device number 127 [ 1376.163910][ T5856] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1376.323919][ T5814] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1376.335312][ T5856] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1376.346218][ T5856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.357178][ T5856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.367022][ T5856] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1376.379979][ T5856] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1376.389415][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.399068][ T5856] usb 10-1: config 0 descriptor?? [ 1376.473870][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 1376.480397][ T5814] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1376.488893][ T5814] usb 3-1: config 179 has no interface number 0 [ 1376.495276][ T5814] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1376.519114][ T5814] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1376.530488][ T5814] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1376.541698][ T5814] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1376.553136][ T5814] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1376.569941][ T5814] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1376.579294][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.605114][T23218] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1377.152172][T23213] binder_alloc: 23212: binder_alloc_buf, no vma [ 1377.160560][ T5856] usbhid 10-1:0.0: can't add hid device: -71 [ 1377.167289][ T5856] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1377.185053][ T5856] usb 10-1: USB disconnect, device number 27 [ 1377.302774][T23218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.318339][T23218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.333131][T23218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.344427][T23218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.448292][ T5856] usb 3-1: USB disconnect, device number 9 [ 1378.448347][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1378.462700][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1378.508182][T23239] netlink: 'syz.7.4619': attribute type 1 has an invalid length. [ 1378.577468][T23239] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1378.589032][T23239] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1378.650422][T23244] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 1378.667483][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1378.667499][ T30] audit: type=1400 audit(1764453520.671:1964): avc: denied { write } for pid=23238 comm="syz.7.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1378.727268][T23239] bond3: (slave gretap1): making interface the new active one [ 1378.813052][T23239] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1379.719096][ T30] audit: type=1400 audit(1764453521.721:1965): avc: denied { execute } for pid=23255 comm="syz.9.4624" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1379.744562][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.853056][ T30] audit: type=1800 audit(1764453521.721:1966): pid=23257 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4624" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1382.591240][ T9338] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1382.667442][ T5133] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 1383.099822][ T9338] usb 10-1: device descriptor read/64, error -71 [ 1384.943889][ T9338] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1387.105049][T23317] mkiss: ax0: crc mode is auto. [ 1387.394100][T23314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1387.404114][T23314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1387.425782][T23314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1387.456680][T23314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1387.985689][T23337] input: syz0 as /devices/virtual/input/input65 [ 1388.713946][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout [ 1389.335433][ T30] audit: type=1107 audit(1764453531.331:1967): pid=23351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1389.430637][T23360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'. [ 1389.564654][ T5133] Bluetooth: hci3: command 0x0405 tx timeout [ 1389.565096][T19895] Bluetooth: hci1: command 0x0406 tx timeout [ 1389.571126][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 1389.827081][T23365] raw_sendmsg: syz.7.4655 forgot to set AF_INET. Fix it! [ 1389.886045][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4655'. [ 1390.398281][ T30] audit: type=1400 audit(1764453532.401:1968): avc: denied { map } for pid=23375 comm="syz.5.4660" path="socket:[96175]" dev="sockfs" ino=96175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1390.428560][ T30] audit: type=1400 audit(1764453532.431:1969): avc: denied { accept } for pid=23375 comm="syz.5.4660" path="socket:[96175]" dev="sockfs" ino=96175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1391.193908][T18984] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1391.381491][T18984] usb 6-1: Using ep0 maxpacket: 8 [ 1391.498862][T18984] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1391.509307][T18984] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1391.543222][T18984] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1391.574704][T18984] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1391.673881][T18984] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1391.711160][T18984] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1391.816378][T18984] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1391.828057][T18984] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1391.863122][T18984] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1391.875539][T18984] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1391.917686][T18984] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1391.936525][T18984] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1391.955568][T18984] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1391.967476][T18984] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1391.978701][T18984] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1392.020143][T18984] usb 6-1: string descriptor 0 read error: -22 [ 1392.026728][T18984] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1392.039207][T18984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.372801][T18984] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1392.528841][T23408] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1392.633958][ T9338] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1392.763913][ T9338] usb 3-1: device descriptor read/64, error -71 [ 1392.812692][ T30] audit: type=1107 audit(1764453534.811:1970): pid=23410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1392.907212][T18984] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1393.033944][ T9338] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1393.076094][T18984] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.090916][T18984] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.132297][T18984] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1393.146496][T18984] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1393.156590][T18984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.163902][ T9338] usb 3-1: device descriptor read/64, error -71 [ 1393.173869][T18984] usb 10-1: config 0 descriptor?? [ 1393.314424][ T9338] usb usb3-port1: attempt power cycle [ 1393.591554][T18984] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 1393.642104][T18984] plantronics 0003:047F:FFFF.001E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1393.654021][ T9338] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1393.684832][ T9338] usb 3-1: device descriptor read/8, error -71 [ 1393.993931][ T9338] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1394.015215][ T9338] usb 3-1: device descriptor read/8, error -71 [ 1394.125192][ T9338] usb usb3-port1: unable to enumerate USB device [ 1395.554690][ T9338] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1395.735419][ T5814] usb 10-1: USB disconnect, device number 30 [ 1395.809498][T15614] usb 6-1: USB disconnect, device number 2 [ 1395.825338][ T9338] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1395.839511][ T9338] usb 3-1: config 0 has no interface number 0 [ 1395.851066][ T9338] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1395.880744][ T9338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.889343][ T9338] usb 3-1: Product: syz [ 1395.893549][ T9338] usb 3-1: Manufacturer: syz [ 1395.898634][ T9338] usb 3-1: SerialNumber: syz [ 1395.911261][ T9338] usb 3-1: config 0 descriptor?? [ 1395.959702][ T30] audit: type=1400 audit(1764453537.961:1971): avc: denied { write } for pid=23448 comm="syz.5.4683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1396.274134][T15614] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1396.385633][ T9338] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1396.418547][ T9338] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1396.554173][ T9338] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1396.582296][ T9338] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1396.594622][ T9338] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1396.936049][T15614] usb 10-1: Using ep0 maxpacket: 32 [ 1396.956575][T15614] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1396.977833][T15614] usb 10-1: config 8 has an invalid interface number: 143 but max is 3 [ 1396.984976][ T9338] usb 3-1: USB disconnect, device number 14 [ 1397.012396][T15614] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.049910][T15614] usb 10-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 1397.055141][ T9338] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1397.069129][T15614] usb 10-1: config 8 has no interface number 0 [ 1397.089782][ T9338] keyspan 3-1:0.133: device disconnected [ 1397.092748][T15614] usb 10-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1397.146585][T15614] usb 10-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1397.189010][T15614] usb 10-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0 [ 1397.249896][T15614] usb 10-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1397.328309][T15614] usb 10-1: config 8 interface 143 has no altsetting 0 [ 1397.350875][T15614] usb 10-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 1397.400279][T15614] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.414128][T15614] usb 10-1: Product: syz [ 1397.418399][T15614] usb 10-1: Manufacturer: syz [ 1397.439881][T15614] usb 10-1: SerialNumber: syz [ 1397.875308][T15614] io_ti 10-1:8.143: required endpoints missing [ 1397.937892][T23477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4689'. [ 1398.176218][T23486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4693'. [ 1398.244188][T15614] usb 10-1: USB disconnect, device number 31 [ 1398.352789][T23492] FAULT_INJECTION: forcing a failure. [ 1398.352789][T23492] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.366600][T23492] CPU: 1 UID: 0 PID: 23492 Comm: syz.5.4695 Not tainted syzkaller #0 PREEMPT(full) [ 1398.366626][T23492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1398.366636][T23492] Call Trace: [ 1398.366642][T23492] [ 1398.366649][T23492] dump_stack_lvl+0x16c/0x1f0 [ 1398.366670][T23492] should_fail_ex+0x512/0x640 [ 1398.366694][T23492] should_failslab+0xc2/0x120 [ 1398.366713][T23492] __kmalloc_cache_noprof+0x72/0x780 [ 1398.366739][T23492] ? sctp_add_bind_addr+0xae/0x3f0 [ 1398.366763][T23492] ? __sctp_v6_cmp_addr+0x206/0x530 [ 1398.366784][T23492] ? sctp_add_bind_addr+0xae/0x3f0 [ 1398.366808][T23492] sctp_add_bind_addr+0xae/0x3f0 [ 1398.366836][T23492] sctp_copy_local_addr_list+0x349/0x550 [ 1398.366858][T23492] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1398.366878][T23492] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1398.366898][T23492] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1398.366925][T23492] sctp_bind_addr_copy+0xe0/0x530 [ 1398.366956][T23492] sctp_connect_new_asoc+0x1c9/0x770 [ 1398.366980][T23492] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1398.367019][T23492] sctp_sendmsg+0x1557/0x1e00 [ 1398.367045][T23492] ? __lock_acquire+0xb8a/0x1c90 [ 1398.367064][T23492] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1398.367092][T23492] ? __pfx_sock_has_perm+0x10/0x10 [ 1398.367134][T23492] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1398.367157][T23492] inet_sendmsg+0x11c/0x140 [ 1398.367181][T23492] __sys_sendto+0x43c/0x520 [ 1398.367204][T23492] ? __pfx___sys_sendto+0x10/0x10 [ 1398.367247][T23492] ? ksys_write+0x1ac/0x250 [ 1398.367265][T23492] ? __pfx_ksys_write+0x10/0x10 [ 1398.367287][T23492] __x64_sys_sendto+0xe0/0x1c0 [ 1398.367307][T23492] ? do_syscall_64+0x91/0xfa0 [ 1398.367324][T23492] ? lockdep_hardirqs_on+0x7c/0x110 [ 1398.367347][T23492] do_syscall_64+0xcd/0xfa0 [ 1398.367364][T23492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.367381][T23492] RIP: 0033:0x7f8e2298f749 [ 1398.367395][T23492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1398.367412][T23492] RSP: 002b:00007f8e237fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1398.367429][T23492] RAX: ffffffffffffffda RBX: 00007f8e22be5fa0 RCX: 00007f8e2298f749 [ 1398.367441][T23492] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1398.367452][T23492] RBP: 00007f8e237fa090 R08: 0000200000000340 R09: 000000000000001c [ 1398.367463][T23492] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000001 [ 1398.367474][T23492] R13: 00007f8e22be6038 R14: 00007f8e22be5fa0 R15: 00007ffeb4766e58 [ 1398.367501][T23492] [ 1398.656342][ T30] audit: type=1107 audit(1764453540.641:1972): pid=23485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1399.091522][T23509] 9pnet_fd: Insufficient options for proto=fd [ 1399.463203][T23513] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4702'. [ 1399.472481][T23513] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1399.941785][T23533] netlink: 'syz.9.4706': attribute type 12 has an invalid length. [ 1400.639243][T23540] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4708'. [ 1400.662968][T23538] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1400.694109][T23540] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4708'. [ 1401.723893][T15614] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1401.898716][T15614] usb 6-1: Using ep0 maxpacket: 8 [ 1401.912676][T15614] usb 6-1: config 1 has an invalid interface number: 199 but max is 6 [ 1402.031278][T15614] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1402.058361][T15614] usb 6-1: config 1 has no interface number 0 [ 1402.093964][T15614] usb 6-1: too many endpoints for config 1 interface 199 altsetting 193: 58, using maximum allowed: 30 [ 1402.546014][T15614] usb 6-1: config 1 interface 199 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 1402.686124][T15614] usb 6-1: config 1 interface 199 has no altsetting 0 [ 1402.714393][T15614] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1402.723456][T15614] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1402.820682][T15614] usb 6-1: Product: syz [ 1402.829419][T15614] usb 6-1: Manufacturer: syz [ 1402.834454][T15614] usb 6-1: SerialNumber: syz [ 1403.958161][T23593] binder: BINDER_SET_CONTEXT_MGR already set [ 1403.964745][T15614] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 1404.068468][T15614] visor 6-1:1.199: probe with driver visor failed with error -71 [ 1404.078385][T23593] binder: 23590:23593 ioctl 4018620d 200000000040 returned -16 [ 1404.106037][T15614] usb 6-1: USB disconnect, device number 3 [ 1404.374368][ T5133] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 1405.857601][ T5825] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 1405.952138][ T30] audit: type=1400 audit(1764453547.951:1973): avc: denied { connect } for pid=23602 comm="syz.9.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1406.617132][ T30] audit: type=1400 audit(1764453548.611:1974): avc: denied { setopt } for pid=23602 comm="syz.9.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1406.637001][T23633] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1406.914354][T23643] FAULT_INJECTION: forcing a failure. [ 1406.914354][T23643] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.927415][T23643] CPU: 0 UID: 0 PID: 23643 Comm: syz.7.4739 Not tainted syzkaller #0 PREEMPT(full) [ 1406.927438][T23643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1406.927449][T23643] Call Trace: [ 1406.927456][T23643] [ 1406.927464][T23643] dump_stack_lvl+0x16c/0x1f0 [ 1406.927487][T23643] should_fail_ex+0x512/0x640 [ 1406.927507][T23643] ? fs_reclaim_acquire+0xae/0x150 [ 1406.927531][T23643] should_failslab+0xc2/0x120 [ 1406.927554][T23643] __kmalloc_noprof+0xdd/0x880 [ 1406.927579][T23643] ? tomoyo_encode2+0x100/0x3e0 [ 1406.927605][T23643] ? tomoyo_encode2+0x100/0x3e0 [ 1406.927624][T23643] tomoyo_encode2+0x100/0x3e0 [ 1406.927647][T23643] tomoyo_encode+0x29/0x50 [ 1406.927667][T23643] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1406.927695][T23643] tomoyo_path_number_perm+0x245/0x580 [ 1406.927712][T23643] ? tomoyo_path_number_perm+0x237/0x580 [ 1406.927732][T23643] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1406.927779][T23643] ? hook_file_ioctl_common+0x145/0x410 [ 1406.927806][T23643] ? __rcu_read_unlock+0x2bc/0x550 [ 1406.927828][T23643] ? __fget_files+0x20e/0x3c0 [ 1406.927852][T23643] security_file_ioctl+0x9b/0x240 [ 1406.927875][T23643] __x64_sys_ioctl+0xb7/0x210 [ 1406.927902][T23643] do_syscall_64+0xcd/0xfa0 [ 1406.927921][T23643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.927940][T23643] RIP: 0033:0x7f19b918f749 [ 1406.927954][T23643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.927977][T23643] RSP: 002b:00007f19b73b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1406.927996][T23643] RAX: ffffffffffffffda RBX: 00007f19b93e6180 RCX: 00007f19b918f749 [ 1406.928008][T23643] RDX: 00002000000002c0 RSI: 00000000c02064b9 RDI: 0000000000000007 [ 1406.928019][T23643] RBP: 00007f19b73b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.928030][T23643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.928040][T23643] R13: 00007f19b93e6218 R14: 00007f19b93e6180 R15: 00007ffc6fffd158 [ 1406.928066][T23643] [ 1407.130441][T23643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1407.564907][T18984] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1408.002794][T18984] usb 3-1: config 0 has no interfaces? [ 1408.022747][T18984] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1408.193875][T18984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.233571][T18984] usb 3-1: config 0 descriptor?? [ 1408.641786][T23673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.650982][T23673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.175028][T18984] usb 3-1: USB disconnect, device number 15 [ 1409.398407][T23677] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4749'. [ 1410.157313][T23694] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4755'. [ 1410.183880][T23694] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4755'. [ 1410.275241][T22123] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1410.290913][T23698] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1410.434068][T22123] usb 3-1: Using ep0 maxpacket: 16 [ 1410.443650][T22123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.463061][T22123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.498663][T22123] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1410.511861][T22123] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1410.521189][T22123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.538756][T22123] usb 3-1: config 0 descriptor?? [ 1410.971006][T22123] input: HID 0955:7214 Haptics as /devices/virtual/input/input67 [ 1411.037789][T22123] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 1411.051300][T22123] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1411.188706][T23690] random: crng reseeded on system resumption [ 1411.196919][ T30] audit: type=1400 audit(1764453553.191:1975): avc: denied { ioctl } for pid=23689 comm="syz.2.4754" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1411.220488][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.552218][ T5814] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1411.568708][ T9338] usb 3-1: USB disconnect, device number 16 [ 1411.576521][ T5814] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1411.600637][ T5814] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1411.624255][ T5814] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1411.688738][T23714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4761'. [ 1411.704248][T23714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.789801][T23714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.897111][ T30] audit: type=1326 audit(1764453553.901:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23712 comm="syz.8.4762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bba78f749 code=0x0 [ 1411.964035][ T5814] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1412.118538][ T5814] usb 10-1: config 0 has no interfaces? [ 1412.125132][ T5814] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1412.135048][ T5814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.149541][ T5814] usb 10-1: config 0 descriptor?? [ 1412.598958][T23726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.609923][T23726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.891195][T15614] usb 10-1: USB disconnect, device number 32 [ 1413.064202][T23741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23741 comm=syz.7.4768 [ 1413.098485][ T30] audit: type=1400 audit(1764453555.091:1977): avc: denied { connect } for pid=23735 comm="syz.8.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1413.152270][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4768'. [ 1415.383899][T15614] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1415.783892][T15614] usb 6-1: Using ep0 maxpacket: 8 [ 1415.812648][T15614] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.840875][T15614] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1415.888777][T15614] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1415.899313][T15614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.924678][T23790] x_tables: ip6_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 0 [ 1415.934643][T15614] usb 6-1: Product: syz [ 1415.948071][T15614] usb 6-1: Manufacturer: syz [ 1415.961255][T15614] usb 6-1: SerialNumber: syz [ 1415.986655][T15614] usb 6-1: config 0 descriptor?? [ 1415.992765][T23792] erspan0: entered promiscuous mode [ 1416.000009][T23792] erspan0: entered allmulticast mode [ 1416.002110][T15614] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1416.284409][T23798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1416.370825][ T2335] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1416.380091][T15614] usb 6-1: USB disconnect, device number 4 [ 1416.390933][ T2335] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1416.777484][T23806] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4786'. [ 1417.182290][ T30] audit: type=1107 audit(1764453559.141:1978): pid=23811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1417.697588][T23824] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1418.341122][T23834] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1419.496001][T23845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1422.006462][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.267696][T23875] siw: device registration error -23 [ 1422.923953][ T5814] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1423.076985][ T5814] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1423.086792][ T5814] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1423.100600][ T5814] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1423.109961][ T5814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.121958][ T5814] usb 10-1: Product: syz [ 1423.127153][ T5814] usb 10-1: Manufacturer: syz [ 1423.131855][ T5814] usb 10-1: SerialNumber: syz [ 1423.136626][ T9338] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1423.146743][ T5814] usb 10-1: config 0 descriptor?? [ 1423.182321][T23893] IPVS: Scheduler module ip_vs_sip not found [ 1423.208496][T23894] IPVS: Scheduler module ip_vs_sip not found [ 1423.314833][ T9338] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1423.344353][ T9338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.352656][ T9338] usb 3-1: Product: syz [ 1423.368219][ T9338] usb 3-1: Manufacturer: syz [ 1423.398800][ T9338] usb 3-1: SerialNumber: syz [ 1423.457492][ T9338] usb 3-1: config 0 descriptor?? [ 1423.538243][ T9338] hub 3-1:0.0: bad descriptor, ignoring hub [ 1423.551543][ T9338] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1423.683287][ T9338] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1423.702614][T23901] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4816'. [ 1423.724316][T23901] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4816'. [ 1423.799970][ T9338] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1423.834347][ T9338] dib0700: firmware download failed at 7 with -22 [ 1424.155013][ T30] audit: type=1400 audit(1764453566.161:1979): avc: denied { setopt } for pid=23907 comm="syz.5.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1424.531259][ T30] audit: type=1400 audit(1764453566.531:1980): avc: denied { mounton } for pid=23911 comm="syz.5.4820" path="/dev/sequencer2" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1424.532475][T18984] kernel write not supported for file /dsp (pid: 18984 comm: kworker/1:1) [ 1425.395917][T23923] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4823'. [ 1425.404921][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4823'. [ 1425.435369][T23926] lo speed is unknown, defaulting to 1000 [ 1425.564032][T23928] netlink: 'syz.5.4824': attribute type 10 has an invalid length. [ 1425.585843][ T5814] usb 10-1: USB disconnect, device number 33 [ 1425.598985][T23928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1425.608909][T23928] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1425.617922][T23930] netlink: 'syz.5.4824': attribute type 10 has an invalid length. [ 1425.648632][T23930] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4824'. [ 1425.659212][T23930] batadv0: entered promiscuous mode [ 1425.680946][T23930] batadv0: entered allmulticast mode [ 1425.690345][T23930] bond0: (slave batadv0): Releasing backup interface [ 1425.743744][T23930] bridge0: port 3(batadv0) entered blocking state [ 1425.753266][T23930] bridge0: port 3(batadv0) entered disabled state [ 1426.111929][ T9338] usb 3-1: USB disconnect, device number 17 [ 1426.123738][ T8774] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1426.133039][ T8774] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1426.309418][ T30] audit: type=1400 audit(1764453568.301:1981): avc: denied { accept } for pid=23934 comm="syz.2.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1426.854025][ T9338] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1427.004015][ T9338] usb 3-1: device descriptor read/64, error -71 [ 1427.244159][ T9338] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1427.384021][ T9338] usb 3-1: device descriptor read/64, error -71 [ 1427.504238][ T9338] usb usb3-port1: attempt power cycle [ 1427.812026][T22123] IPVS: starting estimator thread 0... [ 1427.894049][ T9338] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1427.955942][ T9338] usb 3-1: device descriptor read/8, error -71 [ 1427.985014][T23947] IPVS: using max 41 ests per chain, 98400 per kthread [ 1428.298095][ T9338] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1428.430761][ T9338] usb 3-1: device descriptor read/8, error -71 [ 1428.499929][ T30] audit: type=1400 audit(1764453570.501:1982): avc: denied { create } for pid=23956 comm="syz.5.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1428.586008][ T9338] usb usb3-port1: unable to enumerate USB device [ 1428.594535][ T30] audit: type=1400 audit(1764453570.581:1983): avc: denied { mounton } for pid=23961 comm="syz.8.4834" path="/proc/849/cgroup" dev="proc" ino=98870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1428.634881][ T30] audit: type=1326 audit(1764453570.641:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2298f749 code=0x7ffc0000 [ 1428.714546][ T30] audit: type=1326 audit(1764453570.651:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2298f749 code=0x7ffc0000 [ 1428.738712][ T30] audit: type=1326 audit(1764453570.661:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e2298f749 code=0x7ffc0000 [ 1428.762353][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.768668][ T30] audit: type=1326 audit(1764453570.661:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2298f749 code=0x7ffc0000 [ 1428.792251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.800664][ T30] audit: type=1326 audit(1764453570.661:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8e2298f749 code=0x7ffc0000 [ 1431.214816][T24008] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1431.444006][ T5856] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1431.611611][ T5856] usb 10-1: Using ep0 maxpacket: 32 [ 1431.625783][ T5856] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.790684][ T5856] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1431.815029][ T5856] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1431.827133][ T5856] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1431.851260][ T5856] usb 10-1: Product: syz [ 1431.859189][ T5856] usb 10-1: Manufacturer: syz [ 1431.880644][ T5856] hub 10-1:4.0: USB hub found [ 1431.920292][T24014] mkiss: ax0: crc mode is auto. [ 1432.134627][ T5856] hub 10-1:4.0: 2 ports detected [ 1432.155740][T24020] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4849'. [ 1432.181344][T24018] cgroup: Unknown subsys name 'measure' [ 1433.464588][ T5856] usb 10-1: USB disconnect, device number 34 [ 1433.755543][T24056] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1434.183254][T24063] can0: slcan on ttyS3. [ 1434.265466][T24063] can0 (unregistered): slcan off ttyS3. [ 1434.573894][T22123] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1434.775829][T24127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4867'. [ 1435.029935][T22123] usb 10-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1435.043915][T22123] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.059295][T22123] usb 10-1: config 0 descriptor?? [ 1435.070170][T22123] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1435.908943][T22123] gspca_spca508: reg_read err -110 [ 1435.914817][T22123] gspca_spca508: reg_read err -32 [ 1435.920244][T22123] gspca_spca508: reg_read err -32 [ 1435.925671][T22123] gspca_spca508: reg_read err -32 [ 1435.931351][T22123] gspca_spca508: reg write: error -32 [ 1435.939120][T22123] spca508 10-1:0.0: probe with driver spca508 failed with error -32 [ 1435.974801][T22123] usb 10-1: USB disconnect, device number 35 [ 1436.375255][T24174] hpfs: hpfs_map_sector(): read error [ 1437.291581][T24189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1438.903247][T24206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4878'. [ 1438.914317][T24206] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1439.357732][T24212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4880'. [ 1439.383095][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1439.383115][ T30] audit: type=1400 audit(1764453581.351:2018): avc: denied { write } for pid=24211 comm="syz.7.4880" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1439.412639][ C0] vkms_vblank_simulate: vblank timer overrun [ 1440.198584][T24241] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4887'. [ 1440.377259][T24244] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4888'. [ 1440.993124][T24248] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4889'. [ 1441.194674][ T30] audit: type=1400 audit(1764453583.191:2019): avc: denied { read } for pid=24249 comm="syz.9.4890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1441.313731][ T30] audit: type=1107 audit(1764453583.311:2020): pid=24254 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1442.301655][T24268] 9pnet_fd: Insufficient options for proto=fd [ 1442.899185][T24285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4900'. [ 1443.061790][T24298] loop2: detected capacity change from 0 to 7 [ 1443.093952][T24298] Dev loop2: unable to read RDB block 7 [ 1443.107025][T24298] loop2: AHDI p1 p2 p3 [ 1443.113055][T24298] loop2: partition table partially beyond EOD, truncated [ 1443.123326][T24298] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1443.130997][T24298] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1443.275193][T24299] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4903'. [ 1443.504929][T24305] netlink: 'syz.8.4905': attribute type 1 has an invalid length. [ 1444.020113][ T30] audit: type=1326 audit(1764453586.021:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24309 comm="syz.8.4908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bba78f749 code=0x0 [ 1444.042969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.051691][T24318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4909'. [ 1444.117856][T24323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24323 comm=syz.7.4910 [ 1444.136591][T24323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4910'. [ 1444.145747][T24323] dummy0: left allmulticast mode [ 1444.151365][T24323] bridge0: port 3(dummy0) entered disabled state [ 1444.378884][T24323] bridge_slave_1: left allmulticast mode [ 1444.384874][T24323] bridge_slave_1: left promiscuous mode [ 1444.392269][T24323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.473006][T24323] bridge_slave_0: left allmulticast mode [ 1444.480274][T24323] bridge_slave_0: left promiscuous mode [ 1444.489356][T24323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.985223][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1445.520736][ T30] audit: type=1400 audit(1764453587.101:2022): avc: denied { bind } for pid=24332 comm="syz.9.4914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1445.552473][T24344] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4916'. [ 1446.998159][T24355] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1447.004374][T24355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1447.010490][T24355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1447.016627][T24355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1447.022895][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4920'. [ 1447.119612][ T30] audit: type=1107 audit(1764453589.121:2023): pid=24365 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1447.213602][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.261491][T24388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4928'. [ 1448.271612][T24388] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1448.497122][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 1449.174687][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 1449.188560][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 1449.194711][ T5825] Bluetooth: hci3: command 0x0405 tx timeout [ 1449.480867][T24408] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4938'. [ 1450.322392][T24421] ipvlan1: left promiscuous mode [ 1450.327589][T24421] ipvlan1: left allmulticast mode [ 1450.332721][T24421] veth0_vlan: left allmulticast mode [ 1451.205104][T24427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4942'. [ 1451.336230][T24432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4943'. [ 1452.929855][T24460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1453.092832][T24462] 9pnet_fd: Insufficient options for proto=fd [ 1453.143956][ T7920] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1453.326321][ T7920] usb 10-1: config 0 has no interfaces? [ 1453.335034][ T7920] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1453.349977][ T7920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.758506][ T7920] usb 10-1: config 0 descriptor?? [ 1453.814424][T24471] FAULT_INJECTION: forcing a failure. [ 1453.814424][T24471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.829809][T24471] CPU: 1 UID: 0 PID: 24471 Comm: syz.8.4956 Not tainted syzkaller #0 PREEMPT(full) [ 1453.829827][T24471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1453.829833][T24471] Call Trace: [ 1453.829838][T24471] [ 1453.829843][T24471] dump_stack_lvl+0x16c/0x1f0 [ 1453.829858][T24471] should_fail_ex+0x512/0x640 [ 1453.829874][T24471] _copy_from_user+0x2e/0xd0 [ 1453.829889][T24471] get_user_ifreq+0xf1/0x250 [ 1453.829907][T24471] sock_do_ioctl+0x16b/0x280 [ 1453.829918][T24471] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1453.829931][T24471] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1453.829948][T24471] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1453.829964][T24471] sock_ioctl+0x227/0x6b0 [ 1453.829975][T24471] ? __pfx_sock_ioctl+0x10/0x10 [ 1453.829985][T24471] ? hook_file_ioctl_common+0x145/0x410 [ 1453.830004][T24471] ? selinux_file_ioctl+0x180/0x270 [ 1453.830015][T24471] ? selinux_file_ioctl+0xb4/0x270 [ 1453.830027][T24471] ? __pfx_sock_ioctl+0x10/0x10 [ 1453.830038][T24471] __x64_sys_ioctl+0x18e/0x210 [ 1453.830054][T24471] do_syscall_64+0xcd/0xfa0 [ 1453.830066][T24471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.830077][T24471] RIP: 0033:0x7f0bba78f749 [ 1453.830086][T24471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.830097][T24471] RSP: 002b:00007f0bbb67c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.830108][T24471] RAX: ffffffffffffffda RBX: 00007f0bba9e5fa0 RCX: 00007f0bba78f749 [ 1453.830115][T24471] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000006 [ 1453.830122][T24471] RBP: 00007f0bbb67c090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.830128][T24471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.830134][T24471] R13: 00007f0bba9e6038 R14: 00007f0bba9e5fa0 R15: 00007fff5b625f08 [ 1453.830148][T24471] [ 1454.225067][T24472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.234087][T24472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.600401][ T9338] usb 10-1: USB disconnect, device number 36 [ 1454.705995][T24485] overlayfs: missing 'lowerdir' [ 1454.785902][T24486] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1454.933887][T24486] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1454.945186][T24486] overlayfs: failed to look up (tracing) for ino (-66) [ 1456.194005][ T7920] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1456.300962][ T5133] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 1457.363143][T24519] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1457.481819][ T7920] usb 3-1: config 0 has no interfaces? [ 1457.496573][ T7920] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1457.537991][ T7920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.585064][ T7920] usb 3-1: config 0 descriptor?? [ 1458.403238][T24530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.414512][T24530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.809771][ T7920] usb 3-1: USB disconnect, device number 22 [ 1461.528953][T24545] netlink: 'syz.8.4976': attribute type 1 has an invalid length. [ 1463.922494][T24603] PKCS7: Unknown OID: [4] 0.0 [ 1463.946113][T24603] PKCS7: Only support pkcs7_signedData type [ 1464.166568][T24612] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4996'. [ 1465.563663][T24631] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1465.677659][T24634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1467.098028][T24661] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5011'. [ 1467.109291][T24663] serio: Serial port ptm0 [ 1467.698190][ T30] audit: type=1326 audit(1764453609.701:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1467.756593][ T30] audit: type=1326 audit(1764453609.731:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1467.809996][ T30] audit: type=1326 audit(1764453609.731:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1467.854255][ T30] audit: type=1326 audit(1764453609.731:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1467.921751][ T30] audit: type=1326 audit(1764453609.731:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1467.995500][ T30] audit: type=1326 audit(1764453609.731:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1468.090000][T24675] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5015'. [ 1468.282056][ T30] audit: type=1326 audit(1764453609.731:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1468.364253][ T30] audit: type=1326 audit(1764453609.731:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1468.426104][T24681] FAULT_INJECTION: forcing a failure. [ 1468.426104][T24681] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.442663][ T30] audit: type=1326 audit(1764453609.731:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1468.572030][T24681] CPU: 1 UID: 0 PID: 24681 Comm: syz.2.5017 Not tainted syzkaller #0 PREEMPT(full) [ 1468.572056][T24681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1468.572066][T24681] Call Trace: [ 1468.572071][T24681] [ 1468.572079][T24681] dump_stack_lvl+0x16c/0x1f0 [ 1468.572094][T24681] should_fail_ex+0x512/0x640 [ 1468.572108][T24681] ? fs_reclaim_acquire+0xae/0x150 [ 1468.572122][T24681] should_failslab+0xc2/0x120 [ 1468.572136][T24681] __kmalloc_noprof+0xdd/0x880 [ 1468.572152][T24681] ? tomoyo_encode2+0x100/0x3e0 [ 1468.572168][T24681] ? tomoyo_encode2+0x100/0x3e0 [ 1468.572179][T24681] tomoyo_encode2+0x100/0x3e0 [ 1468.572193][T24681] tomoyo_encode+0x29/0x50 [ 1468.572209][T24681] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1468.572226][T24681] tomoyo_path_number_perm+0x245/0x580 [ 1468.572237][T24681] ? tomoyo_path_number_perm+0x237/0x580 [ 1468.572252][T24681] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1468.572263][T24681] ? find_held_lock+0x2b/0x80 [ 1468.572289][T24681] ? find_held_lock+0x2b/0x80 [ 1468.572302][T24681] ? hook_file_ioctl_common+0x145/0x410 [ 1468.572320][T24681] ? __fget_files+0x20e/0x3c0 [ 1468.572334][T24681] security_file_ioctl+0x9b/0x240 [ 1468.572348][T24681] __x64_sys_ioctl+0xb7/0x210 [ 1468.572365][T24681] do_syscall_64+0xcd/0xfa0 [ 1468.572377][T24681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.572389][T24681] RIP: 0033:0x7fb9b178f749 [ 1468.572399][T24681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1468.572409][T24681] RSP: 002b:00007fb9b26e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.572420][T24681] RAX: ffffffffffffffda RBX: 00007fb9b19e5fa0 RCX: 00007fb9b178f749 [ 1468.572426][T24681] RDX: 00002000000000c0 RSI: 00000000c0905664 RDI: 0000000000000003 [ 1468.572433][T24681] RBP: 00007fb9b26e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.572439][T24681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.572445][T24681] R13: 00007fb9b19e6038 R14: 00007fb9b19e5fa0 R15: 00007fffca17af28 [ 1468.572461][T24681] [ 1468.572696][T24681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1468.578234][ T30] audit: type=1326 audit(1764453609.731:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24668 comm="syz.7.5013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b918f749 code=0x7ffc0000 [ 1469.478973][T24689] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1472.060112][T24711] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1473.397760][T24707] netlink: 172 bytes leftover after parsing attributes in process `syz.8.5025'. [ 1473.406869][T24707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1474.893971][T24725] tipc: Started in network mode [ 1474.898869][T24725] tipc: Node identity 32837c99d805, cluster identity 4711 [ 1474.906199][T24725] tipc: Enabled bearer , priority 0 [ 1474.913859][T24725] syzkaller0: entered promiscuous mode [ 1474.919332][T24725] syzkaller0: entered allmulticast mode [ 1474.939981][T24725] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5029'. [ 1474.961069][T24725] tipc: Resetting bearer [ 1475.288217][T24724] tipc: Resetting bearer [ 1475.329474][T24724] tipc: Disabling bearer [ 1475.712306][T24741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1475.840125][T22123] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1476.417006][T22123] usb 10-1: Using ep0 maxpacket: 32 [ 1476.428038][T22123] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.439468][T22123] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1476.454153][T22123] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1476.466474][T22123] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1476.492079][T22123] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1476.506375][T22123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.515182][T22123] usb 10-1: Product: syz [ 1476.519564][T22123] usb 10-1: Manufacturer: syz [ 1476.524450][T22123] usb 10-1: SerialNumber: syz [ 1476.551809][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1476.578577][T22123] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input68 [ 1476.712191][T24745] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1476.798297][T22123] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1476.818369][T22123] (id 0x00) [ 1477.363963][T22123] rc_core: IR keymap rc-imon-pad not found [ 1477.370153][T22123] Registered IR keymap rc-empty [ 1477.375148][T22123] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1477.385794][T22123] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1477.401828][T22123] imon:send_packet: packet tx failed (-71) [ 1477.423951][T22123] imon 10-1:155.0: remote input dev register failed [ 1477.432742][T22123] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 1477.460010][T22123] imon 10-1:155.0: unable to initialize intf0, err 0 [ 1477.467007][T22123] imon:imon_probe: failed to initialize context! [ 1477.474072][T22123] imon 10-1:155.0: unable to register, err -19 [ 1477.483360][T22123] usb 10-1: USB disconnect, device number 37 [ 1477.727457][T24760] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1478.722321][ T2335] pvrusb2: request_firmware fatal error with code=-110 [ 1478.733978][ T2335] pvrusb2: Failure uploading firmware1 [ 1478.739584][ T2335] pvrusb2: Device initialization was not successful. [ 1478.748504][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1478.762613][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1478.772917][T24757] snd_dummy snd_dummy.0: control 0:1:0:syz1:0 is already present [ 1478.792622][T24757] pim6reg: entered allmulticast mode [ 1478.849126][T15614] pvrusb2: Device being rendered inoperable [ 1479.025100][T24766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5040'. [ 1479.658152][T24766] tipc: Started in network mode [ 1479.663003][T24766] tipc: Node identity , cluster identity 4711 [ 1480.092020][T24777] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5043'. [ 1480.105870][T24780] tipc: Started in network mode [ 1480.110865][T24780] tipc: Node identity 66360e5d3283, cluster identity 4711 [ 1480.132819][T24780] tipc: Enabled bearer , priority 0 [ 1480.245993][T24780] syzkaller0: entered promiscuous mode [ 1480.251621][T24780] syzkaller0: entered allmulticast mode [ 1480.258199][T24780] tipc: Resetting bearer [ 1480.317084][T24779] tipc: Resetting bearer [ 1480.354057][T24786] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1480.439996][T24790] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1481.119301][T24795] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1481.404134][T22123] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1481.567114][T22123] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1481.576621][T22123] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.587482][T22123] usb 10-1: config 0 descriptor?? [ 1481.595205][T22123] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1482.213433][ T30] audit: type=1400 audit(1764453624.211:2034): avc: denied { name_connect } for pid=24796 comm="syz.9.5050" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1482.299136][T22123] gp8psk: usb out operation failed. [ 1482.305329][T22123] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1482.316505][T22123] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1482.327763][T22123] usb 10-1: USB disconnect, device number 38 [ 1482.638718][T24779] tipc: Disabling bearer [ 1482.689813][ T5814] tipc: Node number set to 1421151837 [ 1483.557309][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.732849][T24817] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5056'. [ 1483.907314][T24829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5060'. [ 1483.917207][T24829] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5060'. [ 1484.411149][T24836] veth0: entered promiscuous mode [ 1484.420280][T24836] veth0_to_hsr: entered promiscuous mode [ 1484.819357][T24830] veth0_to_hsr: left promiscuous mode [ 1484.825157][T24830] veth0: left promiscuous mode [ 1484.866051][T24841] overlayfs: failed to get inode (-116) [ 1484.901946][T24841] overlayfs: failed to get inode (-116) [ 1484.927650][T24844] overlayfs: failed to get inode (-116) [ 1484.951385][T24844] overlayfs: failed to get inode (-116) [ 1484.958321][ T30] audit: type=1326 audit(1764453626.971:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.5.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2298f749 code=0x7fc00000 [ 1484.960525][T24843] SELinux: policydb magic number 0x80000000 does not match expected magic number 0xf97cff8c [ 1484.982499][ T30] audit: type=1326 audit(1764453626.971:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.5.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e2298f749 code=0x7fc00000 [ 1485.014047][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5062'. [ 1485.028245][T24843] SELinux: failed to load policy [ 1485.033540][ T30] audit: type=1326 audit(1764453626.971:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24820 comm="syz.5.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2298f749 code=0x7fc00000 [ 1485.066541][T24841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5062'. [ 1485.117293][T24847] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1487.410149][ T5133] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 1488.216936][T24881] tipc: Failed to obtain node identity [ 1488.222486][T24881] tipc: Enabling of bearer rejected, failed to enable media [ 1488.241903][ T30] audit: type=1400 audit(1764453630.241:2038): avc: denied { map } for pid=24869 comm="syz.2.5071" path="socket:[107127]" dev="sockfs" ino=107127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1488.454024][ T5814] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1489.483895][ T5814] usb 6-1: config 0 has no interfaces? [ 1489.533825][T24892] syz_tun: entered allmulticast mode [ 1489.542116][ T5814] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1489.572974][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.598594][ T5814] usb 6-1: config 0 descriptor?? [ 1489.602121][T24892] syz_tun: left allmulticast mode [ 1490.035125][T24907] ------------[ cut here ]------------ [ 1490.040605][T24907] DEBUG_LOCKS_WARN_ON(!test_bit(class_idx, lock_classes_in_use)) [ 1490.040692][T24907] WARNING: CPU: 1 PID: 24907 at kernel/locking/lockdep.c:5207 __lock_acquire+0x139f/0x1c90 [ 1490.058479][T24907] Modules linked in: [ 1490.062366][T24907] CPU: 1 UID: 0 PID: 24907 Comm: syz.7.5079 Not tainted syzkaller #0 PREEMPT(full) [ 1490.071809][T24907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1490.081860][T24907] RIP: 0010:__lock_acquire+0x139f/0x1c90 [ 1490.087520][T24907] Code: 41 80 7e 21 00 0f 88 0c fe ff ff 4c 8b 44 24 08 e9 c0 fc ff ff 90 48 c7 c6 78 95 b3 8d 48 c7 c7 28 1b 9f 8d e8 92 63 e2 ff 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 53 e2 08 03 89 c3 e8 8c 9f ff ff 85 [ 1490.107127][T24907] RSP: 0018:ffffc9000ca377f0 EFLAGS: 00010086 [ 1490.113194][T24907] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffc9001f9a1000 [ 1490.121168][T24907] RDX: 0000000000080000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 1490.129125][T24907] RBP: ffff88805196a480 R08: 0000000000000001 R09: 0000000000000000 [ 1490.137085][T24907] R10: 0000000000000000 R11: 000000000002bc40 R12: ffff88805196afb0 [ 1490.145045][T24907] R13: ffff88805196b000 R14: 0000000000000000 R15: 0000000000000000 [ 1490.153008][T24907] FS: 00007f19b6f916c0(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 1490.161936][T24907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1490.168524][T24907] CR2: 0000001b30d12ff8 CR3: 0000000033223000 CR4: 00000000003526f0 [ 1490.176500][T24907] Call Trace: [ 1490.179775][T24907] [ 1490.182706][T24907] ? dns_resolver_match_preparse+0x48/0x70 [ 1490.188522][T24907] lock_acquire+0x179/0x350 [ 1490.193020][T24907] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 1490.198637][T24907] ? __pfx___might_resched+0x10/0x10 [ 1490.203909][T24907] ? net_ctl_permissions+0x118/0x130 [ 1490.209179][T24907] down_write+0x92/0x200 [ 1490.213403][T24907] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 1490.219024][T24907] ? __pfx_down_write+0x10/0x10 [ 1490.223875][T24907] ? __pfx_net_ctl_permissions+0x10/0x10 [ 1490.229516][T24907] ? net_ctl_permissions+0x118/0x130 [ 1490.234810][T24907] kernfs_remove_by_name_ns+0x3d/0x110 [ 1490.240264][T24907] driver_remove_file+0x4a/0x60 [ 1490.245104][T24907] bus_remove_driver+0x224/0x2c0 [ 1490.250034][T24907] driver_unregister+0x76/0xb0 [ 1490.254786][T24907] comedi_device_detach_locked+0x12f/0xa50 [ 1490.260591][T24907] do_devconfig_ioctl+0x555/0x710 [ 1490.265628][T24907] ? __mutex_lock+0x1c5/0x1060 [ 1490.270391][T24907] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1490.275939][T24907] ? find_held_lock+0x2b/0x80 [ 1490.280615][T24907] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1490.286075][T24907] ? __flush_smp_call_function_queue+0x504/0x8c0 [ 1490.292395][T24907] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1490.298185][T24907] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1490.304158][T24907] ? do_vfs_ioctl+0x128/0x14f0 [ 1490.308911][T24907] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1490.313933][T24907] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1490.320767][T24907] ? hook_file_ioctl_common+0x145/0x410 [ 1490.326319][T24907] ? selinux_file_ioctl+0x180/0x270 [ 1490.331498][T24907] ? selinux_file_ioctl+0xb4/0x270 [ 1490.336592][T24907] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1490.342379][T24907] __x64_sys_ioctl+0x18e/0x210 [ 1490.347128][T24907] do_syscall_64+0xcd/0xfa0 [ 1490.351611][T24907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.357485][T24907] RIP: 0033:0x7f19b918f749 [ 1490.361878][T24907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.381473][T24907] RSP: 002b:00007f19b6f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.389865][T24907] RAX: ffffffffffffffda RBX: 00007f19b93e6270 RCX: 00007f19b918f749 [ 1490.397816][T24907] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 1490.405766][T24907] RBP: 00007f19b9213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1490.413718][T24907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.421674][T24907] R13: 00007f19b93e6308 R14: 00007f19b93e6270 R15: 00007ffc6fffd158 [ 1490.429630][T24907] [ 1490.432631][T24907] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1490.439892][T24907] CPU: 1 UID: 0 PID: 24907 Comm: syz.7.5079 Not tainted syzkaller #0 PREEMPT(full) [ 1490.449341][T24907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1490.459373][T24907] Call Trace: [ 1490.462630][T24907] [ 1490.465540][T24907] dump_stack_lvl+0x3d/0x1f0 [ 1490.470126][T24907] vpanic+0x640/0x6f0 [ 1490.474128][T24907] ? __lock_acquire+0x139f/0x1c90 [ 1490.479132][T24907] panic+0xca/0xd0 [ 1490.482842][T24907] ? __pfx_panic+0x10/0x10 [ 1490.487248][T24907] check_panic_on_warn+0xab/0xb0 [ 1490.492167][T24907] __warn+0xf6/0x3c0 [ 1490.496047][T24907] ? __pfx_vprintk_emit+0x10/0x10 [ 1490.501054][T24907] ? __lock_acquire+0x139f/0x1c90 [ 1490.506057][T24907] report_bug+0x3c3/0x580 [ 1490.510370][T24907] ? __lock_acquire+0x139f/0x1c90 [ 1490.515369][T24907] handle_bug+0x184/0x210 [ 1490.519677][T24907] exc_invalid_op+0x17/0x50 [ 1490.524158][T24907] asm_exc_invalid_op+0x1a/0x20 [ 1490.528985][T24907] RIP: 0010:__lock_acquire+0x139f/0x1c90 [ 1490.534593][T24907] Code: 41 80 7e 21 00 0f 88 0c fe ff ff 4c 8b 44 24 08 e9 c0 fc ff ff 90 48 c7 c6 78 95 b3 8d 48 c7 c7 28 1b 9f 8d e8 92 63 e2 ff 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 53 e2 08 03 89 c3 e8 8c 9f ff ff 85 [ 1490.554191][T24907] RSP: 0018:ffffc9000ca377f0 EFLAGS: 00010086 [ 1490.560254][T24907] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffc9001f9a1000 [ 1490.568204][T24907] RDX: 0000000000080000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 1490.576344][T24907] RBP: ffff88805196a480 R08: 0000000000000001 R09: 0000000000000000 [ 1490.584294][T24907] R10: 0000000000000000 R11: 000000000002bc40 R12: ffff88805196afb0 [ 1490.592254][T24907] R13: ffff88805196b000 R14: 0000000000000000 R15: 0000000000000000 [ 1490.600210][T24907] ? __warn_printk+0x1a5/0x350 [ 1490.604970][T24907] ? dns_resolver_match_preparse+0x48/0x70 [ 1490.610760][T24907] lock_acquire+0x179/0x350 [ 1490.615239][T24907] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 1490.620852][T24907] ? __pfx___might_resched+0x10/0x10 [ 1490.626126][T24907] ? net_ctl_permissions+0x118/0x130 [ 1490.631392][T24907] down_write+0x92/0x200 [ 1490.635614][T24907] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 1490.641227][T24907] ? __pfx_down_write+0x10/0x10 [ 1490.646058][T24907] ? __pfx_net_ctl_permissions+0x10/0x10 [ 1490.651672][T24907] ? net_ctl_permissions+0x118/0x130 [ 1490.656952][T24907] kernfs_remove_by_name_ns+0x3d/0x110 [ 1490.662389][T24907] driver_remove_file+0x4a/0x60 [ 1490.667221][T24907] bus_remove_driver+0x224/0x2c0 [ 1490.672143][T24907] driver_unregister+0x76/0xb0 [ 1490.676892][T24907] comedi_device_detach_locked+0x12f/0xa50 [ 1490.682684][T24907] do_devconfig_ioctl+0x555/0x710 [ 1490.687691][T24907] ? __mutex_lock+0x1c5/0x1060 [ 1490.692433][T24907] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1490.697968][T24907] ? find_held_lock+0x2b/0x80 [ 1490.702630][T24907] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1490.708079][T24907] ? __flush_smp_call_function_queue+0x504/0x8c0 [ 1490.714389][T24907] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1490.720174][T24907] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1490.726052][T24907] ? do_vfs_ioctl+0x128/0x14f0 [ 1490.730808][T24907] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1490.735816][T24907] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1490.742648][T24907] ? hook_file_ioctl_common+0x145/0x410 [ 1490.748181][T24907] ? selinux_file_ioctl+0x180/0x270 [ 1490.753358][T24907] ? selinux_file_ioctl+0xb4/0x270 [ 1490.758446][T24907] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1490.764239][T24907] __x64_sys_ioctl+0x18e/0x210 [ 1490.768996][T24907] do_syscall_64+0xcd/0xfa0 [ 1490.773478][T24907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.779349][T24907] RIP: 0033:0x7f19b918f749 [ 1490.783742][T24907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.803330][T24907] RSP: 002b:00007f19b6f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.811720][T24907] RAX: ffffffffffffffda RBX: 00007f19b93e6270 RCX: 00007f19b918f749 [ 1490.819666][T24907] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 1490.827613][T24907] RBP: 00007f19b9213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1490.835559][T24907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.843507][T24907] R13: 00007f19b93e6308 R14: 00007f19b93e6270 R15: 00007ffc6fffd158 [ 1490.851460][T24907] [ 1490.854725][T24907] Kernel Offset: disabled [ 1490.859024][T24907] Rebooting in 86400 seconds..