last executing test programs: 3m20.255365199s ago: executing program 0 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) 3m20.031624116s ago: executing program 0 (id=168): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x3d, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x4}, {0x6}]}) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 3m18.383741325s ago: executing program 1 (id=170): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi3\x00', 0x141000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000163640)=[{0xa000005, 0x975, &(0x7f0000000340)=[0xffff, 0x9, 0xffffffff, 0xa, 0x5, 0xda6, 0xfffffe01, 0x40000000, 0x8, 0x802, 0x6a1, 0x26, 0x5, 0x40, 0xff, 0x8000000, 0x7, 0x1, 0x4, 0xffff, 0x1badca51, 0x1, 0x9, 0x8, 0x993b000, 0x778e, 0x251, 0x4, 0x4, 0x4b3ae158, 0x0, 0x59a8, 0x3, 0x0, 0x1, 0x526b, 0x8, 0x5, 0x4, 0x4, 0x0, 0x4, 0x1, 0x56e, 0x0, 0x9, 0x3, 0x1, 0x2, 0x6eb127be, 0x1, 0x4, 0x13b1d2a9, 0x4, 0xe, 0x2, 0xe, 0xffff, 0x2800000, 0x2, 0x8, 0x9, 0x9, 0x7, 0x80, 0x7fffffff, 0xf, 0x1, 0x9, 0x2, 0xd95, 0x0, 0x9, 0xf, 0x3, 0x7f, 0x75, 0xa, 0x5, 0x3, 0x0, 0x400, 0x7, 0x25, 0x6, 0x3, 0x7, 0x200, 0x5, 0xfffffffb, 0x81, 0x2, 0x2, 0x6, 0x4eed, 0x1, 0x4, 0x80000000, 0x5, 0x0, 0x7fffffff, 0x7, 0x8, 0x1, 0x2f, 0x3, 0xffffffff, 0x3, 0x8, 0xe000, 0x6, 0x2, 0x7ff, 0x948, 0x7, 0x1, 0x10000, 0x0, 0x5, 0x27, 0x1ff, 0xe, 0x4ca7, 0x9, 0x7fff, 0x7, 0x1, 0x7, 0x200, 0x1, 0xff, 0x401, 0x9, 0xfffffffe, 0x5, 0x5, 0x3, 0xfffffffb, 0x1000, 0xf, 0xd93, 0x8, 0xff, 0x6, 0x7, 0x4, 0x5, 0x3, 0x6, 0x20e6, 0x2, 0x1, 0x3, 0xffffffef, 0x9, 0x7, 0xc, 0x0, 0x4, 0x0, 0x8, 0xc, 0xb, 0x29fa95ca, 0x4, 0x6, 0x401, 0xf, 0x8, 0x9, 0x1, 0x7fff, 0x5, 0x4, 0xcc4b, 0x1, 0xd0e6, 0x9, 0x5, 0x53b4c9f7, 0xe50, 0x3, 0x49, 0x4, 0x4, 0xfffffff0, 0x200, 0x4, 0x200, 0x7, 0x2ca6a15e, 0xffffff6b, 0x400, 0x10, 0x400, 0xfffffff9, 0x9, 0x5, 0x9, 0x8, 0x6, 0x76, 0x624, 0x8, 0x4, 0x0, 0x6, 0x2, 0x400, 0x6, 0x1c, 0x1, 0x5, 0x4, 0x2, 0xc, 0x1, 0x8, 0xe, 0x8, 0xbe46, 0x4, 0xfffffffb, 0x10, 0x6, 0xb1, 0xb4, 0xf86b, 0x7ff, 0xfffff646, 0x0, 0x8, 0x2, 0x4b6, 0xffff605b, 0x2, 0x3, 0xfff, 0x1ff, 0x0, 0x1, 0x3, 0x0, 0xa1, 0xfffffffa, 0x1000, 0xadc, 0x4, 0x44c55aab, 0x5, 0x800, 0x7ff, 0x3, 0x5, 0x2, 0x3ff, 0x5, 0x8, 0x2, 0x6, 0xa, 0x6, 0x6, 0xddc, 0x4, 0x400, 0x0, 0x1, 0x100, 0x7, 0x1d, 0x24, 0x9, 0x1, 0x6, 0x40, 0x5, 0xffffffff, 0x312, 0xd, 0x4d, 0x8, 0x80000001, 0x9, 0x1c, 0x8, 0xf, 0xfffff3e5, 0x7a42, 0x7, 0x9, 0x0, 0x18, 0x0, 0x5, 0x8, 0xc, 0x8, 0x8, 0xfffffffc, 0x3, 0x0, 0x53c, 0x1, 0x3, 0x9, 0xd, 0xa, 0x3, 0x2, 0x8, 0x1, 0x1, 0x6, 0x8, 0x3, 0x153, 0x4, 0xffff, 0x8001, 0x100, 0x401, 0x800, 0x4, 0x6, 0x7, 0x2, 0x5, 0xa, 0x6, 0x5, 0x127a, 0xe19, 0xf1, 0x7, 0x4, 0x2, 0xffff, 0x6, 0x9, 0x0, 0x401, 0x4, 0x4, 0x8, 0x9, 0x0, 0x5, 0x1, 0xc3c97c7, 0xfffffff0, 0x5, 0xff, 0x8, 0x0, 0x8, 0x4, 0x9, 0x5816, 0xd5bb, 0x0, 0x2, 0x6, 0x4, 0x1, 0x1, 0x119c, 0x6, 0x8001, 0x10, 0xb017, 0xfffffff1, 0x9, 0x2, 0x0, 0xff, 0x1, 0x1, 0x7, 0x2, 0xfffffffb, 0x101, 0x5, 0x2, 0x8000, 0x86, 0x10000, 0xa, 0x7a, 0xfffffffb, 0x9, 0x64698b05, 0xcd, 0x1, 0x2, 0xfffffff8, 0x6, 0x100, 0x2a1, 0x7, 0xa, 0x7, 0x8, 0x7, 0x6, 0x6, 0x59b, 0xfffffff9, 0x8, 0x7f, 0x2, 0x6c5b6fad, 0x9, 0x400, 0x877, 0x40000, 0x10, 0x3, 0xfff, 0x9, 0x8000, 0x8001, 0xbd0e, 0x8, 0x10000, 0xb26, 0x23a1, 0x400, 0x4, 0x2183, 0xb64, 0x3, 0x10000, 0x10000, 0xf, 0x5, 0x9, 0x0, 0x3, 0x1, 0x3ff, 0x7fff, 0xd65, 0x2, 0x1, 0x4, 0x2, 0x80000000, 0x524, 0x9, 0x10000, 0x3ff, 0x3, 0xab, 0x7, 0x81, 0x9, 0x7, 0x8, 0xfffffffc, 0x6, 0x9, 0x7, 0x5, 0x40, 0x7cd, 0x468, 0xfffffa15, 0x37f, 0x4f, 0x8, 0x1ff, 0x1, 0x3ff, 0x1, 0x40, 0x2, 0xfffffff8, 0x5, 0x9, 0x3, 0x2, 0x9, 0x10, 0x72, 0x7, 0xfff, 0x80000000, 0x8, 0x4, 0x7, 0x5, 0x10, 0x5, 0x7, 0xffff, 0x8, 0x101, 0x3, 0x0, 0x5db7, 0xb88, 0x4, 0x8001, 0x11c, 0x10001, 0xff, 0xfffffff4, 0x2, 0x4d8c, 0x9, 0xd37d, 0x1, 0x2, 0x3, 0x5, 0x7, 0x8, 0xffff, 0x6, 0x3, 0x3ff, 0x9, 0xc, 0x0, 0x3, 0x10000, 0x80000000, 0x2, 0x200, 0x7744, 0x7ff, 0x8000, 0x2, 0x2, 0xbf61, 0x2, 0x18000000, 0x7ff, 0x8, 0x4, 0x4, 0xe, 0x7f, 0x0, 0x1, 0x7, 0x1f9, 0x7f, 0xfffffff9, 0x7, 0x78, 0x80000000, 0xf, 0x7, 0x8d66, 0x80000000, 0x1, 0x6, 0x380000, 0x0, 0x7, 0x1, 0x1, 0x2, 0x3, 0x4018, 0xcb95, 0xfffffffa, 0x3, 0xfffffe01, 0x2605e471, 0x8, 0x100, 0x7, 0x1, 0x8, 0xffffface, 0x5, 0x6, 0x6, 0x0, 0x2, 0x6, 0x2, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x297, 0x80000001, 0x8d5, 0x4, 0xf, 0x8, 0x7, 0x2, 0xffffffff, 0x10, 0x8, 0x2706, 0x1, 0x4, 0x8, 0x3, 0x4a557fe4, 0x5, 0x2, 0x3, 0x6, 0x7d30bde8, 0x9, 0x6, 0x7fff, 0xff, 0x0, 0x1, 0x0, 0x200, 0x3, 0x1, 0x800, 0xfffffffd, 0x8, 0x6, 0x5, 0x70, 0x3232, 0x4, 0xf, 0x3, 0x9, 0xeff, 0x5, 0xfffffe00, 0x6, 0x3, 0x6, 0x28, 0x4, 0x2, 0x7, 0x9, 0x3, 0x9, 0x100, 0x2, 0xfffffff1, 0x5, 0x1, 0xb, 0x0, 0x800, 0x9, 0x8001, 0x9, 0xec, 0x3, 0x4, 0x3, 0x3, 0xae4, 0x6, 0x8, 0x8, 0x9, 0xa293, 0x80000001, 0x9, 0x6, 0x1, 0x9, 0x7, 0xa627, 0x5, 0xc7, 0x2, 0x7ff, 0x9, 0x4, 0xfffffff9, 0x6, 0x7, 0x0, 0xffffffff, 0x0, 0x6, 0x5, 0x6, 0xc885, 0xffffffff, 0x8, 0x401, 0x70cbf172, 0x1000, 0x3, 0x4, 0x93, 0x726a, 0x5, 0xfffffff8, 0x2, 0x2, 0x7, 0xb6d1, 0x6, 0x1ff, 0x7f, 0x10001, 0x6, 0x7, 0x9, 0x990, 0x3ff, 0xffff, 0x444, 0x6, 0xc4f3, 0x9, 0x2, 0x0, 0xfffffffc, 0x1, 0x0, 0x2, 0x7, 0x0, 0x821e, 0x8535, 0x33b, 0x5, 0x0, 0x7, 0x3, 0x4, 0x5, 0x9, 0x10000, 0x200, 0x7f, 0x9, 0x1, 0x0, 0x10000, 0x9, 0xb1, 0x80000000, 0x6, 0x1ff, 0x3, 0x4, 0x7, 0x8, 0x38a, 0x6, 0xfffffff3, 0x3a73bc73, 0x1, 0xff, 0x2, 0x8, 0x7fff, 0x6, 0xfff, 0x4, 0x841, 0x7fff, 0x8001, 0x8, 0x7, 0x5, 0x93b, 0x3, 0x8, 0x9, 0x8, 0xffff2ae6, 0x5, 0xffffff01, 0x2, 0x7fffffff, 0xffffffff, 0x6b, 0x2, 0xfffffffa, 0x4, 0x9, 0x7, 0x3ba4cd3e, 0x3, 0xfffffff8, 0x0, 0x91, 0x7, 0x0, 0x9ba, 0x1, 0x8, 0x9, 0x76, 0x9, 0x5, 0x2, 0x400, 0x88, 0xe, 0x7, 0xff, 0x1, 0x9, 0x7f, 0x4, 0x4, 0x4, 0x3, 0x7, 0x1, 0x7, 0x8, 0xffff, 0x7, 0x317, 0x0, 0x0, 0xe, 0x5571, 0x9, 0x9, 0x5, 0x0, 0x6, 0x7, 0x2fea, 0x30, 0x9e6, 0x9, 0x3b, 0x3, 0x6, 0x2, 0x7, 0x5, 0x83b1a03, 0x4, 0x80000000, 0x2a0, 0x7f, 0x8, 0x0, 0x9, 0x31, 0x200, 0x2, 0x3, 0x3, 0x5, 0xfffffff7, 0x7ff, 0x6, 0x0, 0x0, 0x3, 0x9, 0x7, 0xfffffffb, 0x6, 0xb49973a9, 0x8000, 0xffff, 0x5667, 0x0, 0x24fd, 0x5, 0xffff, 0x5, 0x4, 0x4, 0x80, 0x5, 0x9, 0x0, 0x400, 0x3, 0x5, 0x7, 0x7, 0x6, 0xe, 0x61, 0x2, 0x5, 0x7, 0x9, 0x6, 0x1, 0x0, 0x9, 0x7, 0x0, 0x2, 0x4, 0x10, 0x5, 0x8, 0xfffffd48, 0x10001, 0x4b, 0x0, 0x4, 0x0, 0x1, 0xefcc, 0x2, 0x8, 0x5, 0x2, 0x1, 0x81, 0x2, 0x3, 0x0, 0x8, 0x9, 0x1, 0xffffffff, 0x400, 0x5, 0xfff, 0xc1e, 0x7, 0x6, 0x1, 0xaf, 0x2, 0x8, 0xefed, 0x9, 0x0, 0x80000000, 0x6, 0x7, 0x5, 0x7, 0x4, 0x67f, 0x2, 0x10, 0xd2c, 0x9, 0x3, 0x1060dde2, 0x8528, 0x10001, 0x1000, 0xa, 0x61e9a5c0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x9, 0x1, 0x6b, 0x1, 0x8, 0x1, 0x5, 0x6, 0x4, 0x335, 0x0, 0xe753, 0x6, 0x401, 0x80, 0xb, 0x6, 0x8, 0xe, 0x100, 0x5, 0xde, 0x200, 0x8, 0xf1, 0x8001, 0xfffff801, 0x401, 0x7fff, 0x7, 0xd8e, 0x9, 0x9, 0x7, 0x9b, 0x0, 0x8, 0x2, 0x0, 0x6, 0x0, 0x1, 0xc779, 0x200, 0x0, 0x7, 0x6, 0xfffffffe, 0x9, 0x8, 0x3, 0x7, 0x5e5, 0x1, 0xd49, 0xffff, 0x3, 0x2, 0xe2, 0x3, 0xe7, 0xf, 0x5, 0x6, 0x7, 0x2, 0x7fffffff, 0x6463, 0x3, 0x6, 0x6, 0x8c, 0x1, 0x0, 0x7, 0x7, 0x5, 0x3, 0x6, 0x2bc, 0x28deb4a9, 0x7, 0x100, 0x8, 0xad, 0x80000001, 0x80000001, 0x5, 0x6, 0xf7f, 0x100, 0xc99f, 0x1dc, 0x4, 0x9, 0x7, 0xffff, 0x1, 0x1, 0x2, 0xd, 0x7, 0xfffffff8, 0x7ff, 0xfffffffd, 0x100, 0x200, 0x24000, 0x800, 0x0, 0x1, 0x7, 0xfffffffe, 0xf9, 0x6, 0x800, 0x7, 0x80, 0x80000000, 0x7f, 0x8, 0x7726, 0x4, 0x8, 0x6, 0x8, 0x10000, 0x4, 0x5, 0xff, 0xf, 0x8000, 0x0, 0x3, 0x0, 0x6, 0xe, 0x7d01, 0x8, 0x9, 0x336, 0x5, 0x3, 0x4, 0x4, 0x1ff, 0x0, 0x8, 0x1ff, 0x5, 0x2, 0x8, 0x3, 0x6, 0x1, 0x9f, 0x0, 0xfffff538, 0x7fff, 0x7, 0x0, 0x2, 0x8000, 0x80, 0x7, 0x100, 0x7fffffff, 0x6, 0xff, 0x303b, 0x7ff, 0x1, 0x1fc, 0x69, 0x38000000, 0xffffffff, 0xc16, 0xfffffff2, 0x1, 0x7, 0x8, 0x8, 0x3, 0xf9, 0x1, 0x9, 0x101, 0xa1, 0xa8, 0x0, 0x40, 0xa8c, 0x6, 0x7, 0x2, 0xa, 0x10, 0x10000, 0x9, 0x8, 0x7, 0x6, 0x9, 0x80000000, 0x80000000, 0x10001, 0x84a, 0x315, 0x4c, 0x1, 0x0, 0xfffffffb, 0x4, 0x3, 0x7, 0x1000, 0x9, 0x6, 0x8001, 0x6, 0x0, 0x3, 0x1, 0x70, 0x1bc, 0xf, 0x8, 0x4, 0xc3c, 0x2, 0xfff, 0x472, 0x93, 0x3, 0xc, 0x8001, 0xa, 0x4, 0x0, 0x9, 0x3434df93, 0x4, 0x3, 0xff, 0x0, 0x7, 0x3, 0x3, 0x101, 0x7, 0x8, 0xfffffffd, 0x6, 0x7, 0x4, 0x401, 0x0, 0x2, 0x9, 0x68800, 0x2, 0x1, 0x5, 0x5, 0x5, 0x9, 0xf16d, 0x79f2, 0xd, 0xc5, 0xd, 0x7, 0x9, 0x3, 0x8, 0x7ff, 0xa3e, 0x4, 0xd725, 0x1, 0x80000000, 0x9, 0x4, 0x1, 0x3, 0x6, 0x3, 0x10000, 0x3, 0x3, 0x4, 0x5, 0xc, 0xf71, 0xb8e, 0x3b900000, 0xc91, 0x80000000, 0x6860, 0x7fff, 0x40000, 0x2, 0x4, 0x4, 0x3, 0xfffffffe, 0x1352287, 0x5, 0x3, 0xb01d, 0xc19d, 0xffff, 0xa, 0x6, 0x7a600000, 0x4, 0x7, 0xc24e, 0x5, 0xa, 0x10, 0x10, 0x26f, 0x2, 0x8, 0x7000, 0x8, 0x7, 0x1, 0x0, 0x1, 0xfffffffe, 0x7fff, 0x7ff, 0xffff, 0xffffff13, 0x4, 0xd237, 0x1, 0x7fffffff, 0x6, 0x3, 0xbf69, 0x8, 0x1800000, 0x1ff, 0xb9dd, 0x1, 0x7, 0xf, 0x69, 0x7, 0x8, 0x7, 0x0, 0x2, 0x7, 0x2, 0x20000000, 0x5ea9, 0xfb3c, 0x9, 0x3, 0x81, 0xb4df, 0x6, 0x0, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2, 0x7, 0x6, 0x839c, 0x8, 0x5, 0x3, 0x8, 0x1800000, 0x7, 0x1, 0x2, 0x8, 0x0, 0xfffff38c, 0x6, 0x7d, 0x5, 0x8, 0x7fffffff, 0x7, 0xb, 0x71, 0x7bf71ba4, 0x80, 0x7ff, 0x6, 0x45d4, 0x7552, 0x6, 0x8, 0x3ff, 0x0, 0x9, 0xb, 0x8, 0x7, 0x7396, 0x52d6, 0x3, 0x1e0, 0x62, 0x1, 0x1, 0x2, 0x0, 0x4, 0x3, 0x2, 0xb42, 0x81, 0x2, 0x8000, 0xbe0, 0x4, 0x0, 0x7, 0x0, 0x2, 0x9, 0x0, 0x9, 0x10, 0x6, 0x7, 0x9, 0x6e4b, 0xff, 0xfffffffe, 0x9, 0x7f, 0x40, 0x67, 0x5, 0x5, 0x6, 0x80000001, 0x9, 0x9, 0x4, 0x7, 0x6, 0x9, 0x6, 0xffffffff, 0xffffffff, 0x1, 0x7f, 0x80, 0xfffffff9, 0x1, 0x8, 0x2, 0x3, 0xe0, 0x0, 0x40, 0x3, 0x0, 0x7fffffff, 0x8001, 0x3ff, 0x619, 0x2, 0x1000, 0x6, 0x6, 0x3, 0x7, 0x5, 0x175, 0x10000, 0x60, 0x6, 0x8346, 0x4, 0x6, 0x2, 0x101, 0x7, 0x49ff, 0xe, 0x0, 0x400, 0x0, 0x0, 0x0, 0xa7c0, 0x9, 0x5, 0x4, 0xd29a, 0x2, 0x7fffffff, 0x7, 0x9, 0x2e6, 0xd7, 0xe0, 0xfffff283, 0x3, 0x9d3, 0x1, 0x8, 0x6, 0xfffffffa, 0x6, 0xf, 0x101, 0x472, 0x3, 0x10001, 0x800, 0xae, 0x6, 0x6, 0x30000, 0x9, 0x6, 0xe, 0x7, 0x7, 0xd, 0x80, 0xd2ba, 0x132, 0x9, 0x7fffffff, 0x3, 0x400, 0x3, 0x40, 0x7, 0x9, 0x1, 0x10, 0x8bee, 0x7, 0xfffffff9, 0x5, 0xec9, 0x40, 0x2, 0x9, 0x10, 0x3, 0x4, 0xf, 0xe63, 0x10000, 0x8, 0x7, 0x1, 0xfffffffe, 0x3a7, 0x800, 0x1, 0x92a, 0x401, 0x3, 0x9, 0xe, 0x4, 0xfaaa, 0x5, 0x8000, 0x8f0, 0x7, 0x8, 0x8, 0xa, 0x6, 0x1, 0x3, 0x6, 0xfffffff7, 0x8001, 0xa8, 0x3, 0x5, 0x1, 0x7, 0x4, 0x6, 0xe5, 0x8, 0x0, 0x4, 0x9, 0x7f, 0x5, 0x6, 0x10001, 0x3, 0x6, 0x53, 0x6, 0xa9ac, 0x2, 0x9, 0x7fff, 0xe83, 0x5, 0x1, 0x9, 0x1e, 0x2478, 0xd437, 0x2, 0x4, 0x1, 0x30, 0x9, 0x9, 0xfff, 0x1, 0x101, 0x2, 0xa, 0xffffffff, 0x2, 0x371, 0x8, 0x9, 0x6c, 0x9, 0x0, 0x1, 0x8f4, 0xffffffff, 0xffffff2e, 0xb, 0xed26, 0x8001, 0xfffffff9, 0x5, 0x6, 0xd2, 0x4, 0xe26, 0x6, 0xc8fa, 0x5, 0x4000000, 0x5d4d2bf9, 0x1ff, 0x100, 0xb, 0x5, 0x4, 0xd, 0x2, 0x4, 0x1c, 0x5, 0x9, 0x8, 0x3, 0x5, 0x4bded01c, 0x9, 0x3, 0x0, 0x4, 0x9, 0x1, 0x3, 0x7f, 0x80000000, 0x1, 0x9, 0x9, 0xe8d, 0x5, 0x2400000, 0x3, 0x9, 0x6, 0x4, 0x7f, 0x9, 0x3b6, 0x0, 0xffffffff, 0x7, 0x10000, 0x80000001, 0x5, 0x2, 0x254c, 0x6, 0x100, 0x5dcf, 0x9, 0x6, 0xffff0763, 0x8000, 0x7fff, 0x3, 0x8, 0x5, 0x1, 0x7, 0x4, 0x9, 0xce000000, 0x5, 0x3, 0x5, 0x0, 0x0, 0x7, 0x823a, 0x2, 0x0, 0x0, 0xb, 0x3, 0x80, 0x7fff, 0x6, 0x6, 0x82, 0x4d6, 0x9, 0xd2, 0xd984, 0x3, 0x82, 0xffffffff, 0x9, 0x7fff, 0x80000000, 0xea, 0x1, 0x7, 0x8, 0x0, 0x0, 0x5, 0x0, 0x811, 0x8, 0x8001, 0x1f36dd87, 0x1, 0x8, 0xffffffff, 0x0, 0x2, 0x5, 0x2, 0xfffff660, 0x9, 0xff, 0x9, 0xfffffffa, 0x6, 0x151, 0x8, 0x2, 0x9, 0xfffffefc, 0xffffff7f, 0x20, 0x7, 0x200, 0x401, 0x4, 0x2, 0x25b, 0x4, 0x7, 0x2, 0x1, 0x8, 0x80, 0x0, 0x5, 0xfffffffa, 0x7, 0x6, 0x8, 0x41f1, 0x7fff, 0xb1, 0x55dfe50b, 0x80, 0xfffffff7, 0x7, 0x4, 0x8, 0x2, 0x277, 0x4, 0x7, 0xffff, 0x1, 0x7, 0xe, 0x8, 0x2, 0x0, 0x0, 0x8, 0x0, 0x8, 0x9, 0xffffffff, 0x3, 0xb, 0x8, 0x0, 0x32, 0xf, 0x5, 0x0, 0x1000, 0x8001, 0x10, 0x81, 0xf9, 0x7e, 0x6, 0x3b60, 0x1, 0xfffffff8, 0x8, 0x2, 0x8, 0x9, 0x4, 0x2, 0x6, 0xff, 0xfffffffc, 0x3, 0x51, 0x8001, 0xffffffff, 0x80, 0xae, 0x8, 0xd, 0xdf3, 0xfffff800, 0xffff, 0x3, 0x9c, 0x3582, 0x5, 0x7, 0x10, 0x2, 0x2, 0x8, 0xfff, 0x252, 0x1, 0x6, 0x4, 0x806b, 0x827, 0x8, 0x7fffffff, 0x4, 0x1000, 0x7, 0xe, 0x3, 0x40, 0x3, 0x6, 0x9, 0x800, 0x401, 0x5, 0x4, 0x3, 0x7, 0xf, 0xf8, 0x4, 0x7ff, 0x73, 0x6fecf03, 0x3, 0x5, 0x101, 0xfff, 0xa35b, 0x8b87, 0x6, 0x2, 0x8000, 0xc, 0xd0, 0x100, 0x4, 0x9e15, 0x5, 0x9, 0xb00, 0x8000, 0x94, 0xae, 0x2, 0xb69, 0x2, 0x4, 0x0, 0x9, 0xa98, 0x0, 0x40, 0x4, 0x9, 0xfffffff7, 0xff, 0x8, 0x7, 0x1, 0x6, 0x5, 0xfffffffe, 0xdd8b, 0x9, 0x8, 0x80, 0x8, 0x752b, 0x29, 0x6, 0x6, 0x5, 0x5, 0x1, 0x0, 0x9, 0x1ff, 0x4, 0x99, 0xc, 0x0, 0x4, 0x0, 0x401, 0x2, 0x929, 0x2, 0x5, 0xfffffffb, 0x5, 0x0, 0x1, 0x3ff, 0x6, 0x0, 0x9, 0x9, 0xeaf3, 0xd, 0xffff, 0xfffffff7, 0x6, 0x99a7, 0x7, 0x7, 0x2e, 0x7, 0x7, 0x3, 0x81, 0xfffffff7, 0x8, 0xb74, 0x7, 0x8, 0x30, 0x3, 0x2, 0x6, 0x4, 0x80, 0xd24, 0xe, 0xe, 0x4591, 0x7fffffff, 0x0, 0x4, 0x3, 0x5, 0x0, 0x7fffffff, 0x6, 0x1, 0x5, 0x418c, 0x1, 0x6, 0x0, 0x4, 0x48, 0x7, 0x5, 0x5, 0x738fb658, 0x8, 0x0, 0x2, 0x90e, 0x5, 0x70, 0x100, 0x0, 0xa1e5, 0x6, 0x6, 0xfffffff9, 0x3, 0x745e, 0x4, 0x7, 0x8, 0x8, 0x8, 0x1, 0x3, 0x9, 0x4, 0x5, 0x10100, 0x1, 0x9df7, 0x3, 0x1, 0x80000001, 0x4, 0xf, 0x40, 0x1, 0x8, 0x50000, 0x9, 0x5, 0x2, 0x1, 0x0, 0x19aa, 0x1, 0x4, 0x4d, 0x2, 0x8000, 0x6a2, 0xc, 0xf, 0x3, 0x7, 0x80000000, 0x5, 0x2, 0x0, 0x8000, 0x1, 0x9, 0x2681, 0x9993, 0x400, 0x1, 0x8, 0x2, 0x4, 0xf7, 0x7, 0xfffffffe, 0x9, 0xcb94, 0x9, 0x1ff, 0xffff, 0x4, 0x1, 0xa, 0x1, 0x4, 0x7fffffff, 0x2000000, 0x14, 0xbf2, 0xc, 0x2, 0xea0, 0x307b, 0x5, 0x5, 0x4c, 0x1, 0x3, 0x7f, 0xc784, 0x3, 0x4, 0x0, 0xf, 0x1, 0x8, 0x9, 0x2, 0x3ee, 0x5, 0xd, 0xfffffffc, 0xf763, 0x8000, 0x0, 0x0, 0x3, 0x5, 0x6, 0xa1, 0xdc5, 0x4, 0xbc, 0x200, 0x0, 0x6, 0xd, 0x200, 0x4, 0x6, 0xdf, 0x7, 0x800, 0x6, 0x4, 0x7f, 0x10, 0x7, 0x81, 0x401, 0x80000001, 0xf, 0x6, 0x8, 0x2, 0x1, 0xffffdf14, 0x400, 0x1557, 0x9, 0x0, 0x65c, 0x0, 0x4, 0x8, 0x6, 0x3, 0x80000000, 0x8, 0x1, 0x5, 0x0, 0x5, 0xed, 0x6, 0xb, 0xe1e4, 0x817, 0x1, 0x80000000, 0xa8d, 0x7, 0x0, 0x81, 0x6, 0x3, 0x80000000, 0x7, 0x0, 0x66fe1b09, 0x8, 0x5, 0x80000001, 0x6, 0x4, 0x800, 0x3, 0x4, 0xc, 0x9, 0x2, 0x80, 0xfffffff8, 0x6, 0x8b800, 0x4, 0x8, 0x5da7, 0x8, 0x0, 0x5, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x3, 0x1, 0x4, 0x80000001, 0x7, 0x4, 0x0, 0x478d, 0x2, 0x8001, 0x2, 0x1, 0x8, 0x9, 0x1000, 0x2, 0xed1, 0x7f, 0xfffffffe, 0xfffffff0, 0xffffff25, 0x101, 0x19, 0x800, 0x7, 0x4, 0x9, 0x8, 0x5, 0xffff, 0x3, 0x8, 0x80000000, 0x7, 0xc, 0x1, 0x17, 0xcdd103fc, 0x1800000, 0xfff, 0x3ff, 0x8, 0x3c, 0x4, 0xfffffffd, 0x0, 0xe, 0x6, 0xf, 0x7, 0x7, 0x3, 0x6, 0xdf, 0x2, 0x3, 0xfffffffd, 0x9, 0x40, 0xdb5, 0xd, 0x5, 0x3, 0xfffffff7, 0x2, 0x2, 0x1ff, 0x7, 0x9d, 0x3, 0xffff3c4e, 0x80000000, 0x1, 0x9, 0xa, 0x1, 0x400, 0x9, 0x0, 0x7ff, 0x7fffffff, 0x4, 0x8, 0x9924, 0x80000000, 0x125, 0x3, 0x8, 0x839, 0x8, 0x6, 0x8, 0x1, 0x9, 0x0, 0x1, 0x6, 0x3, 0x7d3f, 0x9, 0x75f8b416, 0x0, 0x9, 0x9, 0x4, 0x3, 0x2, 0x9, 0x51, 0x7, 0x5, 0x40, 0x40, 0xf, 0x2, 0x3, 0x89c, 0xa2b, 0x8, 0x27, 0x6, 0xe0000000, 0x2, 0x3, 0x2, 0x401, 0x1, 0x5, 0x9, 0xe93, 0x42, 0xfff, 0x8000, 0xa18, 0x4, 0x0, 0x7, 0x10, 0x4, 0x9, 0xa, 0x8, 0x1, 0x401, 0x9, 0x401, 0xa56, 0x3, 0x7, 0x6, 0x5, 0xa79, 0x2, 0x1000, 0x3, 0x8, 0x1, 0x7, 0x400, 0x0, 0xfffffdee, 0x0, 0x2, 0x2, 0x1b, 0x7, 0x9, 0x6e, 0x6, 0x0, 0x1, 0x2, 0x9568, 0x1, 0x4, 0x3, 0x8, 0x6, 0x6, 0x8, 0x4, 0x1, 0x5, 0x100, 0x88, 0x0, 0x8, 0x8, 0xffffffff, 0x655, 0x80, 0x7, 0x10001, 0x707, 0x80, 0xeb14, 0x100, 0x4d, 0xa807, 0x10, 0x3ff, 0x9, 0x400, 0xb03, 0x1, 0x5, 0x38, 0x4, 0x3, 0x1, 0x5f, 0x5, 0x10000, 0xf2e, 0xa32, 0x7, 0x6, 0x80000001, 0x1, 0x1ff, 0xffff8f54, 0xf, 0x9, 0x7fff, 0x100, 0x1, 0x6, 0x0, 0xa, 0x40, 0x36cb, 0x80000000, 0x0, 0x401, 0x9b, 0x8, 0xfffffffe, 0x1, 0x0], 0x1, 0xfb}]}) 3m18.070698751s ago: executing program 1 (id=171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001e40), 0x0, 0x100, 0x0) (async) sendmmsg$inet(r3, 0x0, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000240), 0x0, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x4e23, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x15}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x26000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x26, 0xb, 0x10}, {0x8080000, 0x0, 0x935bf724b7effdda, 0x8, 0x9, 0x4, 0x0, 0x0, 0xa, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0x8, 0x0, 0xa, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x81, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x1, 0xfc}, {0xffff1000, 0xb000, 0xd, 0x8, 0x0, 0x0, 0x2, 0x8e, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0xa1}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x7000}, {0x50000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xc, 0xf801, 0xffffffff, [0x0, 0x1000000000000, 0x1]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x70}}, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x40000}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) 3m17.776253595s ago: executing program 1 (id=173): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e1d"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 3m16.612667195s ago: executing program 0 (id=178): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a05be9c5f25a7bede140212000100001ac7d6d6000000ff054900"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000060000002cf032b696c81c53746d0c8a00000000fdfffdff85000000530000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYRES64=r5, @ANYBLOB="125a017c3a5664c2e43cab0f639cea52c15582c99ae157f22c8de09af432ddb586b5a57cbfa6f3ea82e168390729b2635a001e7a6335108a1e9134a8f6bbc8a422e4027e9204fbbdc3ce6d57513020fd0acf04301e79d95bd98484a65806e930b7577fb16a0a8d54673af5e8147f3c348760ebaa9fd2a4e2beab5dc993ff04f84dcdd52036e6718fa87ec31ca74d3b7a09f6f60f2f5b2e114c5f4325c5cee1edf8e60a33f5de53cf82406dd1d212c28a6fa8eb6782eb103c1c82ed044d47e2c7819e20e3d62cf4300d0a0a70b4b99802b12ed8869a4e8d01e00d156df7", @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0xfffffffffffffc47) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xaa443) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000000)={0xfffffffffffffe67, 0x5, 0x0, {0x0, 0x6, 0x7, 0xe42}}, 0x30) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r10, 0x4b49, &(0x7f0000000000)={0xf2, "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"}) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000280)=0x4) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r12, 0x0, 0x0, 0x0) 3m16.012411793s ago: executing program 3 (id=182): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES16=r0], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000340)=""/180) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c"], 0x50}}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 3m15.243262413s ago: executing program 1 (id=183): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r2, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=r2}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x2, 0x0, 0x3f}, 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r6, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x11, &(0x7f00000000c0)=0x40, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f00000003c0)=@req={0x6, 0x2, 0xffffffff, 0x8000}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESHEX=r1, @ANYRES8=r7], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000600)={0xffffffffffffffff, 0x4, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x9}, 0x3, 0x20, 0x8, 0x0, 0x0, 0x2000000, 'syz1\x00', &(0x7f0000000680), 0xa}) 3m15.027047649s ago: executing program 3 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b9860000003f000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3m14.929591638s ago: executing program 3 (id=185): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x141040) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000f881000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socket(0x15, 0x5, 0x0) 3m14.711105983s ago: executing program 4 (id=186): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380), 0x0) io_setup(0x1, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0), 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a010000008000000080041fff00ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = dup(r0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f042}) 3m14.606351412s ago: executing program 4 (id=187): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x2, 0x11}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) (async) io_uring_enter(r5, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}) (async) socket$alg(0x26, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 3m14.120997307s ago: executing program 1 (id=188): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x3d, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x4}, {0x6}]}) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 3m14.120544095s ago: executing program 4 (id=189): mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c8d000000000000000000000000000000000000000000000000000000000000000000000000e9ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00", 0x2000, &(0x7f0000000740)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x48c86100, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0x6, 0xcbff, 0x0, {0x5, 0x6, 0x7f, 0x6c, 0x7, 0x40000000000d, 0x3, 0xfffff2e1, 0x3, 0x4000, 0xfffffffe, 0xee00, 0xffffffffffffffff, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfffffed3) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 3m13.821811935s ago: executing program 4 (id=192): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r4 = open(0x0, 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) r5 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000240)={0x9d0000, 0xfffffff8, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10903, 0x2, '\x00', @string=&(0x7f0000000140)=0x6}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r6, 0x2000, 0x1000000) close_range(r0, 0xffffffffffffffff, 0x300) 3m13.281361659s ago: executing program 0 (id=193): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xdd53, 0x1, {0xffffffffffffffff}, {0xee00}, 0x3, 0xff}) prlimit64(r4, 0x1, &(0x7f0000000100)={0x8, 0xffffffffffffffc4}, &(0x7f0000000200)) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r7, 0x4130b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x10500) sendto$packet(r5, &(0x7f0000000000)="6f3d12caa129b05b93fadda088a856d286dd", 0x12, 0x4, &(0x7f0000000180)={0x11, 0x8100, r7, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$FIBMAP(r0, 0x2279, 0x0) 3m12.89199056s ago: executing program 4 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) unshare(0x28000600) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000003080)=0xfffffffffffffd10) writev(r1, &(0x7f0000000940)=[{&(0x7f0000000f80)="56da", 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000240)) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r7, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1004000}) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) 3m12.785280512s ago: executing program 0 (id=196): syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102cab4c508720c14008a570102030109022400010b00e0090904f405021df4520809000303000005088109050b"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async) r0 = socket$kcm(0x21, 0x2, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x30, 0x13, 0x1, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0xc760, 0x2030}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200088d0}, 0x20000000) (async) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async, rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r2, 0x180000000) 3m12.118275777s ago: executing program 3 (id=197): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700009414000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 3m12.021834214s ago: executing program 3 (id=198): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600, 0x0, 0xf401]}}], 0xffc8) 3m11.905535253s ago: executing program 4 (id=199): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x10040, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4048048) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000400)=@llc={0x1a, 0x205, 0x9, 0xa, 0x4, 0x4, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)="d298d02ff3f2ddaad736e2122539bc74f54319c33c929c2ae9dcb3dd4980dde3657a078bde88c3dabb79b6a7840f4dc671bb7cfb402c85b18005c18db1ccf06eca74f02e30699f8b1e3bfff5a2a7af413d4fbf012d1f54c03d548939d7fe75811ab83969dc15dc49426c69362856f1c24119e534a02a27b01c9314f6e097a7551d5a8288", 0x84}, {&(0x7f0000000180)="f91949480299f60711e6bc879eaa54875939017c85d0bc", 0x17}, {&(0x7f0000000300)="9eeee7da37fe9ac9ecb16d453ae9abacac6d8eb370", 0x15}], 0x3}, 0x240000c0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102370, 0xfffffe14) syz_open_dev$usbmon(&(0x7f0000000080), 0xffffeffffffffffd, 0x8800) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x21, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x10088e, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYRES64=r7, @ANYRES16=r5, @ANYRES32=r5, @ANYRES8=r7], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000680)={0x2020}, 0x2020) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=@known='trusted.overlay.upper\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) 3m11.537177066s ago: executing program 3 (id=200): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x60, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x60}}, 0x20000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x11e, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x700, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) socket(0x23, 0x2, 0xf856) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r8, 0x600, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/fuse\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '$\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x44001}, 0x1) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x4, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, r6, 0x2000, '\x00', 0x401, 0x0, 0xd2, 0x3, {0x88007, 0xfffffff9}, {0x3, 0x7f49}, {0x1, 0x9}, {0x200000008, 0x7}, 0xed02, 0x4, 0x0, 0x9}}}}) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x800, 0x1, 0xf, 0x0, 0x0, 0x80, 0x40000}}, 0x50) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0xcc00, 0x60, 0x10}, 0x18) symlinkat(&(0x7f00000002c0)='./file0\x00', r9, &(0x7f00000005c0)='./file0\x00') 3m7.451713699s ago: executing program 1 (id=201): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r1 = gettid() timer_create(0x7, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) close(r4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0xfffffffe) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000680)="01", 0x1}], 0x100000000000008c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x7f, 0x3}) 3m6.335318694s ago: executing program 0 (id=202): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304fe0f00"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m34.141445245s ago: executing program 32 (id=194): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x61, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x4, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "48c95e81c6"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x200, 0xfff7, 0x3, 0x1}, [@country_functional={0x6, 0x24, 0x7, 0x3, 0xbe}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x50d7c32b5286f9c2, 0x9, 0x3, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x73, 0x0, 0x40}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8, 0x3, 0xf, 0x20, 0x2}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x416}}, {0xf3, &(0x7f0000000380)=@string={0xf3, 0x3, "b5c4405b453e8e8a84665122509813aebfca27951f1c1ec7d399257dfe44771da6f96840f0c8d532e9e629fb65d9e83414c744c23b626435fc78c505515dfea74ef91bb948767dfc988bb1cf8f23bbcd0531a3c2e6c216a97043d715fd6f11e0eb00dc1573925c521f89866f4b088f9839caf224851936993b77338f72d97ac816003516a0ec653e878d09cf15185b2871735ae6b9a8019b42c6f202f5095e5efd2f541e5179c335b3e985dcdc4c8e96021f9bd9b6c822cf62f919ff017f5ac98ecbd865871af5d12778d3d0a70620cb5978d42bab8edc77405f90778786ebf3b21b8cf7ad10db59a8c16b99caff38c3fb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x100c}}, {0xe4, &(0x7f0000000600)=@string={0xe4, 0x3, "c2e25ba3b61a2e807887b864bb9d295a68410aaa7f6a7987dc46aeacf5ae0a4d7532188e22e1213cfc6664c7326c5781202a258f951205cecd72fe22b0fff8773a676cd745d618b7c66cbd2f3ebfdfbe45382e3fd11c055df70b14b6758a67554d85303e4b1e3858e6f707813e542ae172920445fd7f9767fa8b4ce171d257e5a8e4f24874feac6e29b4b7d38b6900a4497540e268121bf29548e8ed705feb857ab6b328990f4fe663c935b3dedea234e944d6ed80f0bfd7bafceb498a3e22c1c8e3a21449e875cb251285b869f082e0808e987919449706459012d6b51a89f05ae9"}}, {0xd6, &(0x7f0000000700)=@string={0xd6, 0x3, "800cd793ec9d1f1e661790d2db10ea7319442577d99676c1d0552286fd80fdd47e3e4a1d9f6234a2661406d3cedf47ce551cbdbb5597c91617016b193b00e5c80878b6936072f63035df89d0f215875a25e15e91aca53a7cfb38cec87e8d57f46177e10cca19e6bccb6af759fd3ddfcd399edf40b592f384201a8a76bdca5683568048a4286435548fea6da24f051eb75ed5e53b7e9ee44d9222625ad978e665c1625f64351686999ba7e447567d717772737b11b57ad9631b5d91ebbede019eccc2256ba3bb75918e476178c9d1095326fb6139"}}, {0x94, &(0x7f0000000800)=@string={0x94, 0x3, "495dd6333f9f7a464706057be1c40915e54efdd9ae8560a95a98ebff807ff0b8f7207afdb7a1d1a1d65ba96dff278ee3d613912aaf5490b98201e1f24a9b4e738569099510c3d4f9f52172066f99955daa0ceaa9cce2f6ed7d40ca7869f1ff7acb9c20c9a007c0a125c4c3db21f142eb42adfaf6b240445880003c7e542512bd2c8d9aab4cbe48c5bfac5dc96fa1bb2daadd"}}, {0xde, &(0x7f00000008c0)=@string={0xde, 0x3, "2c611e38b83998477eaec59a0f186c6046c05744fb52bb4eed612535f62743dd609d2ff499d76e82c9c102fbc531275ab4c439ac6debf5666dbd48f2f0ec7db43233618214350efdd40214bb8c2c96283dde30aa50745a98a8538cd1bddbe35e96d7d7dbe02d22cade14789fc3e70a61391d03e2779abdab50114da3d3b2d60775d193e7774d39a9b1f9d79671d85bf38a5e116b776980233a2d3802e30fd39467e9be4919cdeaac099a893c2a3afe3af382b8b5bfd0edcf38b75c568986d09b8ff6e16afd44925a5e404c21349142ae1c0002f83368ecd27f096415"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40b}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x25dfdbff, {0x7}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f000001b000), 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0x2, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x6, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0x5, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_open_dev$char_usb(0xc, 0xb4, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m33.927865919s ago: executing program 33 (id=199): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x10040, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4048048) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000400)=@llc={0x1a, 0x205, 0x9, 0xa, 0x4, 0x4, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)="d298d02ff3f2ddaad736e2122539bc74f54319c33c929c2ae9dcb3dd4980dde3657a078bde88c3dabb79b6a7840f4dc671bb7cfb402c85b18005c18db1ccf06eca74f02e30699f8b1e3bfff5a2a7af413d4fbf012d1f54c03d548939d7fe75811ab83969dc15dc49426c69362856f1c24119e534a02a27b01c9314f6e097a7551d5a8288", 0x84}, {&(0x7f0000000180)="f91949480299f60711e6bc879eaa54875939017c85d0bc", 0x17}, {&(0x7f0000000300)="9eeee7da37fe9ac9ecb16d453ae9abacac6d8eb370", 0x15}], 0x3}, 0x240000c0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102370, 0xfffffe14) syz_open_dev$usbmon(&(0x7f0000000080), 0xffffeffffffffffd, 0x8800) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x21, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x10088e, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYRES64=r7, @ANYRES16=r5, @ANYRES32=r5, @ANYRES8=r7], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000680)={0x2020}, 0x2020) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=@known='trusted.overlay.upper\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) 2m33.786237556s ago: executing program 34 (id=202): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304fe0f00"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m33.699127175s ago: executing program 35 (id=201): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r1 = gettid() timer_create(0x7, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) close(r4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0xfffffffe) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000680)="01", 0x1}], 0x100000000000008c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x7f, 0x3}) 2m33.590973148s ago: executing program 36 (id=200): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x60, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x60}}, 0x20000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x11e, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x700, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) socket(0x23, 0x2, 0xf856) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r8, 0x600, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/fuse\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '$\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x44001}, 0x1) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb888defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63ddb2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede5f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0fdeed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d803be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4a96b47d4c8e3124f53bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589a05484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x4, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, r6, 0x2000, '\x00', 0x401, 0x0, 0xd2, 0x3, {0x88007, 0xfffffff9}, {0x3, 0x7f49}, {0x1, 0x9}, {0x200000008, 0x7}, 0xed02, 0x4, 0x0, 0x9}}}}) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x800, 0x1, 0xf, 0x0, 0x0, 0x80, 0x40000}}, 0x50) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0xcc00, 0x60, 0x10}, 0x18) symlinkat(&(0x7f00000002c0)='./file0\x00', r9, &(0x7f00000005c0)='./file0\x00') 1m0.761355986s ago: executing program 5 (id=517): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x81) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x80, 0x1000, 0xc1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 58.214671344s ago: executing program 5 (id=522): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 57.362624973s ago: executing program 5 (id=524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000028000000010000055402010000000000000000080611000000000000"], 0x1508}}, 0x0) 57.137726207s ago: executing program 5 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000004a00)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1e0101000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000070000000000000000000010000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000000000000440005000a010100000000000000000000000000000000003c00000000000000ffffffff000000000000002fab00000000000000000002"], 0xfc}}, 0x20000088) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100fff50000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 56.946138282s ago: executing program 5 (id=527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x6c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, r6, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x209, 0x79, 0xff, 0x6, 0x0, 0x4, 0x1, 0x7]}}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xd0, r4, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x59d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb6cf}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff0001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1665}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x398}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x9, 0xc6e7, 0xfa, 0x200, 0x2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc010}, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x8) r8 = socket$unix(0x1, 0x1, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x114, &(0x7f0000000500)=0x7, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) getsockopt$ARPT_SO_GET_INFO(r11, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x0, [0x6, 0x8, 0xfa]}, &(0x7f00000005c0)=0x44) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 56.375049166s ago: executing program 5 (id=528): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4a4d, &(0x7f0000000480)={0x0, 0x4981, 0x400, 0x4, 0x284}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x5) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r7) r8 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "f92984bd1ca44c226af5160e961711a077609475b78409008509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x8000000000003c}, 0x60) syz_open_dev$ndb(0x0, 0x0, 0x254202) write$ppp(r7, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r7, 0x4) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0xff) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f00000000c0)={0x9, 0x24000, 0xffffffff, 0xb, 0x4, "03f07f0909343528000800", 0x18, 0x4}) 41.208956241s ago: executing program 37 (id=528): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4a4d, &(0x7f0000000480)={0x0, 0x4981, 0x400, 0x4, 0x284}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x5) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r7) r8 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "f92984bd1ca44c226af5160e961711a077609475b78409008509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x8000000000003c}, 0x60) syz_open_dev$ndb(0x0, 0x0, 0x254202) write$ppp(r7, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r7, 0x4) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0xff) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f00000000c0)={0x9, 0x24000, 0xffffffff, 0xb, 0x4, "03f07f0909343528000800", 0x18, 0x4}) 10.044936073s ago: executing program 8 (id=670): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x4, 0x9}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4008040, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r4 = socket(0x840000000002, 0x3, 0xff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000880)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) setreuid(r5, r6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x32) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 9.198512334s ago: executing program 8 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) unshare(0x28000600) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000003080)=0xfffffffffffffd10) writev(r1, &(0x7f0000000940)=[{&(0x7f0000000f80)="56da", 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000240)) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r7, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1004000}) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) 8.458813634s ago: executing program 6 (id=675): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x80, 0x1000, 0xc1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 8.454607307s ago: executing program 7 (id=676): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) splice(r0, &(0x7f0000000100)=0xfffffffffffffffc, r4, &(0x7f0000000240)=0x20004, 0x90d5, 0x4) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x2, 0x32}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 7.819420021s ago: executing program 2 (id=678): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r4 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r3}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_enter(r4, 0x1d2d, 0x8890, 0x0, 0x0, 0x700) 7.550520505s ago: executing program 7 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ustat(0xd, &(0x7f00000000c0)) socket$inet6(0xa, 0x3, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x80, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x140, 0x19, 0x0, 0x140, 0x40000, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 6.11747674s ago: executing program 2 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r1 = fsopen(&(0x7f0000002200)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x180, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4) 6.011286153s ago: executing program 7 (id=681): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x1, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000180)=""/135) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x10, 0x800) ioctl$FICLONE(r3, 0x40049409, r1) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x1}, 0xa) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x88100) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000240)={{0x8, 0x3, 0x29e4, 0x1ff, 'syz1\x00', 0x4}, 0x5, 0x20, 0x25, 0x0, 0x0, 0x95a, 'syz1\x00', 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 5.753371259s ago: executing program 9 (id=682): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket(0x22, 0x2, 0x23) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0xf5b8, 0x8020, 0x0, 0x1, {0x2}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 5.433612215s ago: executing program 9 (id=683): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) eventfd2(0x0, 0x80001) syz_usb_connect$uac1(0x4, 0x13b, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x129, 0x3, 0x1, 0x8, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x56c3, 0xc9}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x5, 0x7, 0xcc, 0x2, 0x1}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x81, 0x5, 0x4, [0x7, 0xa, 0x6, 0x8], 0x5}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x1, 0x2, [0xc, 0xa], 0x7}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x7, 0x3, "d6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa, 0x2, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8000, 0x1, 0x6, "e4af"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0xee, 0x3, "8b4f32e6"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x75, 0xf}, @as_header={0x7, 0x24, 0x1, 0x3, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xb, 0x6e10, 0x5, "6a8de917307d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd, 0x81, 0x7, {0x7, 0x25, 0x1, 0x3, 0x8e, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0x1, "31547b9a"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x5, 0x3, "8511e5cfb49277"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x2, 0x8, 0x1, "0d8d67c3875f3eec"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0xd, "60bdc040c5"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x8e, "2c3c7dd31dbcd38658"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x9, "0caf6476ab7bbc7b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x7, 0x4, {0x7, 0x25, 0x1, 0x83, 0x40, 0x4}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1, 0x9, 0x4, 0x10, 0x8}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x0, 0xe, 0x1ff, 0x4}]}}) r1 = gettid() prctl$PR_SCHED_CORE(0x4d, 0x3, r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone3(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40025b0c, &(0x7f0000000040)) 5.360737846s ago: executing program 8 (id=684): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) r1 = io_uring_setup(0xab1, &(0x7f0000000080)={0x0, 0xdf4, 0x800, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 5.331437147s ago: executing program 2 (id=685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r0 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x10001, {r0}, {0xee00}, 0x7f, 0x100000000}) 5.201273918s ago: executing program 6 (id=686): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x4, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x3f}) 4.972952657s ago: executing program 2 (id=687): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x80, 0x1000, 0xc1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 4.732333807s ago: executing program 6 (id=688): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) setreuid(0x0, 0xee00) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x50) ioctl$vim2m_VIDIOC_S_FMT(r2, 0x40806685, 0x0) 3.289129765s ago: executing program 8 (id=689): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="0017a40000007da68d2cde"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) msgrcv(0x0, 0x0, 0xfffffffffffffeac, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000340)="69f301436e94c5ebab1aa125200bfd4ccb197c9452769360", &(0x7f0000000500)=""/113, &(0x7f0000000380)="76bb1bc3cbdf876b014558030c1917e08f8e95e2cc", &(0x7f0000000580)="c0defe04615b06797a00999c3ec871daefcedc33b7bbaca6c12150977953c007ff21d96e161a77cfed35bce99ae672ba3c6f4f6d85948d74f800a42240dd4c0a9e94993da440e5ab410ee0dd0739eac5b2813ac9021097f14c88881b004678fed4cb7265e6201bb2f9cb29b38c78bddc981fd1cde4fd7651c258dd21e3297e273640367b", 0xf4, r3, 0x4}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a1000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030e0008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010007"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3000000000000000, 0x500}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.288712832s ago: executing program 6 (id=690): syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="932ca37d7e8f04d54627aef41d1a997889df7c74a145838ffb0bc77db6f404ad7f14c4dc06a0520672e1d75ca4386db3e639da75d8246db976fca409d380d84b91235b07b379b82a0dfb87ed69fad270e4771ad7252f9f", @ANYRES16=r0, @ANYBLOB="08042cbd7000fbdbdf2501000000640002800c00018008000100050000000c0001800800010000000000240001800800010007000000080001000800000008000100000000000800010002000000240001800800010007000000080001000200000008000100020000000800010000"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="81f43194353d9583", @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0, 0x4a}, 0x3000c041) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000100)="5a34a10a1a0092d9221cc435275ce4526b204bcbe6673dff8d7f17ae2b0f7ef4b5bc88a9e935b67c44718620ab7eb58879b2bdfa6aec170031d8f406", 0x3c, 0x0, &(0x7f0000000240)={0x2, 0xc, @rand_addr=0x64010102}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000040000010013215265fb63d2f50d000014000200776f30000000000000000000000000000800088004000080"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) listen(r5, 0xda90) (async) listen(r5, 0xda90) accept(r5, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0) (async) accept(r5, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0) r8 = socket$kcm(0x10, 0x7, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r5) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2800000013fa4c010000000000000000070000090cf753676b000000000000020800034000000004"], 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x8000) socket$vsock_stream(0x28, 0x1, 0x0) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, 0x0, 0x0) 2.82317989s ago: executing program 2 (id=691): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x7f, 0x1, 0xfff, 0x9, 0x9, 0x0, 0xa6, "ff03cae9ffed00000400b2400d0000cba1c4ba00", "39e80000460062ff010000ec0010000000000028"}) 2.690780622s ago: executing program 7 (id=692): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newchain={0xf78, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4823d34a5e754f9c}, {0xf}, {0xa, 0x1ffe4}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xe5}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}]}}, @filter_kind_options=@f_basic={{0xa}, {0x588, 0x2, [@TCA_BASIC_EMATCHES={0x578, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0xe}, {0x0, 0xfffff801, 0x8, 0x3ff}}}, @TCF_EM_META={0x100, 0x1, 0x0, 0x0, {{0xd3, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f0a869a2bd618b", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="b0f182c1"]}, @TCA_EM_META_LVALUE={0x39, 0x2, [@TCF_META_TYPE_VAR="95214ca0d50f15d89b", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ddbb8b8c454f", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="0e", @TCF_META_TYPE_VAR="824526ec106bd0eceb", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="1f8068dd5679d22c", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xb7da, 0x1}, {0x6, 0x5, 0x1}}}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="e9f74cab", @TCF_META_TYPE_VAR="58ab38e7cb5c80cf", @TCF_META_TYPE_VAR="66f825", @TCF_META_TYPE_VAR="75018539c89b63", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6, 0x2}, {0x3, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x0, 0x1}, {0x7, 0x7, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="c19a21", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="fb1be4102a76af"]}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="8f69f388531f", @TCF_META_TYPE_VAR='6_', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d410"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR='8\v!', @TCF_META_TYPE_VAR='PN', @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1000, 0x7, 0x5}, {{0x4, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xb8, 0x2, 0x0, 0x0, {{0x8, 0x9, 0xdc2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xf, 0x5, "5628aef986b49ddf877271"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x81, 0x5, "f1cc42f0fd7c691688901147167df5b1e52ecf53b5d729daa97d5549981a98bc948fb900ae26ea5e2cd0314d0587ba97a86bc87cddaeda7dfd61d607bbd37db3f69c2df63945a2325974e376a40d77c9e24de6e5c208d0d2b94d8559b60c4e1824db86ba082d5045010e681a60c82557e96f6696342605be308c49c68a"}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xf, 0x1, 0x47}, {0xcb4, 0x51, 0x6, 0x2, 0xc, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8}, {0x0, 0xb, 0x8, 0x6, 0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x3, 0x4, 0xb}, [@TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='O', @TCF_META_TYPE_VAR="6da1ba50b9", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='~*\r', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x100}, {{0x4, 0x1}, {0x4, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0xffff}, {0x7fffffff, 0x23, 0x1, 0x2, 0xc, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xa3c}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x800, 0x2, 0x9}, {0x6, 0x1, 0x2, '\\'}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x4}, {0x4, 0x6, 0x2, "d1b21a3854ae"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x5}, {0x3, 0x5, 0x2}}}, @TCF_EM_IPT={0x58, 0x3, 0x0, 0x0, {{0x1, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x41, 0x5, "76c4acc5b94237087690a8ab24276f88d1f1a376990089a7c9f696bbb1f617957e461a672afa0364089d54dac2e43f1988b83af9fdf9d443eeb1952f34"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0x220, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x10c, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x1580}, "0b7d664074ef58cb58b2ebe76834497839c907511782c9385eaea2cb68aafacbf00cc89fb57e6e801f17dfb8783368c659035bfbbd84a5203904b4b6ff23a06221e9177d0716eacd2d349e82bc5e35813fc333180270c7a9eaeb63b254bc245a13b47a51adaac0291509f0409d7a18f10959f20632af0f470b0885222a92888af443da81c8ee367ab1bbfadca434401a9d91446d88070ba4f84d8752a0403b18ce92c01959eb4ff1f6928c3984f16a250ab76c6f50c2ab1c8d9f6f723c59b940a71430e5c16f3cf0ed7ff11510a95d012a528cd0e280f037593ccff0ad73662cf4a60f8e8a1542366dc6e694e3a1fc4ba3b8e9cfe31ee25dd7d72a2dfd"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0xf794}, {0x1, 0x5, 0x2}}}, @TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x6}, {0x1, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xf}, {0xce, 0x2, 0x6}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="6f785328ada290c3df"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfeb, 0x1}, {0x7153, 0x7, 0x1}}}]}}, @TCF_EM_META={0x3c, 0x2, 0x0, 0x0, {{0x7, 0x4, 0xf857}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="a5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x5, 0x1}, {0x4, 0xd}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x39, 0x4}, {0x1, 0x88}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xb}, {0x7, 0x2, 0xb0f1, 0x40}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1e2c, 0x8, 0x101}, {0x0, 0x4, 0x6}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x2, 0x2, 0x6}, {0x9, 0x6, 0x2, "3f568e1ee867"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x87a9, 0x8, 0x9}, {0x1, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x90d}, {0xe, 0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_BASIC_POLICE={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0xfe}}, @filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x924, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x7}}, @TCA_MATCHALL_ACT={0x918, 0x2, [@m_connmark={0x9c, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x7, 0x4, 0x0, 0x401}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x142c0496, 0x9, 0x6, 0x4, 0x80f}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x10000, 0x4, 0x80, 0x7}, 0x61b}}]}, {0x15, 0x6, "83789bb47baf7a99429eeaab898cca114d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x114, 0x20, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1e, 0x0, 0x3800000, 0x80000001}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffe01, 0x5, 0xfffffff7}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xffffff80, 0x8, 0x6, 0x9}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x0, 0xc, 0x7}, 0x47}}]}, {0x75, 0x6, "0b9ebab31cae96b089824b2df9616a2a31e9492c9d77195071b3c63cc870af269d16eebf8deccbbbaf42bf24c320ee1400e5cef99817cc04e3f66fe35b515221767eb2b73b55289603c323c1fdb223cffec01cef24f488472f2d1863c66b6882c9f7d9d9708b35771d66a69ee952a0c840"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xa0, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x59, 0x6, "1e695d8ff0da703fd6d67faf13d8a06463e9bcf3bac46b38bd4c439b7bc28e26840e3489051e9f9e50b62f2bb615228f17e11af05e184cfc4a30843b76e0a086b88186e3f3e53069b39c4186daf3f722f53807d4a6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x6c4, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x691, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xf78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.509458814s ago: executing program 7 (id=693): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000100)={{0x73, @remote, 0x4e21, 0x4, 'none\x00', 0x2, 0x0, 0x15}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e20, 0x2000, 0xffff, 0x7, 0x6d}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) socket$l2tp(0x2, 0x2, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x4}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {0x0, 0x200}, {0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x1000}, {0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x200000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) gettid() syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000600)=""/129, 0x81}], 0x2}, 0x20) 2.417604938s ago: executing program 2 (id=694): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x5]}, 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000580)={0x18, 0x1, 0x0, {0x10}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x10}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0xfff, 0x5]) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) 2.148836314s ago: executing program 9 (id=695): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f00000000c0)='*!@\x00', 0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1.893260705s ago: executing program 7 (id=696): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x80, 0x1000, 0xc1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.158959827s ago: executing program 9 (id=697): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000020008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700"], 0x38}, 0x0) 1.005076859s ago: executing program 9 (id=698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r2, 0x0, 0x8811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, [0x1f0, 0x300, 0xb16, 0x146]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) landlock_restrict_self(0xffffffffffffffff, 0x5) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002280)=@newlink={0x20, 0x10, 0x8, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x28000}}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x8, 0x20, 0x1000, 0x5, {{0x5, 0x4, 0x2, 0x32, 0x14, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @local}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001ec0)={'ip6_vti0\x00', &(0x7f0000001e40)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xde, 0xf96, 0x60, @mcast2, @loopback, 0x40, 0x8000, 0x12, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002240)={'syztnl1\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0xa5, 0x7ff, 0xa, @dev={0xfe, 0x80, '\x00', 0x2d}, @private0={0xfc, 0x0, '\x00', 0x2}, 0x1, 0x700, 0xc5d, 0x800}}) 250.141045ms ago: executing program 6 (id=699): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001400b59540000000fcffffff0a3f0000", @ANYRES32=r1, @ANYBLOB="14000200fe800001f0ffffffffffff00000000aa140006000000000001f0ffff000000000000000014000100fe80000000000000000000000000003fb3f39475337b792dd0fc3dabb681f7e637fc4b09e1fc9760c0723db45344e4a80ada8488dc0e1ef3b9a2638ac77851cc96e29c039c8961bfe60a274cabee08dba5425504afe98655decfec58df94b322f22a76668a68da66bf"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 245.290413ms ago: executing program 8 (id=700): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) setreuid(0x0, 0xee00) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x50) ioctl$vim2m_VIDIOC_S_FMT(r2, 0x40806685, 0x0) 37.213809ms ago: executing program 8 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsmount(r3, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) 19.758305ms ago: executing program 9 (id=702): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x3, 0x6) add_key(&(0x7f0000000740)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, 0xfffffffffffffffe) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setregid(0xffffffffffffffff, 0xee00) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f00000007c0)=0x14000a, 0x4) recvmmsg(r4, &(0x7f0000000340), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x468241, 0x0) 0s ago: executing program 6 (id=703): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xd, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x20) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000400)=[0xe75b, 0xf8e1], 0x2) sendmmsg$inet6(r3, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0}}], 0x1, 0x810) r4 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000040)={0xc776}) bind$netrom(r3, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@default, @null, @default, @null, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x6, 0x0, &(0x7f0000000440)="1add00000212a2771b9ff32b127c0dabfb570eac22deddf97ed919232fb074d10e0d5c7db154abd5e4bca4520ace72341de0247b4b2619fc535be370b4b9806f5d013d05e47179a8b4506699872ca9b16c6fafecc6489bb8fe3f58dc6c6cb86b5f13d05629a2095a0907a017007fd9e8c2cb872ef15e7b270c33e95e4a94d3e0f1c9671a650d45f5a3d6b8e7b4bcb65a65dc8a105e4ac28b38aeb23e469c12f9b65c30a8a3e4c8585d7410b90b096e2bf7f504ee7200e7e411e1e458e79998a73608ed467d9f89a8871e6b9d407180fc5b00f1f32912248f275d24b520b426e8b0a3b2531735f36e", 0xe8) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x9) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f00000000c0)=0x10) kernel console output (not intermixed with test programs): 68): avc: denied { link } for pid=7168 comm="syz.8.258" name="#7" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.681246][ T5852] usb 8-1: USB disconnect, device number 3 [ 170.735311][ T30] audit: type=1400 audit(1770248905.998:369): avc: denied { rename } for pid=7168 comm="syz.8.258" name="#8" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.888357][ T43] usb 6-1: USB disconnect, device number 4 [ 170.999669][ T30] audit: type=1400 audit(1770248906.418:370): avc: denied { connect } for pid=7184 comm="syz.9.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.040136][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 171.047893][ T30] audit: type=1400 audit(1770248906.418:371): avc: denied { write } for pid=7184 comm="syz.9.263" path="socket:[17054]" dev="sockfs" ino=17054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.153811][ T5852] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 171.250414][ T7188] team0: Port device batadv1 added [ 171.250656][ T7190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.474340][ T5852] usb 8-1: Using ep0 maxpacket: 32 [ 171.480146][ T30] audit: type=1400 audit(1770248906.898:372): avc: denied { ioctl } for pid=7180 comm="syz.6.262" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x5512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.512105][ T5852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 171.527770][ T5852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 171.553862][ T5852] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 171.563685][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.576547][ T5852] usb 8-1: Product: syz [ 171.585258][ T5852] usb 8-1: Manufacturer: syz [ 171.596855][ T5852] usb 8-1: SerialNumber: syz [ 171.605143][ T5852] usb 8-1: config 0 descriptor?? [ 171.621036][ T5852] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input7 [ 171.702566][ T5885] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 171.857356][ T7205] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 171.865001][ T30] audit: type=1400 audit(1770248907.278:373): avc: denied { unmount } for pid=6680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.872612][ T5885] usb 10-1: Using ep0 maxpacket: 8 [ 171.996503][ T5885] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.025361][ T5885] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.066624][ T5885] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.103016][ T5885] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.212091][ T30] audit: type=1400 audit(1770248907.598:374): avc: denied { write } for pid=7211 comm="syz.6.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 172.271771][ T5885] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.405007][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.490502][ T7217] bridge1: entered allmulticast mode [ 173.274934][ T5885] usb 10-1: GET_CAPABILITIES returned 0 [ 173.332698][ T5885] usbtmc 10-1:16.0: can't read capabilities [ 173.856780][ T7239] gre0 speed is unknown, defaulting to 1000 [ 173.862568][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 173.866031][ T7239] gre0 speed is unknown, defaulting to 1000 [ 173.910373][ T7239] gre0 speed is unknown, defaulting to 1000 [ 174.095874][ T7239] infiniband syz1: set active [ 174.101482][ T5852] gre0 speed is unknown, defaulting to 1000 [ 174.107753][ T7239] infiniband syz1: added gre0 [ 174.134528][ T7239] RDS/IB: syz1: added [ 174.139349][ T7239] smc: adding ib device syz1 with port count 1 [ 174.153068][ T7239] smc: ib device syz1 port 1 has no pnetid [ 174.163943][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 174.165582][ T5852] gre0 speed is unknown, defaulting to 1000 [ 174.185853][ T43] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 174.186146][ T7239] gre0 speed is unknown, defaulting to 1000 [ 174.208378][ T43] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.271593][ T43] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.296213][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.328086][ T43] usbtmc 7-1:16.0: bulk endpoints not found [ 174.537263][ T7239] gre0 speed is unknown, defaulting to 1000 [ 175.265040][ T43] usb 10-1: USB disconnect, device number 2 [ 175.398675][ T7272] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 175.602216][ T7239] gre0 speed is unknown, defaulting to 1000 [ 175.643007][ T43] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 175.808854][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 768, setting to 64 [ 175.836534][ T43] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 175.880707][ T43] usb 10-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 175.918083][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.958871][ T7239] gre0 speed is unknown, defaulting to 1000 [ 175.961789][ T43] usb 10-1: config 0 descriptor?? [ 175.986845][ T7268] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 176.198268][ T43] usbhid 10-1:0.0: can't add hid device: -71 [ 176.222733][ T43] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 176.260125][ T43] usb 10-1: USB disconnect, device number 3 [ 176.313219][ T7239] gre0 speed is unknown, defaulting to 1000 [ 176.457630][ T5852] usb 7-1: USB disconnect, device number 3 [ 176.619200][ T7239] gre0 speed is unknown, defaulting to 1000 [ 176.855733][ T7298] 9p: Bad value for 'rfdno' [ 176.855733][ T7295] 9p: Bad value for 'rfdno' [ 177.067129][ T7307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.636660][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 177.636689][ T30] audit: type=1400 audit(1770248912.958:378): avc: denied { setopt } for pid=7304 comm="syz.6.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.398556][ T43] usb 8-1: USB disconnect, device number 4 [ 179.374873][ T30] audit: type=1400 audit(1770248914.618:379): avc: denied { create } for pid=7330 comm="syz.7.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.528014][ T30] audit: type=1400 audit(1770248914.888:380): avc: denied { write } for pid=7330 comm="syz.7.289" path="socket:[17397]" dev="sockfs" ino=17397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.742587][ T5915] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 179.915256][ T5915] usb 9-1: Using ep0 maxpacket: 8 [ 179.939605][ T5915] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 179.999397][ T5915] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.033653][ T5866] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 180.063491][ T5915] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.094810][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.168564][ T5915] usbtmc 9-1:16.0: bulk endpoints not found [ 180.214768][ T5866] usb 7-1: Using ep0 maxpacket: 16 [ 180.421189][ T792] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 180.774507][ T792] usb 6-1: Using ep0 maxpacket: 16 [ 180.788658][ T792] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.764641][ T792] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.797826][ T792] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.842296][ T5866] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 181.851635][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.859879][ T5866] usb 7-1: Product: syz [ 181.864239][ T5866] usb 7-1: Manufacturer: syz [ 181.868898][ T5866] usb 7-1: SerialNumber: syz [ 181.871358][ T792] usb 6-1: config 1 interface 0 has no altsetting 0 [ 181.881695][ T5866] usb 7-1: config 0 descriptor?? [ 181.889554][ T5866] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 181.904364][ T792] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.940195][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.977951][ T792] usb 6-1: Product: syz [ 181.990883][ T792] usb 6-1: Manufacturer: syz [ 182.007588][ T792] usb 6-1: SerialNumber: syz [ 182.151782][ T7331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.160449][ T7331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.295664][ T792] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 182.495363][ T7353] FAULT_INJECTION: forcing a failure. [ 182.495363][ T7353] name failslab, interval 1, probability 0, space 0, times 1 [ 182.530582][ T7353] CPU: 0 UID: 0 PID: 7353 Comm: syz.5.294 Not tainted syzkaller #0 PREEMPT(full) [ 182.530607][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 182.530617][ T7353] Call Trace: [ 182.530622][ T7353] [ 182.530629][ T7353] dump_stack_lvl+0x100/0x190 [ 182.530660][ T7353] should_fail_ex.cold+0x5/0xa [ 182.530681][ T7353] should_failslab+0xc2/0x120 [ 182.530703][ T7353] ? tomoyo_encode2+0xfb/0x3c0 [ 182.530722][ T7353] __kmalloc_noprof+0xf6/0x9c0 [ 182.530746][ T7353] ? tomoyo_encode2+0xfb/0x3c0 [ 182.530762][ T7353] tomoyo_encode2+0xfb/0x3c0 [ 182.530784][ T7353] tomoyo_encode+0x29/0x50 [ 182.530801][ T7353] tomoyo_realpath_from_path+0x18c/0x690 [ 182.530826][ T7353] tomoyo_path_number_perm+0x23c/0x580 [ 182.530850][ T7353] ? tomoyo_path_number_perm+0x22e/0x580 [ 182.530877][ T7353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.530928][ T7353] ? find_held_lock+0x2b/0x80 [ 182.530951][ T7353] ? hook_file_ioctl_common+0x146/0x410 [ 182.530972][ T7353] ? __fget_files+0x215/0x3d0 [ 182.530976][ T792] usb 9-1: USB disconnect, device number 4 [ 182.530997][ T7353] ? __fget_files+0x21f/0x3d0 [ 182.531024][ T7353] security_file_ioctl+0xd3/0x230 [ 182.531042][ T7353] __x64_sys_ioctl+0xb7/0x210 [ 182.531059][ T7353] do_syscall_64+0xc9/0xf80 [ 182.531078][ T7353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.531092][ T7353] RIP: 0033:0x7f2c7319aeb9 [ 182.531106][ T7353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.531120][ T7353] RSP: 002b:00007f2c74040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.531135][ T7353] RAX: ffffffffffffffda RBX: 00007f2c73415fa0 RCX: 00007f2c7319aeb9 [ 182.531145][ T7353] RDX: 0000200000000440 RSI: 0000000080605414 RDI: 0000000000000004 [ 182.531154][ T7353] RBP: 00007f2c74040090 R08: 0000000000000000 R09: 0000000000000000 [ 182.531163][ T7353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.531172][ T7353] R13: 00007f2c73416038 R14: 00007f2c73415fa0 R15: 00007fff15665aa8 [ 182.531193][ T7353] [ 182.531228][ T7353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.823661][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.8.299'. [ 182.873630][ T7376] vlan2: entered promiscuous mode [ 182.933259][ T7376] gretap0: entered promiscuous mode [ 183.001443][ T7380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.016659][ T43] usb 6-1: USB disconnect, device number 5 [ 183.030034][ T43] usblp0: removed [ 183.550438][ T5915] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 183.825318][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.301'. [ 183.834162][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.301'. [ 183.843779][ T7398] netlink: 'syz.5.301': attribute type 13 has an invalid length. [ 183.851524][ T7398] netlink: 'syz.5.301': attribute type 12 has an invalid length. [ 184.217320][ T7391] gre0 speed is unknown, defaulting to 1000 [ 184.228370][ T5915] usb 9-1: unable to get BOS descriptor or descriptor too short [ 184.264553][ T5915] usb 9-1: config 9 has an invalid interface number: 246 but max is 0 [ 184.273467][ T5915] usb 9-1: config 9 has no interface number 0 [ 184.291519][ T5915] usb 9-1: config 9 interface 246 has no altsetting 0 [ 184.301545][ T5866] usb 7-1: clie_3_5_startup: get interface number failed: -71 [ 184.323706][ T5866] visor 7-1:0.0: probe with driver visor failed with error -71 [ 184.570468][ T5866] usb 7-1: USB disconnect, device number 4 [ 184.609023][ T5915] usb 9-1: New USB device found, idVendor=19d2, idProduct=ffc6, bcdDevice=11.97 [ 184.618494][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.626620][ T5915] usb 9-1: Product: syz [ 184.808452][ T7405] netlink: 'syz.5.302': attribute type 10 has an invalid length. [ 184.840253][ T5915] usb 9-1: Manufacturer: syz [ 184.846568][ T5915] usb 9-1: SerialNumber: syz [ 184.861138][ T30] audit: type=1400 audit(1770248920.218:381): avc: denied { write } for pid=7401 comm="syz.5.302" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 184.925630][ T7404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.928254][ T7405] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.998487][ T7405] bond0: (slave team0): Enslaving as an active interface with an up link [ 185.030861][ T30] audit: type=1400 audit(1770248920.218:382): avc: denied { ioctl } for pid=7401 comm="syz.5.302" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 186.712348][ T7425] fuse: Bad value for 'fd' [ 186.902988][ T5915] option 9-1:9.246: GSM modem (1-port) converter detected [ 187.089347][ T5915] usb 9-1: USB disconnect, device number 5 [ 187.116620][ T5915] option 9-1:9.246: device disconnected [ 187.332574][ T5840] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 187.522720][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 187.556928][ T5840] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 187.582901][ T5840] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.596663][ T5840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.622087][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.653082][ T5840] usbtmc 6-1:16.0: bulk endpoints not found [ 187.690387][ T7457] gre0 speed is unknown, defaulting to 1000 [ 187.848511][ T7463] raw_sendmsg: syz.8.316 forgot to set AF_INET. Fix it! [ 187.963902][ T5840] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 188.098863][ T7471] fuse: Bad value for 'fd' [ 188.132593][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 188.149442][ T5840] usb 7-1: config 0 has no interfaces? [ 188.155917][ T5840] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 188.177111][ T5840] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 188.291787][ T5840] usb 7-1: Manufacturer: syz [ 188.355207][ T5840] usb 7-1: config 0 descriptor?? [ 188.596755][ T30] audit: type=1400 audit(1770248923.988:383): avc: denied { watch } for pid=7450 comm="syz.6.314" path="/22" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 188.951955][ T30] audit: type=1400 audit(1770248924.368:384): avc: denied { map } for pid=7492 comm="syz.7.323" path="socket:[18742]" dev="sockfs" ino=18742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.249080][ T30] audit: type=1400 audit(1770248924.368:385): avc: denied { read accept } for pid=7492 comm="syz.7.323" path="socket:[18742]" dev="sockfs" ino=18742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.422602][ T6882] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 189.608199][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.324'. [ 189.694675][ T6882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 189.735908][ T6882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 189.789131][ T6882] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.804266][ T6882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.823947][ T6882] usb 8-1: Product: syz [ 189.832386][ T6882] usb 8-1: Manufacturer: syz [ 189.841014][ T6882] usb 8-1: SerialNumber: syz [ 189.894075][ T6882] usb 8-1: config 0 descriptor?? [ 189.923138][ T6882] usb 8-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 190.072825][ T5915] usb 6-1: USB disconnect, device number 6 [ 190.160831][ T7495] netlink: 35 bytes leftover after parsing attributes in process `syz.7.323'. [ 190.593709][ T5915] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 190.633711][ T7523] lo speed is unknown, defaulting to 1000 [ 190.641290][ T7524] smc: removing ib device syz1 [ 190.672891][ T43] usb 7-1: USB disconnect, device number 5 [ 190.867298][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 190.875384][ T5915] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.909711][ T5915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.999642][ T5915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.066238][ T5915] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.088688][ T7522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.106894][ T5915] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.162189][ T7523] lo speed is unknown, defaulting to 1000 [ 191.169420][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.210651][ T7523] lo speed is unknown, defaulting to 1000 [ 191.234297][ T30] audit: type=1326 audit(1770248926.648:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 191.262085][ T7523] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 191.278332][ T30] audit: type=1326 audit(1770248926.658:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 191.318001][ T30] audit: type=1326 audit(1770248926.658:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 191.363152][ T30] audit: type=1326 audit(1770248926.658:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 191.403206][ T7523] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 191.423718][ T5915] usb 6-1: GET_CAPABILITIES returned 0 [ 191.429241][ T5915] usbtmc 6-1:16.0: can't read capabilities [ 191.442574][ T30] audit: type=1326 audit(1770248926.658:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 191.517725][ T7523] lo speed is unknown, defaulting to 1000 [ 191.523783][ T30] audit: type=1326 audit(1770248926.778:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ef859ab4b code=0x7ffc0000 [ 191.559442][ T30] audit: type=1326 audit(1770248926.778:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ef859ab4b code=0x7ffc0000 [ 191.582958][ T30] audit: type=1326 audit(1770248926.908:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ef859ab4b code=0x7ffc0000 [ 191.607823][ T7523] lo speed is unknown, defaulting to 1000 [ 191.614640][ T7523] lo speed is unknown, defaulting to 1000 [ 191.622959][ T7523] lo speed is unknown, defaulting to 1000 [ 191.623453][ T5840] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 191.630330][ T7523] lo speed is unknown, defaulting to 1000 [ 191.642600][ T30] audit: type=1326 audit(1770248926.978:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ef859ab4b code=0x7ffc0000 [ 191.677109][ T7523] lo speed is unknown, defaulting to 1000 [ 191.976485][ T30] audit: type=1326 audit(1770248927.398:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ef859ab4b code=0x7ffc0000 [ 192.103929][ T5840] usb 7-1: device descriptor read/64, error -71 [ 192.157215][ T7549] binfmt_misc: register: failed to install interpreter file ./file0 [ 192.257479][ T7544] comedi: valid board names for 8255 driver are: [ 192.343496][ T7544] 8255 [ 192.355591][ T7544] comedi: valid board names for vmk80xx driver are: [ 192.369209][ T7544] vmk80xx [ 192.372281][ T7544] comedi: valid board names for usbduxsigma driver are: [ 192.389009][ T7544] usbduxsigma [ 192.392421][ T7544] comedi: valid board names for usbduxfast driver are: [ 192.401058][ T7544] usbduxfast [ 192.404473][ T7544] comedi: valid board names for usbdux driver are: [ 192.410994][ T7544] usbdux [ 192.414358][ T7544] comedi: valid board names for ni6501 driver are: [ 192.422899][ T5840] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 192.507032][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz.7.337'. [ 192.510729][ T7544] ni6501 [ 192.530657][ T6882] usb 8-1: USB disconnect, device number 5 [ 192.565540][ T7544] comedi: valid board names for dt9812 driver are: [ 192.578914][ T7544] dt9812 [ 192.605657][ T7544] comedi: valid board names for ni_labpc_cs driver are: [ 192.614225][ T7544] ni_labpc_cs [ 192.614390][ T5840] usb 7-1: device descriptor read/64, error -71 [ 192.626539][ T7544] comedi: valid board names for ni_daq_700 driver are: [ 192.634146][ T7544] ni_daq_700 [ 192.642693][ T7544] comedi: valid board names for labpc_pci driver are: [ 192.652832][ T7544] labpc_pci [ 192.658325][ T7544] comedi: valid board names for adl_pci9118 driver are: [ 192.667948][ T7544] pci9118dg [ 192.672312][ T7544] pci9118hg [ 192.676649][ T7544] pci9118hr [ 192.687915][ T7544] comedi: valid board names for 8255_pci driver are: [ 192.696218][ T7544] 8255_pci [ 192.699075][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.700466][ T7544] comedi: valid board names for s526 driver are: [ 192.723033][ T7544] s526 [ 192.726792][ T7544] comedi: valid board names for multiq3 driver are: [ 192.772241][ T7544] multiq3 [ 192.781719][ T7544] comedi: valid board names for pcmuio driver are: [ 192.790426][ T7544] pcmuio48 [ 192.793724][ T5840] usb usb7-port1: attempt power cycle [ 192.800246][ T7544] pcmuio96 [ 192.805686][ T7544] comedi: valid board names for pcmmio driver are: [ 192.820072][ T7544] pcmmio [ 192.824465][ T7544] comedi: valid board names for pcmda12 driver are: [ 192.835806][ T7544] pcmda12 [ 192.839123][ T7544] comedi: valid board names for pcmad driver are: [ 192.846737][ T7544] pcmad12 [ 192.850119][ T7544] pcmad16 [ 192.857205][ T7544] comedi: valid board names for ni_labpc driver are: [ 192.863925][ T7544] lab-pc-1200 [ 192.867320][ T7544] lab-pc-1200ai [ 192.870887][ T7544] lab-pc+ [ 192.953009][ T7544] comedi: valid board names for atmio16 driver are: [ 192.961179][ T7544] atmio16 [ 192.970342][ T7544] atmio16d [ 192.977503][ T7544] comedi: valid board names for ni_at_ao driver are: [ 193.016986][ T7544] at-ao-6 [ 193.022997][ T7544] at-ao-10 [ 193.027085][ T7544] comedi: valid board names for ni_at_a2150 driver are: [ 193.048221][ T7544] ni_at_a2150 [ 193.079096][ T7544] comedi: valid board names for adq12b driver are: [ 193.082534][ T6882] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 193.093214][ T7544] adq12b [ 193.105730][ T7544] comedi: valid board names for mpc624 driver are: [ 193.125464][ T7544] mpc624 [ 193.128460][ T7544] comedi: valid board names for c6xdigio driver are: [ 193.138624][ T7544] c6xdigio [ 193.141762][ T7544] comedi: valid board names for aio_iiro_16 driver are: [ 193.149804][ T7544] aio_iiro_16 [ 193.153421][ T7544] comedi: valid board names for aio_aio12_8 driver are: [ 193.161437][ T7544] aio_aio12_8 [ 193.165183][ T7544] aio_ai12_8 [ 193.168471][ T7544] aio_ao12_4 [ 193.171774][ T7544] comedi: valid board names for fl512 driver are: [ 193.172676][ T5840] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 193.193737][ T7544] fl512 [ 193.196580][ T7544] comedi: valid board names for dmm32at driver are: [ 193.212760][ T7544] dmm32at [ 193.226352][ T7544] comedi: valid board names for dt282x driver are: [ 193.233371][ T7544] dt2821 [ 193.251526][ T7544] dt2821-f [ 193.254711][ T6882] usb 8-1: Using ep0 maxpacket: 8 [ 193.263368][ T7544] dt2821-g [ 193.267101][ T7544] dt2823 [ 193.269909][ T6882] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 193.294020][ T7544] dt2824-pgh [ 193.297388][ T7544] dt2824-pgl [ 193.297434][ T6882] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.324115][ T7544] dt2825 [ 193.336399][ T7544] dt2827 [ 193.339878][ T7544] dt2828 [ 193.345042][ T7544] dt2829 [ 193.349097][ T7544] dt21-ez [ 193.352187][ T7544] dt23-ez [ 193.357609][ T7544] dt24-ez [ 193.360632][ T7544] dt24-ez-pgl [ 193.366401][ T5840] usb 7-1: device descriptor read/8, error -71 [ 193.376278][ T6882] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.376307][ T7544] comedi: valid board names for dt2817 driver are: [ 193.421755][ T6882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.429928][ T7544] dt2817 [ 193.434011][ T7544] comedi: valid board names for dt2815 driver are: [ 193.446040][ T7544] dt2815 [ 193.449014][ T7544] comedi: valid board names for dt2814 driver are: [ 193.455864][ T7544] dt2814 [ 193.461917][ T7544] comedi: valid board names for dt2811 driver are: [ 193.468567][ T7544] dt2811-pgh [ 193.472954][ T7544] dt2811-pgl [ 193.477311][ T7544] comedi: valid board names for dt2801 driver are: [ 193.483867][ T7544] dt2801 [ 193.486824][ T7544] comedi: valid board names for das6402 driver are: [ 193.494692][ T7544] das6402-12 [ 193.499044][ T7544] das6402-16 [ 193.505152][ T7544] comedi: valid board names for das1800 driver are: [ 193.512009][ T6882] usbtmc 8-1:16.0: bulk endpoints not found [ 193.518054][ T7544] das-1701st [ 193.524358][ T7544] das-1701st-da [ 193.528074][ T7544] das-1702st [ 193.532455][ T7544] das-1702st-da [ 193.536046][ T7544] das-1702hr [ 193.539359][ T7544] das-1702hr-da [ 193.543923][ T7544] das-1701ao [ 193.547211][ T7544] das-1702ao [ 193.550532][ T7544] das-1801st [ 193.554901][ T7544] das-1801st-da [ 193.616485][ T7544] das-1802st [ 193.620937][ T7544] das-1802st-da [ 193.625998][ T7544] das-1802hr [ 193.634846][ T7544] das-1802hr-da [ 193.655237][ T7544] das-1801hc [ 193.658602][ T7544] das-1802hc [ 193.664291][ T7544] das-1801ao [ 193.678501][ T7544] das-1802ao [ 193.682579][ T5840] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 193.694574][ T7544] comedi: valid board names for das800 driver are: [ 193.711759][ T7544] das-800 [ 193.726435][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.733129][ T5840] usb 7-1: device descriptor read/8, error -71 [ 193.739346][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.753498][ T7544] cio-das800 [ 193.782353][ T7544] das-801 [ 193.861299][ T7544] cio-das801 [ 193.862975][ T5840] usb usb7-port1: unable to enumerate USB device [ 193.873587][ T7544] das-802 [ 193.891627][ T7544] cio-das802 [ 193.907115][ T7544] cio-das802/16 [ 193.915135][ T7544] comedi: valid board names for isa-das08 driver are: [ 193.963454][ T7544] isa-das08 [ 193.968899][ T7544] das08-pgm [ 193.972076][ T7544] das08-pgh [ 193.986719][ T7544] das08-pgl [ 193.989918][ T7544] das08-aoh [ 193.994116][ T7544] das08-aol [ 193.997369][ T7544] das08-aom [ 194.000541][ T7544] das08/jr-ao [ 194.013729][ T7544] das08jr-16-ao [ 194.034866][ T7544] pc104-das08 [ 194.058058][ T7544] das08jr/16 [ 194.061689][ T7544] comedi: valid board names for das16m1 driver are: [ 194.074892][ T7544] das16m1 [ 194.077906][ T7544] comedi: valid board names for dac02 driver are: [ 194.113553][ T7577] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 194.168610][ T7544] dac02 [ 194.171474][ T7544] comedi: valid board names for rti802 driver are: [ 194.180575][ T7544] rti802 [ 194.185265][ T7544] comedi: valid board names for rti800 driver are: [ 194.195136][ T7544] rti800 [ 194.317326][ T7544] rti815 [ 194.325281][ T7544] comedi: valid board names for pcm3724 driver are: [ 194.343339][ T7544] pcm3724 [ 194.349367][ T7544] comedi: valid board names for pcl818 driver are: [ 194.361958][ T7544] pcl818l [ 194.370363][ T7544] pcl818h [ 194.377086][ T7544] pcl818hd [ 194.381689][ T7544] pcl818hg [ 194.389045][ T7544] pcl818 [ 194.398053][ T7544] pcl718 [ 194.402135][ T7544] pcm3718 [ 194.413694][ T7544] comedi: valid board names for pcl816 driver are: [ 194.420826][ T7544] pcl816 [ 194.426813][ T7544] pcl814b [ 194.433496][ T7544] comedi: valid board names for pcl812 driver are: [ 194.454212][ T7544] pcl812 [ 194.461598][ T7544] pcl812pg [ 194.473232][ T7544] acl8112pg [ 194.479764][ T7544] acl8112dg [ 194.494980][ T7544] acl8112hg [ 194.501995][ T7544] a821pgl [ 194.512943][ T7544] a821pglnda [ 194.516779][ T7544] a821pgh [ 194.522364][ T7544] a822pgl [ 194.537570][ T7544] a822pgh [ 194.542713][ T7544] a823pgl [ 194.548451][ T7544] a823pgh [ 194.554857][ T7544] pcl813 [ 194.560518][ T7544] pcl813b [ 194.569002][ T7544] acl8113 [ 194.575311][ T7544] iso813 [ 194.581771][ T7544] acl8216 [ 194.589372][ T7544] a826pg [ 194.605741][ T7544] comedi: valid board names for pcl730 driver are: [ 194.621129][ T7544] pcl730 [ 194.627741][ T7544] iso730 [ 194.637366][ T7544] acl7130 [ 194.654057][ T7544] pcm3730 [ 194.663381][ T7544] pcl725 [ 194.668554][ T7544] p8r8dio [ 194.676747][ T7544] acl7225b [ 194.683554][ T7544] p16r16dio [ 194.690048][ T7544] pcl733 [ 194.699482][ T7544] pcl734 [ 194.730640][ T7544] opmm-1616-xt [ 194.745758][ T7544] pearl-mm-p [ 194.764581][ T7544] ir104-pbf [ 194.770776][ T7544] comedi: valid board names for pcl726 driver are: [ 194.787651][ T7544] pcl726 [ 194.793692][ T7544] pcl727 [ 194.800129][ T7544] pcl728 [ 194.813004][ T7544] acl6126 [ 194.821613][ T7544] acl6128 [ 194.824678][ T7573] delete_channel: no stack [ 194.843088][ T7544] comedi: valid board names for pcl724 driver are: [ 194.850091][ T7544] pcl724 [ 194.855198][ T7544] pcl722 [ 194.859135][ T7544] pcl731 [ 194.868848][ T7544] acl7122 [ 194.894240][ T7544] acl7124 [ 194.901885][ T7544] pet48dio [ 194.908290][ T7544] pcmio48 [ 195.031166][ T7544] onyx-mm-dio [ 195.039083][ T7544] comedi: valid board names for pcl711 driver are: [ 195.052573][ T7544] pcl711 [ 195.055745][ T7544] pcl711b [ 195.064480][ T7544] acl8112hg [ 195.475025][ T7544] acl8112dg [ 195.505505][ T7544] comedi: valid board names for amplc_pc263 driver are: [ 195.521663][ T7544] pc263 [ 195.536682][ T7544] comedi: valid board names for amplc_pc236 driver are: [ 195.553645][ T7544] pc36at [ 195.558965][ T7544] comedi: valid board names for amplc_dio200 driver are: [ 195.566253][ T7544] pc212e [ 195.569278][ T7544] pc214e [ 195.572321][ T7544] pc215e [ 195.577790][ T7544] pc218e [ 195.582762][ T7544] pc272e [ 195.592443][ T7544] comedi: valid board names for comedi_parport driver are: [ 195.610109][ T7544] comedi_parport [ 195.618070][ T7544] comedi: valid board names for comedi_test driver are: [ 195.637746][ T7544] comedi_test [ 195.647750][ T7544] comedi: valid board names for comedi_bond driver are: [ 195.679180][ T7544] comedi_bond [ 195.763858][ T5852] usb 8-1: USB disconnect, device number 6 [ 195.827420][ T5916] usb 6-1: USB disconnect, device number 7 [ 196.582605][ T5866] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 196.885618][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 196.933463][ T5866] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 196.945597][ T5866] usb 8-1: config 0 has no interface number 0 [ 196.956184][ T5866] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 196.967291][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.993691][ T5866] usb 8-1: Product: syz [ 197.002547][ T5866] usb 8-1: Manufacturer: syz [ 197.007930][ T5866] usb 8-1: SerialNumber: syz [ 197.040263][ T5866] usb 8-1: config 0 descriptor?? [ 197.070376][ T5866] smsc95xx v2.0.0 [ 197.098764][ T5866] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 197.120358][ T7598] SELinux: policydb string does not match my string SE Linux [ 197.136426][ T5866] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 197.148506][ T7598] SELinux: failed to load policy [ 197.166211][ T7621] netlink: 'syz.5.348': attribute type 10 has an invalid length. [ 197.244355][ T7621] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 197.388092][ T7602] bond1: entered promiscuous mode [ 197.440962][ T7602] bond1: entered allmulticast mode [ 197.460441][ T30] kauditd_printk_skb: 351 callbacks suppressed [ 197.460457][ T30] audit: type=1400 audit(1770248932.878:747): avc: denied { setopt } for pid=7625 comm="syz.6.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.592468][ T7639] fuse: Invalid rootmode [ 197.597547][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.7.345'. [ 197.620001][ T7602] program syz.7.345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.653214][ T30] audit: type=1400 audit(1770248932.918:748): avc: denied { getopt } for pid=7625 comm="syz.6.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.685214][ T43] usb 8-1: USB disconnect, device number 7 [ 197.709239][ T7642] overlayfs: overlapping lowerdir path [ 197.954800][ T7650] sp0: Synchronizing with TNC [ 198.189396][ T7650] lo speed is unknown, defaulting to 1000 [ 198.351842][ T7660] lo speed is unknown, defaulting to 1000 [ 198.539306][ T5852] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 198.715503][ T7647] [U] [ 198.762565][ T5840] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 198.782572][ T5852] usb 6-1: Using ep0 maxpacket: 8 [ 198.803568][ T5852] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 198.814487][ T5852] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.827764][ T5852] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.892675][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.911645][ T5852] usbtmc 6-1:16.0: bulk endpoints not found [ 198.917848][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 198.927675][ T5840] usb 7-1: config 0 has no interfaces? [ 198.938465][ T5840] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.949384][ T5840] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 199.085337][ T5840] usb 7-1: Manufacturer: syz [ 199.551706][ T50] wlan1: Trigger new scan to find an IBSS to join [ 199.567869][ T5840] usb 7-1: config 0 descriptor?? [ 199.739331][ T30] audit: type=1400 audit(1770248935.158:749): avc: denied { open } for pid=7682 comm="syz.9.360" path="/dev/ptyr6" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 200.777650][ T7707] fuse: Bad value for 'rootmode' [ 201.136305][ T7709] lo speed is unknown, defaulting to 1000 [ 201.262902][ T5915] usb 6-1: USB disconnect, device number 8 [ 201.314357][ T30] audit: type=1400 audit(1770248936.728:750): avc: denied { mounton } for pid=7721 comm="syz.5.367" path="/33/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 201.339992][ T6882] usb 7-1: USB disconnect, device number 10 [ 201.346745][ T7722] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 201.583626][ T30] audit: type=1400 audit(1770248936.968:751): avc: denied { read } for pid=7721 comm="syz.5.367" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 201.790658][ T30] audit: type=1400 audit(1770248936.968:752): avc: denied { read } for pid=7721 comm="syz.5.367" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 202.278472][ T7712] lo speed is unknown, defaulting to 1000 [ 202.313349][ T30] audit: type=1400 audit(1770248936.968:753): avc: denied { open } for pid=7721 comm="syz.5.367" path="/33/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 202.432157][ T30] audit: type=1400 audit(1770248936.968:754): avc: denied { read } for pid=7721 comm="syz.5.367" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 202.546501][ T30] audit: type=1400 audit(1770248936.968:755): avc: denied { read } for pid=7721 comm="syz.5.367" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 202.682552][ T30] audit: type=1400 audit(1770248936.968:756): avc: denied { getattr } for pid=7721 comm="syz.5.367" name="saved_tgids" dev="tracefs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 202.796011][ T30] audit: type=1400 audit(1770248938.218:757): avc: denied { connect } for pid=7741 comm="syz.6.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.330760][ T36] wlan1: Trigger new scan to find an IBSS to join [ 204.008303][ T7759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.267535][ T7766] fuse: Bad value for 'rootmode' [ 204.972895][ T4547] wlan1: Creating new IBSS network, BSSID f6:79:69:18:1b:44 [ 204.991141][ T7754] lo speed is unknown, defaulting to 1000 [ 205.425678][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 205.653501][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 206.058853][ T10] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 206.188848][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.326666][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.407635][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.493879][ T10] usbtmc 6-1:16.0: bulk endpoints not found [ 207.043895][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.381'. [ 207.052744][ T7812] netlink: 16 bytes leftover after parsing attributes in process `syz.7.381'. [ 207.253462][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.383'. [ 208.015859][ T30] audit: type=1400 audit(1770248943.438:758): avc: denied { unmount } for pid=6677 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 208.193384][ T7834] netlink: 'syz.7.387': attribute type 10 has an invalid length. [ 208.238379][ T7837] netlink: 'syz.9.388': attribute type 1 has an invalid length. [ 208.254752][ T7837] netlink: 224 bytes leftover after parsing attributes in process `syz.9.388'. [ 208.311072][ T6882] usb 6-1: USB disconnect, device number 9 [ 208.539338][ T30] audit: type=1400 audit(1770248943.948:759): avc: denied { nlmsg_read } for pid=7835 comm="syz.9.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.476426][ T7857] binder: BINDER_SET_CONTEXT_MGR already set [ 209.518998][ T7857] binder: 7855:7857 ioctl 4018620d 200000004a80 returned -16 [ 209.613373][ T7857] binder: 7855:7857 ioctl 400454cd 324 returned -22 [ 209.732569][ T7868] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 209.912591][ T6882] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 210.014688][ T30] audit: type=1400 audit(1770248945.438:760): avc: denied { ioctl } for pid=7877 comm="syz.6.397" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 210.073107][ T6882] usb 6-1: device descriptor read/64, error -71 [ 210.273255][ T13] wlan1: Trigger new scan to find an IBSS to join [ 210.343568][ T6882] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 210.399198][ T30] audit: type=1400 audit(1770248945.818:761): avc: denied { getopt } for pid=7889 comm="syz.7.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.442660][ T5915] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 210.512772][ T6882] usb 6-1: device descriptor read/64, error -71 [ 210.523149][ T30] audit: type=1400 audit(1770248945.938:762): avc: denied { setopt } for pid=7889 comm="syz.7.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.662260][ T6882] usb usb6-port1: attempt power cycle [ 210.671953][ T5852] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 210.723506][ T7900] lo speed is unknown, defaulting to 1000 [ 210.760762][ T5915] usb 7-1: unable to get BOS descriptor or descriptor too short [ 210.792941][ T30] audit: type=1400 audit(1770248946.208:763): avc: denied { bind } for pid=7889 comm="syz.7.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.813098][ T5915] usb 7-1: not running at top speed; connect to a high speed hub [ 210.824315][ T5915] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.835201][ T5915] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.866009][ T5915] usb 7-1: string descriptor 0 read error: -22 [ 210.873112][ T5915] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.882548][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.914293][ T5852] usb 9-1: Using ep0 maxpacket: 8 [ 210.933977][ T5852] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 210.941150][ T5915] usb 7-1: 0:2 : does not exist [ 211.041052][ T5852] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.083810][ T5852] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.101309][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.162595][ T6882] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 211.183343][ T5852] usbtmc 9-1:16.0: bulk endpoints not found [ 211.213218][ T6882] usb 6-1: device descriptor read/8, error -71 [ 211.472843][ T6882] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 211.511349][ T6882] usb 6-1: device descriptor read/8, error -71 [ 211.639069][ T6882] usb usb6-port1: unable to enumerate USB device [ 211.683302][ T30] audit: type=1400 audit(1770248947.108:764): avc: denied { map } for pid=7914 comm="syz.7.403" path="socket:[20527]" dev="sockfs" ino=20527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.772576][ T30] audit: type=1400 audit(1770248947.108:765): avc: denied { read } for pid=7914 comm="syz.7.403" path="socket:[20527]" dev="sockfs" ino=20527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.889574][ T7929] netlink: 14 bytes leftover after parsing attributes in process `syz.9.404'. [ 212.362845][ T5915] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 212.432995][ T5915] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 212.485634][ T7929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.526041][ T5915] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 212.536302][ T5915] usb 7-1: USB disconnect, device number 11 [ 212.713064][ T7929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.084003][ T30] audit: type=1326 audit(1770248948.508:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 213.140800][ T30] audit: type=1326 audit(1770248948.508:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 213.173098][ T7929] bond0 (unregistering): Released all slaves [ 213.236818][ T30] audit: type=1326 audit(1770248948.508:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 213.430696][ T30] audit: type=1326 audit(1770248948.508:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 213.456314][ T5852] usb 9-1: USB disconnect, device number 6 [ 213.491163][ T7956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.577226][ T30] audit: type=1326 audit(1770248948.508:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 213.638538][ T7955] netem: incorrect ge model size [ 213.696963][ T7955] netem: change failed [ 213.757769][ T30] audit: type=1326 audit(1770248948.508:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 213.843125][ T30] audit: type=1326 audit(1770248948.508:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 213.877223][ T7966] binder: BINDER_SET_CONTEXT_MGR already set [ 213.883351][ T7966] binder: 7965:7966 ioctl 4018620d 200000004a80 returned -16 [ 213.908932][ T30] audit: type=1326 audit(1770248948.508:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 213.999040][ T30] audit: type=1326 audit(1770248948.508:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 214.042945][ T5917] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 214.122668][ T30] audit: type=1326 audit(1770248948.508:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7319aeb9 code=0x7ffc0000 [ 214.242532][ T5917] usb 9-1: Using ep0 maxpacket: 16 [ 214.258759][ T5917] usb 9-1: unable to get BOS descriptor or descriptor too short [ 214.273309][ T5917] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 214.302571][ T5917] usb 9-1: can't read configurations, error -71 [ 214.826137][ T7985] : entered promiscuous mode [ 215.312991][ T12] wlan1: Trigger new scan to find an IBSS to join [ 215.345133][ T7987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.700448][ T7994] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 217.440151][ T5917] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 217.478355][ T1138] wlan1: Creating new IBSS network, BSSID 9e:58:f5:4f:69:80 [ 217.587734][ T8009] xt_socket: unknown flags 0xc [ 217.642771][ T5917] usb 9-1: Using ep0 maxpacket: 8 [ 217.953449][ T5917] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 217.976123][ T5917] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.996284][ T8012] Falling back ldisc for ttyS3. [ 218.005071][ T5917] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.037381][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.070704][ T5917] usbtmc 9-1:16.0: bulk endpoints not found [ 218.708458][ T8041] : renamed from vlan0 (while UP) [ 218.893154][ T5852] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 218.927332][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 218.927346][ T30] audit: type=1400 audit(1770248954.348:815): avc: denied { listen } for pid=8049 comm="syz.5.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 218.952815][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 218.988948][ T30] audit: type=1400 audit(1770248954.388:816): avc: denied { watch watch_reads } for pid=8049 comm="syz.5.429" path="/43/file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.053310][ T5852] usb 10-1: Using ep0 maxpacket: 8 [ 219.076192][ T5852] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 219.098298][ T5852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.112676][ T5852] usb 10-1: Product: syz [ 219.126154][ T5852] usb 10-1: Manufacturer: syz [ 219.138733][ T5852] usb 10-1: SerialNumber: syz [ 219.146252][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 219.153696][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.171259][ T10] usb 7-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 219.181349][ T5852] usb 10-1: config 0 descriptor?? [ 219.190697][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.201543][ T5852] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244) [ 219.224552][ T10] usb 7-1: config 0 descriptor?? [ 219.379746][ T8068] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8068 comm=syz.5.433 [ 219.409702][ T30] audit: type=1400 audit(1770248954.828:817): avc: denied { getopt } for pid=8037 comm="syz.9.423" lport=49794 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 219.418142][ T5852] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 219.490618][ T5852] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 219.518783][ T5852] usb 10-1: USB disconnect, device number 4 [ 219.584763][ T30] audit: type=1400 audit(1770248955.008:818): avc: denied { create } for pid=8074 comm="syz.7.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 219.673174][ T9] usb 9-1: USB disconnect, device number 9 [ 219.743543][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 219.749480][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 219.784178][ T30] audit: type=1400 audit(1770248955.208:819): avc: denied { read } for pid=8074 comm="syz.7.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.790382][ T10] usb 7-1: USB disconnect, device number 12 [ 219.824651][ T30] audit: type=1400 audit(1770248955.208:820): avc: denied { create } for pid=8078 comm="syz.8.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.854378][ T8080] comedi comedi3: comedi_config --init_data is deprecated [ 219.883710][ T30] audit: type=1400 audit(1770248955.238:821): avc: denied { setopt } for pid=8078 comm="syz.8.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.907338][ T30] audit: type=1400 audit(1770248955.268:822): avc: denied { map } for pid=8074 comm="syz.7.435" path="socket:[19676]" dev="sockfs" ino=19676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.017330][ T30] audit: type=1400 audit(1770248955.268:823): avc: denied { read accept } for pid=8074 comm="syz.7.435" path="socket:[19676]" dev="sockfs" ino=19676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.119121][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 220.305152][ T9] usb 9-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 220.333574][ T8093] nbd0: detected capacity change from 0 to 63 [ 220.409036][ T30] audit: type=1400 audit(1770248955.768:824): avc: denied { write } for pid=8086 comm="syz.9.438" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 220.454842][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 220.549065][ T9] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 220.572249][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.665032][ T9] usb 9-1: Product: syz [ 220.712134][ T9] usb 9-1: Manufacturer: syz [ 220.717106][ T9] usb 9-1: SerialNumber: syz [ 220.913462][ T9] usb 9-1: config 0 descriptor?? [ 220.947495][ T9] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected [ 220.960415][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87 [ 220.986843][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7 [ 221.027039][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 221.040403][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 221.052885][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 221.112881][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85 [ 221.134482][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5 [ 221.144571][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.436'. [ 221.155307][ T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 221.256574][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83 [ 221.540071][ T5814] block nbd0: Receive control failed (result -104) [ 221.554480][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 3 [ 221.562094][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4 [ 221.573386][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86 [ 221.581143][ T9] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6 [ 221.590268][ T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 221.609212][ T9] usb 9-1: USB disconnect, device number 10 [ 221.672132][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 221.696639][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 221.721831][ T9] keyspan 9-1:0.0: device disconnected [ 222.062543][ T792] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 222.254379][ T792] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 222.262069][ T792] usb 6-1: can't read configurations, error -61 [ 222.403715][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 222.409826][ T792] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 222.582564][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 222.592761][ T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.601254][ T9] usb 10-1: config 0 has no interface number 0 [ 222.608631][ T9] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.620955][ T9] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.994739][ T792] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 223.012643][ T792] usb 6-1: can't read configurations, error -61 [ 223.023879][ T792] usb usb6-port1: attempt power cycle [ 223.051731][ T9] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 223.065122][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.086322][ T9] usb 10-1: config 0 descriptor?? [ 223.140107][ T8140] netlink: 'syz.7.452': attribute type 1 has an invalid length. [ 223.406873][ T792] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 223.575949][ T792] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 223.584075][ T792] usb 6-1: can't read configurations, error -61 [ 223.743077][ T792] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 223.743163][ T9] usbhid 10-1:0.1: can't add hid device: -71 [ 223.764691][ T9] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 223.827856][ T792] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 223.835564][ T792] usb 6-1: can't read configurations, error -61 [ 223.843471][ T792] usb usb6-port1: unable to enumerate USB device [ 223.869004][ T9] usb 10-1: USB disconnect, device number 5 [ 225.928188][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.457'. [ 225.937237][ T8166] netlink: 72 bytes leftover after parsing attributes in process `syz.5.457'. [ 225.961677][ T8166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.457'. [ 226.318300][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 226.318312][ T30] audit: type=1400 audit(1770248961.738:832): avc: denied { module_request } for pid=8169 comm="syz.9.460" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 226.574582][ T8179] netlink: 9 bytes leftover after parsing attributes in process `syz.5.463'. [ 226.614484][ T8179] netlink: 9 bytes leftover after parsing attributes in process `syz.5.463'. [ 227.851723][ T30] audit: type=1400 audit(1770248962.768:833): avc: denied { create } for pid=8184 comm="syz.9.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.924850][ T30] audit: type=1400 audit(1770248962.778:834): avc: denied { connect } for pid=8184 comm="syz.9.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.352364][ T8202] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20257 [ 228.430156][ T30] audit: type=1400 audit(1770248962.788:835): avc: denied { write } for pid=8184 comm="syz.9.464" laddr=fe80::13 lport=23229 faddr=fe80::aa fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.496327][ T30] audit: type=1400 audit(1770248962.858:836): avc: denied { sqpoll } for pid=8184 comm="syz.9.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.556742][ T30] audit: type=1400 audit(1770248962.968:837): avc: denied { read write } for pid=8184 comm="syz.9.464" name="mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.672595][ T30] audit: type=1400 audit(1770248962.968:838): avc: denied { open } for pid=8184 comm="syz.9.464" path="/dev/input/mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.724019][ T6882] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 228.894744][ T6882] usb 6-1: Using ep0 maxpacket: 32 [ 228.934818][ T6882] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 228.935025][ T8221] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 228.944071][ T6882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.979535][ T6882] usb 6-1: Product: syz [ 228.987034][ T6882] usb 6-1: Manufacturer: syz [ 228.992057][ T6882] usb 6-1: SerialNumber: syz [ 229.016853][ T6882] usb 6-1: config 0 descriptor?? [ 229.236423][ T5866] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 229.350666][ T6882] cdc_mbim 6-1:0.0: CDC Union missing and no IAD found [ 229.367228][ T6882] cdc_mbim 6-1:0.0: bind() failure [ 229.395474][ T6882] option 6-1:0.0: GSM modem (1-port) converter detected [ 229.405135][ T5866] usb 9-1: unable to get BOS descriptor or descriptor too short [ 229.418553][ T5866] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.465733][ T5866] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 229.497554][ T5866] usb 9-1: config 1 has no interface number 1 [ 229.749141][ T5866] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.807274][ T5866] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.061716][ T5866] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.071208][ T5866] usb 9-1: Product: syz [ 230.078750][ T5866] usb 9-1: Manufacturer: syz [ 230.101929][ T5866] usb 9-1: SerialNumber: syz [ 230.276767][ T8245] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.478'. [ 230.289536][ T8244] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.478'. [ 230.546253][ T5866] usb 9-1: 2:1 : invalid UAC_AS_GENERAL desc [ 230.616791][ T5866] usb 9-1: USB disconnect, device number 11 [ 230.863039][ T10] usb 6-1: USB disconnect, device number 18 [ 230.869986][ T10] option 6-1:0.0: device disconnected [ 230.907060][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.361302][ T8293] syzkaller1: entered promiscuous mode [ 231.377518][ T8293] syzkaller1: entered allmulticast mode [ 231.447432][ T8297] binder: 8296:8297 ioctl 4018620d 0 returned -22 [ 231.525364][ T8299] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 231.892448][ T30] audit: type=1400 audit(1770248967.298:839): avc: denied { setopt } for pid=8306 comm="syz.9.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 232.307153][ T30] audit: type=1400 audit(1770248967.728:840): avc: denied { write } for pid=8306 comm="syz.9.489" path="socket:[21405]" dev="sockfs" ino=21405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 232.558461][ T30] audit: type=1400 audit(1770248967.848:841): avc: denied { setattr } for pid=8306 comm="syz.9.489" name="rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 232.596542][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 233.182547][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 233.190476][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.271970][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.316304][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.336013][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.359960][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.425164][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.552945][ T5852] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 234.775524][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 234.781043][ T10] usbtmc 6-1:16.0: can't read capabilities [ 235.067998][ T30] audit: type=1400 audit(1770248970.458:842): avc: denied { setopt } for pid=8336 comm="syz.9.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.212530][ T5852] usb 8-1: Using ep0 maxpacket: 8 [ 235.223575][ T5852] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 235.234112][ T5852] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.247344][ T5852] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.294758][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.326974][ T5852] usbtmc 8-1:16.0: bulk endpoints not found [ 235.734012][ T8351] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 236.133280][ T8356] binder: 8355:8356 ioctl 4018620d 0 returned -22 [ 236.286396][ T8358] x_tables: duplicate underflow at hook 1 [ 236.457426][ T8366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.802612][ T10] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 236.818256][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.9.507'. [ 237.134080][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.153083][ T10] usb 7-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 237.178287][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.261546][ T5866] usb 6-1: USB disconnect, device number 19 [ 237.283253][ T792] usb 8-1: USB disconnect, device number 8 [ 237.302960][ T10] usb 7-1: config 0 descriptor?? [ 237.865201][ T8394] binder: 8393:8394 ioctl 4018620d 0 returned -22 [ 237.874213][ T8273] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 237.934918][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 237.944244][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 237.980265][ T10] usb 7-1: USB disconnect, device number 13 [ 239.591300][ T30] audit: type=1326 audit(1770248974.968:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 239.994317][ T30] audit: type=1326 audit(1770248974.968:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 240.398269][ T30] audit: type=1326 audit(1770248974.988:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 240.700641][ T30] audit: type=1326 audit(1770248974.998:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 240.866965][ T30] audit: type=1326 audit(1770248974.998:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 241.245082][ T8424] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 241.326040][ T8419] netlink: 32 bytes leftover after parsing attributes in process `syz.5.522'. [ 241.350763][ T30] audit: type=1326 audit(1770248974.998:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 241.412817][ T8419] dummy0: entered promiscuous mode [ 241.432343][ T30] audit: type=1326 audit(1770248974.998:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 241.486830][ T30] audit: type=1326 audit(1770248975.038:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 241.557061][ T30] audit: type=1326 audit(1770248975.038:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 241.584804][ T30] audit: type=1326 audit(1770248975.038:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8408 comm="syz.6.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef859aeb9 code=0x7ffc0000 [ 241.645285][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 241.693803][ T8431] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.524'. [ 241.742528][ T792] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 241.813146][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 241.827807][ T10] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 241.838888][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.897597][ T792] usb 7-1: config 0 has no interfaces? [ 241.906291][ T792] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 241.957325][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.981961][ T792] usb 7-1: Product: syz [ 241.984722][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.988082][ T792] usb 7-1: Manufacturer: syz [ 242.262827][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.263361][ T792] usb 7-1: SerialNumber: syz [ 242.332244][ T10] usbtmc 8-1:16.0: bulk endpoints not found [ 242.343366][ T792] usb 7-1: config 0 descriptor?? [ 242.385874][ T8436] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20257 [ 242.891463][ T6882] usb 7-1: USB disconnect, device number 14 [ 243.204580][ T8458] fuse: Bad value for 'user_id' [ 243.217736][ T8458] fuse: Bad value for 'user_id' [ 244.300188][ T792] usb 8-1: USB disconnect, device number 9 [ 245.141488][ T8476] FAULT_INJECTION: forcing a failure. [ 245.141488][ T8476] name failslab, interval 1, probability 0, space 0, times 0 [ 245.157832][ T8476] CPU: 1 UID: 0 PID: 8476 Comm: syz.8.535 Not tainted syzkaller #0 PREEMPT(full) [ 245.157856][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 245.157865][ T8476] Call Trace: [ 245.157871][ T8476] [ 245.157877][ T8476] dump_stack_lvl+0x100/0x190 [ 245.157901][ T8476] should_fail_ex.cold+0x5/0xa [ 245.157913][ T8476] should_failslab+0xc2/0x120 [ 245.157927][ T8476] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 245.157942][ T8476] ? __alloc_skb+0x156/0x410 [ 245.157955][ T8476] ? __alloc_skb+0x35d/0x410 [ 245.157969][ T8476] ? __alloc_skb+0x156/0x410 [ 245.157981][ T8476] __alloc_skb+0x156/0x410 [ 245.157992][ T8476] ? __alloc_skb+0x35d/0x410 [ 245.158004][ T8476] ? __pfx___alloc_skb+0x10/0x10 [ 245.158016][ T8476] ? lockdep_hardirqs_on+0x78/0x100 [ 245.158027][ T8476] ? _raw_spin_unlock+0x50/0x50 [ 245.158037][ T8476] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 245.158052][ T8476] alloc_skb_with_frags+0xe0/0x810 [ 245.158067][ T8476] ? __rcu_read_unlock+0x24d/0x550 [ 245.158079][ T8476] ? avc_has_perm_noaudit+0x145/0x3b0 [ 245.158096][ T8476] sock_alloc_send_pskb+0x801/0x980 [ 245.158113][ T8476] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 245.158127][ T8476] ? sock_has_perm+0x258/0x2f0 [ 245.158143][ T8476] ? __pfx_sock_has_perm+0x10/0x10 [ 245.158161][ T8476] hci_sock_sendmsg+0x1c7/0x2620 [ 245.158177][ T8476] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 245.158194][ T8476] sock_write_iter+0x566/0x610 [ 245.158205][ T8476] ? __pfx_sock_write_iter+0x10/0x10 [ 245.158219][ T8476] ? bpf_lsm_file_permission+0x9/0x10 [ 245.158233][ T8476] ? security_file_permission+0x76/0x210 [ 245.158246][ T8476] ? rw_verify_area+0xce/0x6d0 [ 245.158257][ T8476] vfs_write+0x6ac/0x1070 [ 245.158269][ T8476] ? __pfx_sock_write_iter+0x10/0x10 [ 245.158280][ T8476] ? __pfx_vfs_write+0x10/0x10 [ 245.158290][ T8476] ? find_held_lock+0x2b/0x80 [ 245.158313][ T8476] ksys_write+0x1f8/0x250 [ 245.158324][ T8476] ? __pfx_ksys_write+0x10/0x10 [ 245.158336][ T8476] ? trace_irq_enable.constprop.0+0x2d/0x110 [ 245.158356][ T8476] do_syscall_64+0xc9/0xf80 [ 245.158368][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.158379][ T8476] RIP: 0033:0x7f7ac559aeb9 [ 245.158388][ T8476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.158398][ T8476] RSP: 002b:00007f7ac37d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.158409][ T8476] RAX: ffffffffffffffda RBX: 00007f7ac5816090 RCX: 00007f7ac559aeb9 [ 245.158415][ T8476] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000007 [ 245.158421][ T8476] RBP: 00007f7ac37d5090 R08: 0000000000000000 R09: 0000000000000000 [ 245.158427][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.158433][ T8476] R13: 00007f7ac5816128 R14: 00007f7ac5816090 R15: 00007ffed2380348 [ 245.158447][ T8476] [ 245.552858][ T792] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 245.723833][ T792] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.734016][ T792] usb 7-1: config 0 has no interfaces? [ 245.740171][ T792] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 245.763817][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.800559][ T792] usb 7-1: config 0 descriptor?? [ 245.950437][ T8483] syzkaller0: entered promiscuous mode [ 246.003288][ T8483] syzkaller0: entered allmulticast mode [ 246.026736][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 246.026747][ T30] audit: type=1400 audit(1770248981.448:880): avc: denied { ioctl } for pid=8479 comm="syz.8.538" path="socket:[21741]" dev="sockfs" ino=21741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.084084][ T8486] loop9: detected capacity change from 0 to 7 [ 246.092701][ T8486] buffer_io_error: 4 callbacks suppressed [ 246.092715][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.107691][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.115609][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.128252][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.136621][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.156386][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.164361][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.172244][ T8486] ldm_validate_partition_table(): Disk read failed. [ 246.180070][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.188833][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.196853][ T8486] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.204790][ T8486] Dev loop9: unable to read RDB block 0 [ 246.210417][ T8486] loop9: unable to read partition table [ 246.218769][ T8486] loop9: partition table beyond EOD, truncated [ 246.225023][ T8486] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 246.225023][ T8486] ) failed (rc=-5) [ 246.342814][ T30] audit: type=1400 audit(1770248981.448:881): avc: denied { bind } for pid=8479 comm="syz.8.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.370095][ T30] audit: type=1400 audit(1770248981.498:882): avc: denied { setopt } for pid=8479 comm="syz.8.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.433610][ T8487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8487 comm=syz.6.536 [ 246.459892][ T30] audit: type=1400 audit(1770248981.878:883): avc: denied { ioctl } for pid=8471 comm="syz.6.536" path="socket:[21743]" dev="sockfs" ino=21743 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.505788][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.524104][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.943186][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 247.122779][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 247.177057][ T10] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 247.205679][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.236793][ T8494] team0: No ports can be present during mode change [ 247.252524][ T10] usb 8-1: config 0 has no interface number 0 [ 247.306458][ T10] usb 8-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.394535][ T10] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.473162][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.492640][ T10] usb 8-1: Product: syz [ 247.508265][ T10] usb 8-1: Manufacturer: syz [ 247.509498][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.523844][ T10] usb 8-1: SerialNumber: syz [ 247.579587][ T10] usb 8-1: config 0 descriptor?? [ 247.603170][ T10] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.647024][ T5859] usb 7-1: USB disconnect, device number 15 [ 247.779909][ T8497] fuse: Bad value for 'user_id' [ 247.789616][ T8497] fuse: Bad value for 'user_id' [ 247.806117][ T10] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 247.823183][ T10] quatech2 8-1:0.51: probe with driver quatech2 failed with error -8 [ 248.090424][ T10] usb 8-1: USB disconnect, device number 10 [ 248.172993][ T8501] FAULT_INJECTION: forcing a failure. [ 248.172993][ T8501] name failslab, interval 1, probability 0, space 0, times 0 [ 248.185877][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.8.543 Not tainted syzkaller #0 PREEMPT(full) [ 248.185899][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 248.185909][ T8501] Call Trace: [ 248.185915][ T8501] [ 248.185923][ T8501] dump_stack_lvl+0x100/0x190 [ 248.185950][ T8501] should_fail_ex.cold+0x5/0xa [ 248.185969][ T8501] should_failslab+0xc2/0x120 [ 248.185993][ T8501] kmem_cache_alloc_noprof+0x83/0x780 [ 248.186014][ T8501] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 248.186034][ T8501] ? __inet_hash_connect+0x686/0x1e40 [ 248.186060][ T8501] ? __inet_hash_connect+0x686/0x1e40 [ 248.186080][ T8501] __inet_hash_connect+0x686/0x1e40 [ 248.186109][ T8501] ? __pfx___inet6_check_established+0x10/0x10 [ 248.186136][ T8501] ? __pfx___inet_hash_connect+0x10/0x10 [ 248.186161][ T8501] ? inet6_hash_connect+0xe2/0x180 [ 248.186187][ T8501] tcp_v6_connect+0x1378/0x21c0 [ 248.186212][ T8501] ? __pfx___schedule+0x10/0x10 [ 248.186234][ T8501] ? __pfx_tcp_v6_connect+0x10/0x10 [ 248.186259][ T8501] ? irqentry_exit+0x180/0x670 [ 248.186290][ T8501] ? __inet_stream_connect+0x102/0xfa0 [ 248.186310][ T8501] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 248.186340][ T8501] ? __inet_stream_connect+0x208/0xfa0 [ 248.186356][ T8501] __inet_stream_connect+0x208/0xfa0 [ 248.186379][ T8501] ? __pfx___inet_stream_connect+0x10/0x10 [ 248.186397][ T8501] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 248.186420][ T8501] ? __pfx_inet_stream_connect+0x10/0x10 [ 248.186439][ T8501] ? __local_bh_enable_ip+0x9e/0x120 [ 248.186466][ T8501] ? __pfx_inet_stream_connect+0x10/0x10 [ 248.186482][ T8501] inet_stream_connect+0x57/0xa0 [ 248.186506][ T8501] __sys_connect_file+0x141/0x1a0 [ 248.186530][ T8501] __sys_connect+0x141/0x170 [ 248.186549][ T8501] ? __pfx___sys_connect+0x10/0x10 [ 248.186567][ T8501] ? __fget_files+0x21f/0x3d0 [ 248.186597][ T8501] ? __pfx_ksys_write+0x10/0x10 [ 248.186616][ T8501] ? rcu_is_watching+0x12/0xc0 [ 248.186642][ T8501] __x64_sys_connect+0x72/0xb0 [ 248.186660][ T8501] ? lockdep_hardirqs_on+0x78/0x100 [ 248.186678][ T8501] do_syscall_64+0xc9/0xf80 [ 248.186700][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.186717][ T8501] RIP: 0033:0x7f7ac559aeb9 [ 248.186731][ T8501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.186746][ T8501] RSP: 002b:00007f7ac37b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 248.186763][ T8501] RAX: ffffffffffffffda RBX: 00007f7ac5816180 RCX: 00007f7ac559aeb9 [ 248.186774][ T8501] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 248.186784][ T8501] RBP: 00007f7ac37b4090 R08: 0000000000000000 R09: 0000000000000000 [ 248.186794][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.186803][ T8501] R13: 00007f7ac5816218 R14: 00007f7ac5816180 R15: 00007ffed2380348 [ 248.186828][ T8501] [ 249.142841][ T5859] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 249.413972][ T8507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.482518][ T5859] usb 9-1: Using ep0 maxpacket: 8 [ 249.491802][ T5859] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 249.533112][ T5859] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.561314][ T5859] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.580663][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.606821][ T5859] usbtmc 9-1:16.0: bulk endpoints not found [ 249.800825][ T8513] netlink: 104 bytes leftover after parsing attributes in process `syz.6.548'. [ 250.064522][ T8520] netlink: 388 bytes leftover after parsing attributes in process `syz.9.549'. [ 250.182546][ T5859] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 250.479632][ T8527] fuse: Bad value for 'user_id' [ 250.486939][ T8527] fuse: Bad value for 'user_id' [ 250.510967][ T5859] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.519110][ T5859] usb 7-1: config 0 has no interface number 0 [ 250.532349][ T5859] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 250.554714][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.569031][ T5859] usb 7-1: config 0 descriptor?? [ 250.637819][ T5859] usb 7-1: selecting invalid altsetting 1 [ 250.655692][ T30] audit: type=1400 audit(1770248986.078:884): avc: denied { ioctl } for pid=8528 comm="syz.7.554" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 250.661388][ T5859] dvb_ttusb_budget: ttusb_init_controller: error [ 250.687696][ T1071] block nbd0: Possible stuck request ffff888026450000: control (read@0,1024B). Runtime 30 seconds [ 250.733368][ T1071] block nbd0: Possible stuck request ffff888026450200: control (read@1024,1024B). Runtime 30 seconds [ 250.744383][ T1071] block nbd0: Possible stuck request ffff888026450400: control (read@2048,1024B). Runtime 30 seconds [ 250.767432][ T1071] block nbd0: Possible stuck request ffff888026450600: control (read@3072,1024B). Runtime 30 seconds [ 250.790810][ T30] audit: type=1400 audit(1770248986.078:885): avc: denied { getopt } for pid=8528 comm="syz.7.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.821444][ T30] audit: type=1400 audit(1770248986.078:886): avc: denied { ioctl } for pid=8528 comm="syz.7.554" path="/dev/ptyr3" dev="devtmpfs" ino=138 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 250.851966][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.862031][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.903637][ T5859] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 250.914570][ T30] audit: type=1400 audit(1770248986.338:887): avc: denied { setopt } for pid=8530 comm="syz.7.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.945690][ T30] audit: type=1400 audit(1770248986.358:888): avc: denied { setopt } for pid=8530 comm="syz.7.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.008702][ T30] audit: type=1400 audit(1770248986.428:889): avc: denied { read } for pid=8532 comm="syz.7.556" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.169076][ T5859] DVB: Unable to find symbol cx22700_attach() [ 251.253987][ T5859] DVB: Unable to find symbol tda10046_attach() [ 251.272595][ T5859] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 251.298793][ T5859] usb 7-1: USB disconnect, device number 16 [ 251.552813][ T8539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.294466][ T43] usb 9-1: USB disconnect, device number 12 [ 252.541579][ T30] audit: type=1400 audit(1770248987.958:890): avc: denied { connect } for pid=8552 comm="syz.8.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.584207][ T8561] FAULT_INJECTION: forcing a failure. [ 253.584207][ T8561] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 253.597279][ T8561] CPU: 0 UID: 0 PID: 8561 Comm: syz.7.566 Not tainted syzkaller #0 PREEMPT(full) [ 253.597293][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 253.597300][ T8561] Call Trace: [ 253.597304][ T8561] [ 253.597308][ T8561] dump_stack_lvl+0x100/0x190 [ 253.597327][ T8561] should_fail_ex.cold+0x5/0xa [ 253.597339][ T8561] _copy_from_user+0x2e/0xd0 [ 253.597354][ T8561] __sys_bpf+0x243/0x5050 [ 253.597368][ T8561] ? __pfx___sys_bpf+0x10/0x10 [ 253.597378][ T8561] ? proc_fail_nth_write+0x9f/0x220 [ 253.597393][ T8561] ? find_held_lock+0x2b/0x80 [ 253.597410][ T8561] ? find_held_lock+0x2b/0x80 [ 253.597423][ T8561] ? ksys_write+0x190/0x250 [ 253.597438][ T8561] ? __mutex_unlock_slowpath+0x15c/0x790 [ 253.597459][ T8561] ? fput+0x79/0x100 [ 253.597473][ T8561] ? ksys_write+0x1ac/0x250 [ 253.597484][ T8561] ? __pfx_ksys_write+0x10/0x10 [ 253.597498][ T8561] __x64_sys_bpf+0x7b/0xc0 [ 253.597510][ T8561] ? lockdep_hardirqs_on+0x78/0x100 [ 253.597521][ T8561] do_syscall_64+0xc9/0xf80 [ 253.597534][ T8561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.597545][ T8561] RIP: 0033:0x7fdd4a79aeb9 [ 253.597554][ T8561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.597564][ T8561] RSP: 002b:00007fdd4b582028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.597575][ T8561] RAX: ffffffffffffffda RBX: 00007fdd4aa15fa0 RCX: 00007fdd4a79aeb9 [ 253.597581][ T8561] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 253.597588][ T8561] RBP: 00007fdd4b582090 R08: 0000000000000000 R09: 0000000000000000 [ 253.597594][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.597599][ T8561] R13: 00007fdd4aa16038 R14: 00007fdd4aa15fa0 R15: 00007ffc67c113c8 [ 253.597613][ T8561] [ 254.149863][ T10] IPVS: starting estimator thread 0... [ 254.171749][ T8564] lo speed is unknown, defaulting to 1000 [ 254.243806][ T8573] netlink: 48 bytes leftover after parsing attributes in process `syz.8.562'. [ 254.676892][ T8574] : entered promiscuous mode [ 255.162546][ T8569] IPVS: using max 76 ests per chain, 182400 per kthread [ 255.169759][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.279040][ T8580] SELinux: policydb version -1998717039 does not match my version range 15-35 [ 255.380891][ T8580] SELinux: failed to load policy [ 255.528763][ T5859] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 255.732588][ T5859] usb 7-1: Using ep0 maxpacket: 8 [ 256.333305][ T5859] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 256.371422][ T30] audit: type=1400 audit(1770248991.788:891): avc: denied { mount } for pid=8591 comm="syz.8.574" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 256.599910][ T5859] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.712867][ T5859] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.741400][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.770838][ T5859] usbtmc 7-1:16.0: bulk endpoints not found [ 256.882534][ T6882] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 257.052543][ T6882] usb 9-1: device descriptor read/64, error -71 [ 257.096505][ T8602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.292876][ T6882] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 257.460603][ T6882] usb 9-1: device descriptor read/64, error -71 [ 257.664485][ T6882] usb usb9-port1: attempt power cycle [ 257.876690][ T8611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.892255][ T8611] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 258.052412][ T6882] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 258.134132][ T6882] usb 9-1: device descriptor read/8, error -71 [ 258.145917][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.179551][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.196934][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.205903][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.214401][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.276775][ T8613] lo speed is unknown, defaulting to 1000 [ 258.393921][ T5917] usb 7-1: USB disconnect, device number 17 [ 258.412797][ T6882] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 258.483174][ T6882] usb 9-1: device descriptor read/8, error -71 [ 258.592769][ T6882] usb usb9-port1: unable to enumerate USB device [ 258.902719][ T8628] netlink: 'syz.6.580': attribute type 4 has an invalid length. [ 259.609464][ T30] audit: type=1400 audit(1770248994.318:892): avc: denied { setopt } for pid=8621 comm="syz.6.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 259.847311][ T8613] chnl_net:caif_netlink_parms(): no params data found [ 259.895181][ T30] audit: type=1400 audit(1770248994.808:893): avc: denied { ioctl } for pid=8621 comm="syz.6.580" path="socket:[22702]" dev="sockfs" ino=22702 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 260.002635][ T30] audit: type=1400 audit(1770248995.218:894): avc: denied { unmount } for pid=6680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 260.142528][ T5917] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 260.202539][ T5859] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 260.234093][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.261234][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.277434][ T5814] Bluetooth: hci1: command tx timeout [ 260.299385][ T8613] bridge_slave_0: entered allmulticast mode [ 260.310053][ T8613] bridge_slave_0: entered promiscuous mode [ 260.318116][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.325215][ T5917] usb 10-1: Using ep0 maxpacket: 32 [ 260.330577][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.338643][ T8613] bridge_slave_1: entered allmulticast mode [ 260.346181][ T8613] bridge_slave_1: entered promiscuous mode [ 260.380847][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.438747][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.442772][ T5859] usb 7-1: Using ep0 maxpacket: 16 [ 260.453146][ T5917] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.454866][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.471500][ T5917] usb 10-1: config 0 has no interface number 0 [ 260.473919][ T5859] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 260.884095][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.892185][ T5859] usb 7-1: Product: syz [ 260.902304][ T5917] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.909708][ T5859] usb 7-1: Manufacturer: syz [ 260.920847][ T5859] usb 7-1: SerialNumber: syz [ 260.932207][ T5917] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.932846][ T5859] usb 7-1: config 0 descriptor?? [ 260.948957][ T8613] team0: Port device team_slave_0 added [ 260.959161][ T5917] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 260.961179][ T5859] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 260.987246][ T8613] team0: Port device team_slave_1 added [ 260.997070][ T5917] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.033230][ T5917] usb 10-1: config 0 descriptor?? [ 261.043705][ T5976] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.098170][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.105571][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.137816][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.232294][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.239342][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.280741][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.330074][ T5976] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.355548][ T8277] usb 7-1: Failed to submit usb control message: -71 [ 261.355785][ T43] usb 7-1: USB disconnect, device number 18 [ 261.362444][ T8277] usb 7-1: unable to send the bmi data to the device: -71 [ 261.387247][ T8277] usb 7-1: unable to get target info from device [ 261.394399][ T8277] usb 7-1: could not get target info (-71) [ 261.400546][ T8277] usb 7-1: could not probe fw (-71) [ 261.499427][ T8613] hsr_slave_0: entered promiscuous mode [ 261.510205][ T8613] hsr_slave_1: entered promiscuous mode [ 261.517242][ T8613] debugfs: 'hsr0' already exists in 'hsr' [ 261.523137][ T8613] Cannot create hsr debugfs directory [ 261.617535][ T5976] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.861876][ T5917] input: HID 28bd:0094 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0094.0001/input/input8 [ 261.935471][ T5976] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.030684][ T5917] uclogic 0003:28BD:0094.0001: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.9-1/input1 [ 262.090778][ T5917] usb 10-1: USB disconnect, device number 6 [ 262.176655][ T8660] fido_id[8660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 262.294332][ T5859] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 262.353440][ T5814] Bluetooth: hci1: command tx timeout [ 262.414983][ T5976] bridge_slave_1: left allmulticast mode [ 262.420649][ T5976] bridge_slave_1: left promiscuous mode [ 262.443475][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.462539][ T5859] usb 8-1: Using ep0 maxpacket: 8 [ 262.479207][ T5859] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 262.495884][ T5976] bridge_slave_0: left allmulticast mode [ 262.506782][ T5859] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.514443][ T5976] bridge_slave_0: left promiscuous mode [ 262.536563][ T5859] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.561830][ T5859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.562175][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.148857][ T5859] usbtmc 8-1:16.0: bulk endpoints not found [ 263.442769][ T30] audit: type=1400 audit(1770248998.848:895): avc: denied { getopt } for pid=8675 comm="syz.9.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 264.432549][ T5814] Bluetooth: hci1: command tx timeout [ 264.558958][ T5976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.571215][ T5976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.591954][ T5976] bond0 (unregistering): (slave team0): Releasing backup interface [ 264.609663][ T5976] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 264.663273][ T5976] bond0 (unregistering): Released all slaves [ 265.082598][ T5859] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 265.172594][ T10] usb 8-1: USB disconnect, device number 11 [ 265.756484][ T5859] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.982132][ T5859] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 266.034257][ T5859] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.052592][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.071750][ T5859] usb 7-1: Product: syz [ 266.098330][ T5859] usb 7-1: Manufacturer: syz [ 266.123006][ T5859] usb 7-1: SerialNumber: syz [ 266.175006][ T5859] cdc_mbim 7-1:1.0: skipping garbage [ 266.264768][ T5976] hsr_slave_0: left promiscuous mode [ 266.280708][ T5976] hsr_slave_1: left promiscuous mode [ 266.292730][ T8727] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 266.307859][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.447024][ T8730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.456509][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.488128][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.498101][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.513835][ T5814] Bluetooth: hci1: command tx timeout [ 266.590515][ T8710] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 266.788935][ T5976] veth1_macvtap: left promiscuous mode [ 266.802623][ T5976] veth0_macvtap: left promiscuous mode [ 266.808166][ T5976] veth1_vlan: left promiscuous mode [ 266.829311][ T5976] veth0_vlan: left promiscuous mode [ 266.940640][ T30] audit: type=1400 audit(1770249002.358:896): avc: denied { append } for pid=8709 comm="syz.6.597" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 267.369192][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.384198][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.396094][ T8710] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 267.447164][ T5859] cdc_mbim 7-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048 [ 267.475299][ T5859] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 267.658527][ T5859] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 267.727407][ T5859] wwan wwan0: port wwan0mbim0 attached [ 267.858722][ T8710] siw: device registration error -23 [ 267.942573][ T5917] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 268.020429][ T5976] team0 (unregistering): Port device team_slave_1 removed [ 268.052139][ T5976] team0 (unregistering): Port device team_slave_0 removed [ 268.327454][ T5859] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 0a:6a:b5:0f:97:72 [ 268.382645][ T5859] usb 7-1: USB disconnect, device number 19 [ 268.422098][ T5859] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 268.511640][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.9.604'. [ 268.587673][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.9.604'. [ 269.019523][ T5859] wwan wwan0: port wwan0mbim0 disconnected [ 269.097536][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.9.604'. [ 269.109402][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.9.604'. [ 269.156991][ T50] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.198018][ T50] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.211760][ T50] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.264002][ T8763] lo speed is unknown, defaulting to 1000 [ 269.267134][ T50] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.443583][ T5859] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 269.550256][ T8613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.570790][ T8613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.582984][ T5852] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 269.617077][ T5859] usb 7-1: Using ep0 maxpacket: 16 [ 269.623748][ T8613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.623974][ T5859] usb 7-1: config 0 has no interfaces? [ 269.656108][ T8613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.657562][ T5859] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 269.673038][ T5859] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 269.673781][ T43] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 269.681024][ T5859] usb 7-1: Manufacturer: syz [ 269.696164][ T5859] usb 7-1: config 0 descriptor?? [ 269.742574][ T5852] usb 10-1: Using ep0 maxpacket: 8 [ 269.763985][ T5852] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 269.782225][ T5852] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.812938][ T5852] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.839002][ T5852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.848542][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.867130][ T5852] usbtmc 10-1:16.0: bulk endpoints not found [ 269.871168][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.895291][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 269.923764][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.930851][ T8277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.940910][ T43] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.974566][ T43] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.984624][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.991780][ T8277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.992569][ T43] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.029859][ T43] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.176299][ T43] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.196262][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.446015][ T43] usb 9-1: GET_CAPABILITIES returned 0 [ 271.463682][ T43] usbtmc 9-1:16.0: can't read capabilities [ 271.563194][ T8809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.645069][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.870318][ T8613] veth0_vlan: entered promiscuous mode [ 272.120505][ T8613] veth1_vlan: entered promiscuous mode [ 272.264903][ T8613] veth0_macvtap: entered promiscuous mode [ 272.287992][ T8613] veth1_macvtap: entered promiscuous mode [ 272.317117][ T43] usb 10-1: USB disconnect, device number 7 [ 272.358360][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.379664][ T8822] netlink: 400 bytes leftover after parsing attributes in process `syz.9.614'. [ 272.397800][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.442051][ T8277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.463441][ T8277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.491089][ T8277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.528191][ T8277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.600310][ T5815] Bluetooth: hci7: command 0x0406 tx timeout [ 272.600319][ T5820] Bluetooth: hci9: command 0x0406 tx timeout [ 272.600353][ T5820] Bluetooth: hci6: command 0x0406 tx timeout [ 272.612621][ T5817] Bluetooth: hci8: command 0x0406 tx timeout [ 272.636662][ T10] usb 7-1: USB disconnect, device number 20 [ 273.075589][ T8277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.127021][ T8277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.290972][ T8273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.335449][ T8273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.352562][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.618'. [ 273.381843][ T792] usb 9-1: USB disconnect, device number 17 [ 273.433872][ T30] audit: type=1400 audit(1770249008.828:897): avc: denied { mounton } for pid=8613 comm="syz-executor" path="/root/syzkaller.zYjfQQ/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 273.482658][ T30] audit: type=1400 audit(1770249008.838:898): avc: denied { mounton } for pid=8613 comm="syz-executor" path="/root/syzkaller.zYjfQQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 273.608488][ T30] audit: type=1400 audit(1770249009.028:899): avc: denied { mounton } for pid=8613 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 273.752558][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.9.619'. [ 273.789515][ T8861] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 273.972830][ T792] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 274.173441][ T8866] netlink: 22 bytes leftover after parsing attributes in process `syz.7.622'. [ 274.205739][ T8866] IPv6: sit1: Disabled Multicast RS [ 274.211381][ T8866] sit1: entered allmulticast mode [ 274.222648][ T792] usb 9-1: Using ep0 maxpacket: 16 [ 274.240319][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.269039][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.314823][ T792] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 274.347693][ T792] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 274.370978][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.406521][ T792] usb 9-1: config 0 descriptor?? [ 274.893331][ T792] HID 045e:07da: Invalid code 65791 type 1 [ 274.933279][ T792] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0002/input/input9 [ 274.991717][ T8880] lo speed is unknown, defaulting to 1000 [ 275.012395][ T8891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.077121][ T792] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 275.202035][ T792] usb 9-1: USB disconnect, device number 18 [ 275.215885][ T8854] vivid-007: disconnect [ 275.293066][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 275.413485][ T8898] fido_id[8898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 275.454430][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 275.486740][ T10] usb 7-1: config 0 has no interfaces? [ 275.507039][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 275.557789][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 275.592705][ T10] usb 7-1: Manufacturer: syz [ 275.615413][ T10] usb 7-1: config 0 descriptor?? [ 275.692657][ T5852] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 275.756382][ T8853] vivid-007: reconnect [ 275.853863][ T5852] usb 10-1: Using ep0 maxpacket: 32 [ 275.903740][ T5852] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 276.000424][ T5852] usb 10-1: config 0 has no interface number 0 [ 276.013150][ T8907] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 276.026824][ T5852] usb 10-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.325225][ T5852] usb 10-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 276.388268][ T5852] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 276.398307][ T5852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.419904][ T5852] usb 10-1: Product: syz [ 276.426794][ T5852] usb 10-1: Manufacturer: syz [ 276.444752][ T5852] usb 10-1: SerialNumber: syz [ 276.471803][ T5852] usb 10-1: config 0 descriptor?? [ 276.488123][ T5852] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 276.688390][ T5852] usb 10-1: qt2_setup_urbs - submit read urb failed -90 [ 276.701697][ T5852] quatech2 10-1:0.51: probe with driver quatech2 failed with error -90 [ 276.769096][ T30] audit: type=1400 audit(1770249012.188:900): avc: denied { read write } for pid=8916 comm="syz.7.631" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.812952][ T30] audit: type=1400 audit(1770249012.188:901): avc: denied { open } for pid=8916 comm="syz.7.631" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.862071][ T30] audit: type=1400 audit(1770249012.188:902): avc: denied { ioctl } for pid=8916 comm="syz.7.631" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.894741][ T10] usb 10-1: USB disconnect, device number 8 [ 277.586644][ T5915] usb 7-1: USB disconnect, device number 21 [ 278.327719][ T5859] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 278.542961][ T5859] usb 8-1: Using ep0 maxpacket: 32 [ 278.593563][ T5859] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.622565][ T5859] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.653395][ T5859] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.663017][ T5859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.674130][ T8973] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 278.674399][ T5859] usb 8-1: config 0 descriptor?? [ 279.007506][ T5859] hub 8-1:0.0: USB hub found [ 279.019879][ T8962] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 279.160698][ T8273] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 279.538747][ T8986] netlink: 'syz.8.640': attribute type 4 has an invalid length. [ 279.814050][ T5859] hub 8-1:0.0: 1 port detected [ 280.197117][ T8952] sp0: Synchronizing with TNC [ 280.217486][ T8952] lo speed is unknown, defaulting to 1000 [ 280.516860][ T30] audit: type=1400 audit(1770249015.798:903): avc: denied { getopt } for pid=8991 comm="syz.6.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 280.547637][ T8950] [U] [ 281.331068][ T5859] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 281.365796][ T5859] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 281.555865][ T1071] block nbd0: Possible stuck request ffff888026450000: control (read@0,1024B). Runtime 60 seconds [ 281.592572][ T1071] block nbd0: Possible stuck request ffff888026450200: control (read@1024,1024B). Runtime 60 seconds [ 281.901088][ T1071] block nbd0: Possible stuck request ffff888026450400: control (read@2048,1024B). Runtime 60 seconds [ 281.912034][ T1071] block nbd0: Possible stuck request ffff888026450600: control (read@3072,1024B). Runtime 60 seconds [ 281.952116][ T5859] usbhid 8-1:0.0: can't add hid device: -32 [ 281.992422][ T5859] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 282.411661][ T5859] usb 8-1: USB disconnect, device number 13 [ 282.444812][ T8996] netlink: 'syz.9.642': attribute type 3 has an invalid length. [ 282.560481][ T9014] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 283.558426][ T9027] affs: No valid root block on device nullb0 [ 283.746133][ T30] audit: type=1400 audit(1770249018.968:904): avc: denied { mounton } for pid=9021 comm="syz.6.648" path="/80/file0" dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 284.773392][ T30] audit: type=1400 audit(1770249020.178:905): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 285.432581][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 286.952537][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 286.962844][ T10] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 286.970955][ T10] usb 9-1: config 0 has no interface number 0 [ 287.009834][ T10] usb 9-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.066709][ T9073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.067192][ T10] usb 9-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 287.126062][ T10] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 287.147450][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.157887][ T10] usb 9-1: Product: syz [ 287.162059][ T10] usb 9-1: Manufacturer: syz [ 287.192510][ T10] usb 9-1: SerialNumber: syz [ 287.201816][ T10] usb 9-1: config 0 descriptor?? [ 287.219349][ T10] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 287.333041][ T5917] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 287.492183][ T10] usb 9-1: qt2_setup_urbs - submit read urb failed -90 [ 287.519610][ T10] quatech2 9-1:0.51: probe with driver quatech2 failed with error -90 [ 287.565627][ T5917] usb 8-1: config 0 has an invalid interface number: 148 but max is 0 [ 287.575905][ T5917] usb 8-1: config 0 has no interface number 0 [ 287.587432][ T5917] usb 8-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 287.610174][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.633693][ T5917] usb 8-1: Product: syz [ 287.637910][ T5917] usb 8-1: Manufacturer: syz [ 287.665311][ T5917] usb 8-1: SerialNumber: syz [ 287.797662][ T5917] usb 8-1: config 0 descriptor?? [ 287.946907][ T5915] usb 9-1: USB disconnect, device number 19 [ 288.024006][ T5917] kobil_sct 8-1:0.148: KOBIL USB smart card terminal converter detected [ 288.341092][ T5917] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 288.530739][ T9096] tun0: tun_chr_ioctl cmd 1074025675 [ 288.594249][ T9096] tun0: persist disabled [ 288.598563][ T9097] tun0: tun_chr_ioctl cmd 1074025675 [ 288.603927][ T9097] tun0: persist enabled [ 288.625963][ T9073] tun0: tun_chr_ioctl cmd 1074025675 [ 288.631275][ T9073] tun0: persist disabled [ 288.676104][ T9103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=9103 comm=syz.8.668 [ 288.794441][ T30] audit: type=1400 audit(1770249024.218:906): avc: denied { read } for pid=9105 comm="syz.6.667" name="file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 288.834919][ T5859] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 288.922727][ T30] audit: type=1400 audit(1770249024.278:907): avc: denied { ioctl } for pid=9111 comm="syz.8.670" path="socket:[24301]" dev="sockfs" ino=24301 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 289.048320][ T5917] usb 8-1: USB disconnect, device number 14 [ 289.075981][ T5859] usb 10-1: Using ep0 maxpacket: 8 [ 289.237120][ T5859] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.262659][ T5859] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.269681][ T5917] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 289.318859][ T30] audit: type=1400 audit(1770249024.388:908): avc: denied { read } for pid=9111 comm="syz.8.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 289.346784][ T5859] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.356996][ T5859] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.386213][ T5917] kobil_sct 8-1:0.148: device disconnected [ 289.396445][ T5859] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.466270][ T5859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.710125][ T5859] usb 10-1: GET_CAPABILITIES returned 0 [ 289.722607][ T5859] usbtmc 10-1:16.0: can't read capabilities [ 290.061834][ T30] audit: type=1400 audit(1770249025.318:909): avc: denied { accept } for pid=9131 comm="syz.7.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 290.357147][ T9139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.926056][ T30] audit: type=1400 audit(1770249026.318:910): avc: denied { setopt } for pid=9144 comm="syz.7.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.723526][ T9167] xt_socket: unknown flags 0xc [ 292.800095][ T10] usb 10-1: USB disconnect, device number 9 [ 293.245514][ T30] audit: type=1400 audit(1770249028.668:911): avc: denied { ioctl } for pid=9173 comm="syz.9.682" path="socket:[24399]" dev="sockfs" ino=24399 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 293.276820][ T9173] delete_channel: no stack [ 293.492787][ T5859] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 293.692262][ T5859] usb 8-1: Using ep0 maxpacket: 16 [ 293.719835][ T5859] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 293.740817][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 293.752500][ T30] audit: type=1400 audit(1770249029.158:912): avc: denied { read append } for pid=9183 comm="syz.8.684" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 293.762526][ T5859] usb 8-1: Product: syz [ 293.803336][ T5859] usb 8-1: Manufacturer: syz [ 293.809913][ T5859] usb 8-1: SerialNumber: syz [ 293.827158][ T5859] usb 8-1: config 0 descriptor?? [ 293.842587][ T792] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 293.858130][ T30] audit: type=1400 audit(1770249029.158:913): avc: denied { open } for pid=9183 comm="syz.8.684" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 294.012553][ T792] usb 10-1: Using ep0 maxpacket: 8 [ 294.026132][ T792] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.061008][ T9196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.067865][ T792] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.098689][ T792] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.162779][ T5866] usb 8-1: USB disconnect, device number 15 [ 295.528347][ T792] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.542951][ T792] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.552087][ T792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.812652][ T5859] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 295.830793][ T792] usb 10-1: GET_CAPABILITIES returned 0 [ 295.846710][ T792] usbtmc 10-1:16.0: can't read capabilities [ 295.971880][ T5859] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 296.010138][ T5859] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 296.039768][ T5859] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 296.040040][ T792] usb 10-1: USB disconnect, device number 10 [ 296.084944][ T5859] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 296.097057][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.111186][ T5859] usb 9-1: Product: syz [ 296.173166][ T5859] usb 9-1: Manufacturer: syz [ 296.223944][ T5859] usb 9-1: SerialNumber: syz [ 296.240753][ T5859] usb 9-1: config 0 descriptor?? [ 296.262843][ T9205] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 296.273527][ T9205] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 296.294710][ T30] audit: type=1400 audit(1770249031.718:914): avc: denied { listen } for pid=9223 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 296.301120][ T5859] usb 9-1: ucan: probing device on interface #0 [ 296.359401][ T30] audit: type=1400 audit(1770249031.738:915): avc: denied { ioctl } for pid=9223 comm="syz.2.691" path="socket:[25206]" dev="sockfs" ino=25206 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 297.460919][ T5859] ucan 9-1:0.0: probe with driver ucan failed with error -22 [ 297.563817][ T792] usb 9-1: USB disconnect, device number 20 [ 299.314537][ T31] INFO: task syz-executor:5804 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 300.347780][ T31] Not tainted syzkaller #0 [ 300.363292][ T31] Blocked by coredump. [ 300.557005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.740503][ T31] task:syz-executor state:D stack:23928 pid:5804 tgid:5804 ppid:1 task_flags:0x40054c flags:0x00080003 [ 300.806748][ T31] Call Trace: [ 300.810062][ T31] [ 300.846708][ T31] ? __schedule+0xf65/0x5e10 [ 300.851336][ T31] __schedule+0xfe4/0x5e10 [ 300.916542][ T31] ? __lock_acquire+0x4a5/0x2630 [ 300.921512][ T31] ? __pfx___schedule+0x10/0x10 [ 300.951231][ T31] ? find_held_lock+0x2b/0x80 [ 300.972696][ T31] ? schedule+0x2bf/0x390 [ 300.977053][ T31] schedule+0xdd/0x390 [ 300.981117][ T31] schedule_timeout+0x1b2/0x280 [ 301.034821][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 301.040221][ T31] ? __wait_for_common+0x2da/0x4c0 [ 301.063573][ T31] ? __wait_for_common+0x2da/0x4c0 [ 301.068714][ T31] ? rcu_is_watching+0x12/0xc0 [ 301.092558][ T31] __wait_for_common+0x2e7/0x4c0 [ 301.097498][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 301.112688][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 301.118146][ T31] ? find_held_lock+0x2b/0x80 [ 301.137819][ T31] ? __flush_work+0x928/0xcb0 [ 301.153251][ T31] ? __flush_work+0x928/0xcb0 [ 301.157957][ T31] ? __flush_work+0x4ca/0xcb0 [ 301.172497][ T31] __flush_work+0x7c7/0xcb0 [ 301.177014][ T31] ? find_held_lock+0x2b/0x80 [ 301.181674][ T31] ? __pfx___flush_work+0x10/0x10 [ 301.203260][ T31] ? try_to_grab_pending+0x446/0x840 [ 301.208541][ T31] ? try_to_grab_pending+0x446/0x840 [ 301.214156][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 301.219435][ T31] ? __pfx___might_resched+0x10/0x10 [ 301.234574][ T31] cancel_work_sync+0xd1/0xf0 [ 301.257916][ T31] hci_cmd_sync_clear+0x33/0x100 [ 301.268412][ T31] hci_unregister_dev+0x1cc/0x670 [ 301.282499][ T31] vhci_release+0x17d/0x230 [ 301.287002][ T31] ? __pfx_vhci_release+0x10/0x10 [ 301.292015][ T31] __fput+0x3ff/0xb40 [ 301.297814][ T31] task_work_run+0x150/0x240 [ 301.302402][ T31] ? __pfx_task_work_run+0x10/0x10 [ 301.312741][ T31] do_exit+0x829/0x2a30 [ 301.319513][ T31] ? anon_pipe_read+0xc1c/0x1200 [ 301.332550][ T31] ? __pfx_do_exit+0x10/0x10 [ 301.337151][ T31] ? do_raw_spin_lock+0x128/0x260 [ 301.342171][ T31] ? find_held_lock+0x2b/0x80 [ 301.352733][ T31] ? get_signal+0x7e0/0x21e0 [ 301.357341][ T31] do_group_exit+0xd5/0x2a0 [ 301.361823][ T31] get_signal+0x1ec7/0x21e0 [ 301.382572][ T31] ? security_file_permission+0x76/0x210 [ 301.391043][ T31] ? __pfx_get_signal+0x10/0x10 [ 301.412613][ T31] ? __pfx_vfs_read+0x10/0x10 [ 301.417316][ T31] ? security_file_free+0xb9/0x180 [ 301.422403][ T31] arch_do_signal_or_restart+0x91/0x7a0 [ 301.442516][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 301.448701][ T31] ? ksys_read+0x1ac/0x250 [ 301.462917][ T31] exit_to_user_mode_loop+0x86/0x4b0 [ 301.468206][ T31] ? rcu_is_watching+0x12/0xc0 [ 301.482694][ T31] do_syscall_64+0x4fe/0xf80 [ 301.487288][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.502566][ T31] RIP: 0033:0x7f91abd5b78e [ 301.506991][ T31] RSP: 002b:00007fffc01f3648 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.532550][ T31] RAX: fffffffffffffe00 RBX: 000055555869b500 RCX: 00007f91abd5b78e [ 301.540538][ T31] RDX: 0000000000000030 RSI: 00007fffc01f3740 RDI: 00000000000000f9 [ 301.572648][ T31] RBP: 00007fffc01f36ec R08: 0000000000000000 R09: 0000000000000000 [ 301.602928][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 301.610911][ T31] R13: 00000000000927c0 R14: 000000000002364d R15: 00007fffc01f3740 [ 301.634870][ T31] [ 301.682794][ T31] [ 301.682794][ T31] Showing all locks held in the system: [ 301.713747][ T31] 1 lock held by khungtaskd/31: [ 301.762525][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 301.792780][ T31] 2 locks held by getty/5565: [ 301.797461][ T31] #0: ffff88803706e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 301.832521][ T31] #1: ffffc900036c42f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 301.892536][ T31] 1 lock held by udevd/5795: [ 301.915622][ T31] #0: ffff88802637a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 301.932519][ T31] 3 locks held by kworker/u9:2/5810: [ 301.937809][ T31] #0: ffff888027ff2948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 301.972685][ T31] #1: ffffc90002ea7c98 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 302.002568][ T31] #2: ffff88804d02cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 302.038242][ T31] 2 locks held by kworker/0:5/5859: [ 302.048704][ T31] #0: ffff88813fe51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 302.073529][ T31] #1: ffffc900044afc98 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 302.092523][ T31] 5 locks held by syz-executor/6680: [ 302.109929][ T31] #0: ffff888032b1cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 302.119975][ T31] #1: ffff888032b1c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 302.137266][ T31] #2: ffffffff9068c228 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 302.155463][ T31] #3: ffff88802570e338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 302.165091][ T31] #4: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 302.180343][ T31] 1 lock held by dhcpcd/7482: [ 302.192496][ T31] #0: ffff88805df0b008 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 302.209654][ T31] 3 locks held by syz.2.694/9265: [ 302.217386][ T31] #0: ffff8880654d4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 302.228029][ T31] #1: ffff8880654d40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 302.237978][ T31] #2: ffffffff9068c228 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 302.248617][ T31] 3 locks held by syz.7.696/9247: [ 302.253740][ T31] #0: ffff88804af78ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 302.263610][ T31] #1: ffff88804af780c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 302.277047][ T31] #2: ffffffff9068c228 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 302.287596][ T31] 1 lock held by syz.9.702/9269: [ 302.295749][ T31] #0: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 302.306462][ T31] 1 lock held by sed/9298: [ 302.311091][ T31] [ 302.346034][ T31] ============================================= [ 302.346034][ T31] [ 302.379206][ T31] NMI backtrace for cpu 1 [ 302.379223][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 302.379241][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 302.379251][ T31] Call Trace: [ 302.379257][ T31] [ 302.379264][ T31] dump_stack_lvl+0x100/0x190 [ 302.379289][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 302.379312][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 302.379331][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 302.379358][ T31] sys_info+0x141/0x190 [ 302.379383][ T31] watchdog+0xcc3/0xfe0 [ 302.379413][ T31] ? __pfx_watchdog+0x10/0x10 [ 302.379437][ T31] ? __kthread_parkme+0x18c/0x230 [ 302.379463][ T31] ? __pfx_watchdog+0x10/0x10 [ 302.379489][ T31] ? __pfx_watchdog+0x10/0x10 [ 302.379510][ T31] kthread+0x3b3/0x730 [ 302.379530][ T31] ? __pfx_kthread+0x10/0x10 [ 302.379545][ T31] ? ret_from_fork+0x79/0xaf0 [ 302.379564][ T31] ? ret_from_fork+0x79/0xaf0 [ 302.379583][ T31] ? rcu_is_watching+0x12/0xc0 [ 302.379606][ T31] ? __pfx_kthread+0x10/0x10 [ 302.379625][ T31] ret_from_fork+0x754/0xaf0 [ 302.379645][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 302.379666][ T31] ? __switch_to+0x7b9/0x10c0 [ 302.379689][ T31] ? __pfx_kthread+0x10/0x10 [ 302.379708][ T31] ret_from_fork_asm+0x1a/0x30 [ 302.379736][ T31] [ 302.379743][ T31] Sending NMI from CPU 1 to CPUs 0: [ 302.519460][ C0] NMI backtrace for cpu 0 [ 302.519475][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 302.519491][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 302.519499][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 302.519519][ C0] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 ac 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 302.519532][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242 [ 302.519544][ C0] RAX: 0000000002b6bd49 RBX: ffffffff8e297ac0 RCX: ffffffff8b76d4b5 [ 302.519554][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45b4f RDI: ffffffff8bfa3620 [ 302.519563][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 302.519571][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 302.519580][ C0] R13: 0000000000000000 R14: ffffffff90b749d0 R15: 0000000000000000 [ 302.519589][ C0] FS: 0000000000000000(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 302.519603][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.519612][ C0] CR2: 00007fe10c37b000 CR3: 0000000020edb000 CR4: 00000000003526f0 [ 302.519621][ C0] Call Trace: [ 302.519626][ C0] [ 302.519631][ C0] default_idle+0x9/0x10 [ 302.519646][ C0] default_idle_call+0x6c/0xb0 [ 302.519662][ C0] do_idle+0x35b/0x4b0 [ 302.519681][ C0] ? __pfx_do_idle+0x10/0x10 [ 302.519700][ C0] cpu_startup_entry+0x4f/0x60 [ 302.519718][ C0] rest_init+0x251/0x260 [ 302.519733][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 302.519750][ C0] start_kernel+0x47a/0x480 [ 302.519763][ C0] x86_64_start_reservations+0x24/0x30 [ 302.519778][ C0] x86_64_start_kernel+0x122/0x130 [ 302.519791][ C0] common_startup_64+0x13e/0x148 [ 302.519814][ C0] [ 302.708955][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 302.715818][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 302.724909][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 302.734942][ T31] Call Trace: [ 302.738200][ T31] [ 302.741111][ T31] dump_stack_lvl+0x100/0x190 [ 302.745808][ T31] vpanic+0x20d/0x630 [ 302.749781][ T31] panic+0xd1/0xd1 [ 302.753481][ T31] ? __pfx_panic+0x10/0x10 [ 302.757881][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 302.764020][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 302.770173][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 302.776307][ T31] ? watchdog.cold+0x198/0x1ca [ 302.781051][ T31] ? watchdog+0xcd3/0xfe0 [ 302.785363][ T31] watchdog.cold+0x1a9/0x1ca [ 302.789939][ T31] ? __pfx_watchdog+0x10/0x10 [ 302.794600][ T31] ? __kthread_parkme+0x18c/0x230 [ 302.799609][ T31] ? __pfx_watchdog+0x10/0x10 [ 302.804285][ T31] ? __pfx_watchdog+0x10/0x10 [ 302.808948][ T31] kthread+0x3b3/0x730 [ 302.813012][ T31] ? __pfx_kthread+0x10/0x10 [ 302.817581][ T31] ? ret_from_fork+0x79/0xaf0 [ 302.822237][ T31] ? ret_from_fork+0x79/0xaf0 [ 302.826895][ T31] ? rcu_is_watching+0x12/0xc0 [ 302.831662][ T31] ? __pfx_kthread+0x10/0x10 [ 302.836255][ T31] ret_from_fork+0x754/0xaf0 [ 302.840847][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 302.845952][ T31] ? __switch_to+0x7b9/0x10c0 [ 302.850616][ T31] ? __pfx_kthread+0x10/0x10 [ 302.855187][ T31] ret_from_fork_asm+0x1a/0x30 [ 302.859939][ T31] [ 302.863210][ T31] Kernel Offset: disabled [ 302.867507][ T31] Rebooting in 86400 seconds..