last executing test programs: 17m57.38331568s ago: executing program 32 (id=62): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x110, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x75b, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r6) 17m36.195851453s ago: executing program 33 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r2, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000025bd7000fbdbdf25093b1486d03d4264b32c5d4b19de5fbb607e081338387d7c140000007fe292000800"/56], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x9000000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0xb, 0x0, &(0x7f0000000100)) 17m30.949378781s ago: executing program 34 (id=125): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x240, 0x4, 0x0, 0x26}, {0x9, 0x8, 0x2, 0x8}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x58}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20000, 0x18c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r5, 0xa64c000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) 16m20.065028208s ago: executing program 35 (id=283): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000015d80), 0x201, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1208000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00022dbd7000fddbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x880) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000300)={0x14}, 0x14) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x7000000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000080001c000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028008000540000003ff060002407d0000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000002f00090027ad700000000000040000004d621a9d77f5a710608bd6c8ec6b89af0b193675a64dbdce01259d42da7240488a7d4f8c638e99dcc5ff"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 15m13.218762288s ago: executing program 36 (id=517): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000"], 0x84}}, 0x0) r0 = socket(0x21, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$mtd(&(0x7f0000000040), 0x1e, 0x100) ioctl$MEMISLOCKED(r2, 0x80084d17, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000901000000", 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0x7) fsetxattr$security_evm(r1, &(0x7f0000000180), &(0x7f00000002c0)=@md5={0x1, "d9c871f227da0411bdb104598a91a580"}, 0x11, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000b7a30b8ea45c85cd001000128008000100687372000400028008000400e1ff0000"], 0x38}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x520c, 0x6, 0x40, 0xef}, {0x1000, 0x2, 0x6, 0x6}]}) 15m8.707285877s ago: executing program 37 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r0, 0x80140912, 0x0) 14m47.259834667s ago: executing program 38 (id=589): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7, 0x1}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000680)=""/180, 0x120}], 0x2, 0x6, 0x7) r2 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="401401012000d80ac77ed178dde9b31805e1b50620816810b009487c3ac78e9245933cb92ac298514f662789af4488801e8a66482bef83e4b893a4eb6d237beef9f6092ba3bbda2ce70a8518cdf99b67c3691039555cef387fd9ce0da9317901", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x920, 0x12) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000980)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000140)={&(0x7f00000009c0), 0x4fd, 0x0, 0x1}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000680)=""/180, 0x120}], 0x2, 0x6, 0x7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x920, 0x12) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000980)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000a00)={&(0x7f00000009c0)=[0x0, r9, r10, r4], 0x2004fd, 0x4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, r5, r11, r12, r13, 0x0], &(0x7f00000004c0)=[0x4], 0xa, 0x1}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x100000001, 0x8) connect$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10) socket(0x2, 0x80805, 0x0) 13m12.123932845s ago: executing program 39 (id=865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) fsopen(&(0x7f0000000140)='ext2\x00', 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x5c, 0x0, &(0x7f00000001c0)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xfffffffffffffd39, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x64, 0x0, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x400}, @decrefs], 0x0, 0x0, 0x0}) 12m43.59334997s ago: executing program 40 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (fail_nth: 11) 12m35.435259387s ago: executing program 41 (id=1002): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r1 = epoll_create(0x0) writev(r1, &(0x7f0000003680)=[{&(0x7f00000020c0)="12e93e6f20ce9f46d3aa3c64725aa2306ec0be6b0b0ab430c96f0a5377bb5dcfb9afc1c10c6eccb0bf464645da5444ce6f4396353f80311f0c571c48ebc7baea50ac255b539374af975c54ab604b3ffcaba630f30204044b69815fffa49fad57b33e93a6723fe4fd7d7d338c6e4bf4ea8f83b5f6616fae38b45bf5b5d1162df8dc99c275796aea47a15f", 0x8a}, {&(0x7f0000002180)="edecaf9dfe78c6b538359ba6", 0xc}, {&(0x7f0000002200)="b06e4572f0c8b7b630caf845e16fe4fe58e5cbc02d767651a193b2bf141abdf3cde15e06f45945a1", 0x28}, {&(0x7f0000002240)="cd17464ef07f21663a0180245c63a0d3636f0775e1d9184293", 0x19}, {&(0x7f0000002280)="5fc08be57fc6db95f5bad6c2332d78eadcf1e0063330067d010fa4a696ba3d46114429080881f2c29b86dc86158c6d00a8c94ef828262ed99d520b57ed89949e956c4a385ba2202d5a1c02ba8ff2b3d791868d4e6c9ffee5fa5a894a788c71d9393cc3e273f43f50e68faf31307efec9", 0x70}, {&(0x7f0000002300)="4c558feab86c95617da19c04f316d1fc27b15398227357efd68e773e9b31056de1d90f58092d0bb2927f63e5973071b23aaab1f52db42661a78cadc42268296831134016ee1e20c8eabc3f7e215d0f584e77ad3951c8a980b6e82519d548dd42ca58acbc2e437d6aa2251e10723cfaf8d902a048c55fffa8600951569ce39784693eac5a163efc15c2570fcfe036f122f6ab90d1701674a33e8dc555d8a52bb215fd874332f7a8dccbf9048f27cfebeec2734a8b5b934aaa6cdacadf790df319d0e1b4e05e6477df", 0xc8}, {&(0x7f0000002400)="54017f385d965f1d0d9c2716155b7722bcc2ab52a00f44ff2c424a50f3fb9e12da1e535cec3d64c389763f954ee95de8bea55a8d5c0df0f66dde6ec7dc394419bc6eeaa3dd0e20ffcc4e2bc63892eb615a6fff21862df1215deb9a2eb4be8f3d39ffa89fd11ea120569ee382508102c2fa1ad7b1a3d24601ce3e197be14bf739d21f76fc9e18c86f95c14f695fc496626f71246113a4b8f80d39f56857d76a27b8c04888c23f48d6df489c8e715532a8d407d4aba9318e5d96fe96752da03ca314cc154e81cc0a9d913b232ce9c560568795966f26be9d0c0ef92084ba162e567d0c086f24f7f76d6b428bdc739cf9707ae0c8639eadd68d087f2974a8b161331081b7490de7e72703d0de86de1a7bb6d9b1651f0bc1066692ef764058a9269f931b8336381fd6209422fc2113262816fdb60f33621f6e6a418b86e33ce5a49b2fd0ea8495658ee3b808654b4df1c5b11a6437389c06354fd869a0371e251b8000f0dc4a5ae1cf124fb8079ce943b14314ca8635ee3dbe9f0651f86dccc90e749b33579b9416c68652b5cec8ad11c9f603a65c3e49f3a7b3280157b0e700609a5586432189c5f7501b8090e53fe54fa8c2e9c5b6699c4fa0df0d544f21f1b81740057986e553e2848a4a25f81cba4d01c67df67e7f940c218caf5bec16a504de77e4a5eebd9e6cd75dd7a3a03aa23b482bc5ea4a3a7ca3b39cafc0f57f99bb0ae2b7dbc13ca04e1f53677ed1d4b203b8d0f3183cb34b93413e42cdf44836294b970fa28815b752d7d6a8641a7ee66e7b773846354c36a71a528bcad9ed0d2bb73ecca2fef6d56af9c6d4d5315016b083143cc30354771a6f421d8044c583a61ab3999d95cefb2343eb007fb6939548d743ab437c599fe1fb559909fb9787568b61682672735201481645e647572ab1cc19f6c0b4a8840c3364c17daa02f12b8664ed4a3a4d6af3740253c88f43d362bb0a55a8c94e7be6553bb6af45a3cf2388a76b8996d40abca53ec38fa4d024b3b33217b61c582c55b1c2a4c6064314f31f203c7a94964804a1e3db19bab0ac0774509c46b892759779105340fa78a4c9f408744eac8a825283fc383e324bb1419012b66285f2cafee41eeadcac7211551785e5419908bde9257d626eb6b9a98cb0e12d7ec947b3c360d1f72d1e30ad3dec8880a86b2d43a4135ddd683d75e67da598073041abcd637278ef497ee2b24ac104cb86d1eb3c9f1e4020a35e5f403a7fcc19b8a857d561b5326240d860b935dcf2c6e27b9c30bf761d51bb1d22c09e5442719c8892e1bc42d39d29232dfbc5e19c037a56193767c53cc90cca9bc8a345eb9c25e64083b9ccdda38be6b55e5363abe69f02ab1e8d350d43529888551238522ea077d492aac2f637305b6dde984ee789b24b331eb2a766906c73180d0bf6c67d7bc4883efb2ca33a8c00bb11465dfa93becf7d8ac6b3f9a0387fe0c84d8cddce2ab748d923329050875f2304c982958b3d48d9d54e892e43e2f967c0121c957b63c12d14de76d4d84e845bbd870495861c3c67b38a2138759868c16cf568b172cae2e7d1f740c21dd3e7d631f05f5d74c86ce2f9edb7d9f7c11d30e56a1bb41c07391c7f7ede600d14ec94888cd18e6fa1ce60a9ac385e977cbfbfce35ad1439fc2fb2434a1102e82aa82a4d78dc21e46f935efcda8317a9ce7a39de7ed91d6007cfce34a6a9e3bc0ed14e42e256de8832f4e163c6a5cc5d5a1e7cfe36960eee63f9a28c1ae3cf173eea20dfe174a178a013cad6dac108dd7f87861faab245a83d5bcf3f521669e33a6e6544946fe411b8c92e7cb2fe806bcacfd31ecd51b2a25c0c4a64df0269a8e5dc4e0450f5f76765fec2047e62f51ff55883d6b7fb994ca896752e86112df54a250d5adf33581010fa0932b6c252ee93ff316331d8a0db3eafb2fe2d9a747870100d8a60fedcff1f54653a54f479004f1e9818c10216c0f9bb37e0dd0ba1b6a4332f86fdef01f6b610f606a4fb41cec3ce9521396dfe0d38e981230a7d2f8bb5ad6cfcbabd2dbca429735757a8ef6a25a08fa7f310e451261b60c26e52726027b12c849f83a5a431f20b6e52e6ca861b6d1288c1ae70963189c94319f8070d36bad7b1da295cf16aff29610337348b3461aabe3323e63d0132f48618ae5f3200ad834b0047b6bffe579237058ee075aed63708897f0c09f7f84ce84890a20c517f2e2781793751a5082ad89aed45bc416e31613ca32398df3a916dc77599267b63361c259e854c97dbb427d6eda1996863331851a6b1d4d49838055f59fcdeef4f1178c12c6b5eaabc3978b1263badf850d95a173ecd07b7672e886ce44501607223619a578e5309d29086690c4f83b00bf341a2936b64b7e325d57c79d48f531f8b1d25cef31b4a9f9c0c4542f2c8f3761962656c30f89f8cfa6b9719c5c251fcd27f065085adbd08144e79484a337e589697a054a0addd4e71894cb2f3df73b0f59e5a501e12649132767b779083ccf5890d5eef6258201d43747305205f335eae229b540756d05f2ece0a30572dad3a8b01251ea7bd8fcd8c38e1e84aee47fd19195f67083efed95c128d15eefc2ace7e64bd8f679b4a489544bb690484a6614e12d5dd1cc4aba9106b2ed05319ae0183e1ce6a46c2a7671b063e3fd0dc08cea7c78836b7699e0314ea03dfc5c6aec36ddec973cfc86bf521197a1bcf20894754294f0fa63205796caceb62043a59e448da5d34a337e97e01179796019aa9be66d375fba37b5fc116db97cf67678f8482bdf5c5a932cafc9ecaa7b9bb62d901017a61426c4f4c04c74f5f111914e1ea1594821d107e68f4e8f2591affee67addf9487a14b56bdd45416858d81b7ad09d12e0c585e56fbe6b53df4ab03453038f244cb8cab078293749a1c62704500c306a1337fa52e7131219d217c907ededabf2b85cac2d8b09a3bdf1fac6f665b5985dac8cffe3ac8c81c750b952224b6027f588d1a81d29b74a9987cf0f439e551208135bb1b1df6a03029198d0354c7314d8428842a451a399e21951eb57fb33fd73047953faf61eaeb5d7ba5eb1646dceaef5701c575d096cebb06c0d7118fbba891cd73a7856c96e7342285887f9e8f006e79e2803a139ea5d70439306afdddd6b87926d0771397c6753594ad56b7a0fc43e9612454ee037450f1e266b3b3b25b19b82e4924b77b8d3434a4127a87044cb0eb11701a51f97a52ffa99eaff95bef8227f206023ae2aad18f591dd4d63926f6fdff73a8f698f2fa7fe673f7bc4a9b57b0fb844b947dfe0cb4e224c242d2420cf2b82c6336867f9ae66cb00ed775715f7f25779f2622248891138be21750f8e02be6e263ccfb3e98ec9b18ee1a3f10de47f073a2f0dfe91c9d9c5028989474bbd63d11eb7d256f3a5971bbb08e523372a2cf42b912a6728009df0dfc7ccc59369850d33e88bdfd797269a216e5c541a77fbf9c10bd65db8a250b447d72ddcd7d6fe937532e7d021504769e36812170cfd9bfa528a12fa5e416d5163838a5a55fee318f6e7b2882ca54fa5b5c19257fc6b7b8298f4a0f1cef6bc003f0fa08dcab285e614e9e2327789638df6b5ed0dfa9e48f485a98521012e90043486d602e647eca6d65c450be42a0f7c1ad5958f61cbca7313ea494629ab43b494df8bec4fc9a1d4bd1505bcd5e1ecef706ac5866c52a033795571f79d9b5e55a18bbb609f800ca7b35747b38aa1513ca38ebe87f04388a3ddd4981383244efe149260c83db6af3f8f536647a057f0ee250eb9e36a73b7b6b831c9ec391b7eaf09a8a4e7db83c65a8f3544e86922c7846685602a72206978a9b07a432080e948d5819641dcec20092378466fd587b1a442acf935f03398a072ef35fa61ca308ca6567cea598540305bf6240503a03cb55c9780fd6ecf42ee0f0596785fe704011a2380414d6c77c2dfa2519ca23af42d292aba299a91ecfe3cee585574afd1eb77dfb5e3e588c65c95cf93e29154b196b41254418a88a4e4281fd8ac5f3d64e4e784e569ce07de0fc204119e4537c1beffdff53d77d2ae341024cdd8f010230487e0af90852d69b1d888ed271788254955473aa3930ea06cdb6181e4cc80333e7a07112df7d04ac3333753c7cb819b8e69d94c26434d7ef3f8c7335712ee8a4d025232eab286068dfa2099c39a9fd68f8c710fcadfddeb405cf1579d617a5b75b5db94fe2d309e8fa5696463d1fa42782a898294265be35a282166d839bf4cb42ddbe434f35414b7585536399008d5fb958b89a40486897bd1766d4c05a1a10c8d295d2466e3dc86c68ae56e0f7671257f6677aac9396638ceb6000a3f02ef4c04570792008935623124be89b5cc09c55399f6c2e1718318d6b8b9f2240eb6152a3e7caa406d919bcbda97f541aee32aa689ecd1c5399a76f462f5e094f147f0be905dbffffdb8c32e02574562639e29ca64eeaa3ece11ff5b5da9fe45a78c69c02b4a10fb7fb586c9106d660edbfc4e041f9682e9b2435ead8c8d8d630f36305df5b58befe5222c08fe840938ffddfaa7d7d8af4d52c97fe36c18275ef8f5880b47e1af4aec75ae9794a4e23eb2b70f0464639531b5d46c644d8cf79810f8571a9b41c04ad59b62bd8e7907303aad71b2e7bf4eb8ab1adce922416f451ea7df944a736537cae108a1165ec67edd261781ed43df54d06c764740de05fef8cf56b715a85486e93289b11525e581e0a731e8fd8cf7d59939b841771f2043e648b01bd074405821b1df1efabdcda260c402bcbb3bdb69934b90a15242f7dc55bffd4e36cb2a4e3d0c7a2955ffa81b992e611b68c9f841ecfbf5a18657dbf5345f15f98058d422f51ab7beff404b53074e408c147cc4999053dd9691ccbca373b0d3d2e979648ac7c20552cf1ad2b534be261043233d5e9e194250c6d774196c0455eb57686dcca7049208c0933fbf84324acf35fb74bdfb5951001989717271f1311625926b658c8907a3c8154879239f523056b1850dc9c98439f0d59bf5ba77afd3e5d271d4cf39050d82f5dc0f1b9e3450a4054333131b3dfa08a3b040da52ebe316db710fe36001efbba4a0003160e9d039a9deb07a436aab27ed6fa4dea4d50ddd32705bea50920d77a0bf3929e1de3ba58478d6e19d83558c46c36f436d412c09dfa2cf461a122b86c0427e5d7b2f53b5d18463a475db2029603eab0ad522b822fada81874f2d2a60000d97ff09a2afe0433a55a60df16078e1645a091c687ef8bebd323b3c2fa83e871e6b869e675dbfcb3eae154ec66858bfbfd40d257cc66df3233b17514744a81c39e7a785decad9f1973bee966fffa2cee8e74bfdf2761946e6e4638212616d8f884d6ec00540aca88c1da8db368421458857af63ed57f5e2917a3fe5d282bdfa0e8bc3b51f77bc851fc49e3f1c7115ba44d4f493998c3243503fb8b1b2d2aefae27307d9575056bc1d36e45fc45f7ca33cc0f8987b8511f9f4b44becf0f9243f2d9a425067cccd1bfb2b76c739b44ee6e5cde1098628af0abc43b7ea3ea9a442b5a0956aff3e7fe924732bbc6153099cbf3b3da422450c1a686d962e36e0460ef22f524cce20451ad073bb3f8094498053f3e0af25732430ab6c07752cec2e3683c51e0bc913bac428407ddbdd81fb3663641b73ec9e18ea097baa8f781c6800db58f27e40d590664500270cf2cd9c84017e36cd8f5f23ae148c5696555f3ffe11e0258c8a06e2ede087483128a43e2a230bfe4292feca112353efae3e05af040abd15d574308b23312f837236995a32136a90299066d02a51c6d9203", 0x1000}, {&(0x7f0000003400)="569d9173f62cf87a6f15b8909b1cc5c106d547438ef7ce2b21199bffbf38c64b52c60505ac8d246a707ce8dd026e1ceb024e801e2345d9f3ee0ba547bc4ccba2ae6015c155", 0x45}, {&(0x7f0000003480)="24dcf6ef5e4474d64939ff3714e1619e0e917d33dac2cf7a9ace0ac27746bfeeacae2a100d95ecda5a3d0c4274a9b62b576cac44d3d0844f8b97dd5ceeacb079d178cf99acaa932f195d7326f27d2f35d936e6a8ff764423da4b0df4ad7a27fad4dadf175af918ca6abe62e253663d06ae7cc4f543752cdaa1c0077d96d7fa26df3ca9a47f6ce40a4481b0c9e0b72c5a0102bb367e9673b4c85b99a55a052b9f8bf3892a61696b56ed807d2829be233ae5e5880dab6eeb59419caf06ee46a587756306d392feabbfd3cb5d709a57c166e9b54ddab7b2f5be45dcc1479799c1", 0xdf}, {&(0x7f0000003580)="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", 0xfb}], 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x1ff, 0x81, 0xfffffff6}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r4, r5, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000021c0)='./file0/file0\x00', 0x3) 12m34.406589158s ago: executing program 42 (id=1007): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x24}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed7, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mlock(&(0x7f000049d000/0x3000)=nil, 0x3000) 12m26.169065399s ago: executing program 43 (id=1020): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='mountproto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 9m13.028905248s ago: executing program 44 (id=1471): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000410007012dbd7000fedb62580315102d94d32d801800"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "02722e3486ebd900"}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r7, &(0x7f0000000380)=0x8, 0x12) socket$inet_sctp(0x2, 0x5, 0x84) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, 0x0, 0x0, 0x40800) 8m56.454138806s ago: executing program 5 (id=1533): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c00018008010600", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000003c0)=0x8) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='100', 0x3) r1 = socket(0xa, 0x801, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getsockopt(r1, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f"], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x400122a0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './sys/devices/system/node/node0/reclaim\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xa897, 0xc5b, {0xffffffffffffffff}, {}, 0xf, 0x1}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r4, &(0x7f0000000100), 0x4003) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x50) socket$igmp(0x2, 0x3, 0x2) r5 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000380)={0x0, &(0x7f00000001c0)=[@nested_amd_inject_event={0x180, 0x38, {0x3, 0xc7, 0x1, 0x4, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x74, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x55a, 0x1000, 0x7, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x670, 0x3, 0x3, 0x3}}, @in_dx={0x69, 0x20, {0xfe4f, 0x7}}, @wrmsr={0x65, 0x20, {0x410, 0x8}}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18, 0x5}, @wrmsr={0x65, 0x20, {0xacd, 0x8}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x40, 0x8000000000000001}}], 0x1b8}) 8m55.110332399s ago: executing program 5 (id=1538): syz_emit_ethernet(0x3e, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x7f, 0x2f, 0x0, @remote, @dev}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x2, 0x0, {0x5, 0x4, 0x2, 0x1, 0x1, 0x65, 0x8001, 0x1, 0x6, 0xd295, @broadcast, @empty}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x18, r1, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x40000000) r2 = userfaultfd(0x801) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c088, &(0x7f0000000040)={0xa, 0x1, 0x40c9, @local}, 0x1c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x49813}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}]}}}]}, 0x50}}, 0x0) sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1000, 0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3810010, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r9}}, {@cache_loose}], [{@smackfsdef}, {@uid_lt={'uid<', r10}}, {@fowner_eq={'fowner', 0x3d, r11}}, {@dont_hash}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}}) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r12, 0x5404) pselect6(0x40, &(0x7f0000000080)={0x9, 0x3, 0x7ff, 0x6, 0x8, 0x2, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1768, &(0x7f0000000200)={0x0, 0x34f9, 0x20, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 8m53.874652773s ago: executing program 5 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./config/cluster/ocfs2/heartbeat/region1/dev\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x8000002], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRESDEC, @ANYRES64=r5, @ANYRESOCT=r4, @ANYRES16=r5, @ANYBLOB="98c32de68bceaa8ef5bf01aea9969d30116eccc0f0a45227d5079dbdd89e48416e1624421fdb9166cd7addc422ac7a78c1253d2f5a0a8dfe594c1bffd509db99c1e754be60", @ANYRES64=r0, @ANYRESHEX=0x0, @ANYRES8=r3], 0x14}, 0x1, 0x0, 0x0, 0x4044041}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m52.475306912s ago: executing program 5 (id=1546): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) symlinkat(&(0x7f0000000080)='.\x02\x00', r0, &(0x7f0000000200)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') read$dsp(r3, &(0x7f00000002c0)=""/140, 0x8c) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x400c804) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) fsmount(0xffffffffffffffff, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = openat$vsock(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x8040040) write$binfmt_aout(r6, 0x0, 0xffffffdb) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f00000000c0)='.\x02\x00', 0x2) 8m51.777879415s ago: executing program 45 (id=1514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xa, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0xffffff7f, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m46.845686761s ago: executing program 5 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @local, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000000100)=@ipmr_delroute={0x1060, 0x19, 0x4, 0x70bd26, 0x25dfdbfd, {0x80, 0x0, 0x80, 0xfd, 0x0, 0x4, 0xfe, 0x9, 0x900}, [@RTA_IIF={0x8}, @RTA_FLOW={0x8, 0xb, 0x7}, @RTA_IIF={0x8, 0x3, r1}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_NH_ID={0x8, 0x1e, 0x8}]}, 0x1060}, 0x1, 0x0, 0x0, 0x44}, 0x8000) socket(0x10, 0x4, 0xffffffff) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)={0x2c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) 8m46.386523005s ago: executing program 5 (id=1553): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x401, @any, 0x9000, 0x1}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8m25.26494569s ago: executing program 46 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x45, 0x0, 0x0, 0x3}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0xc0003, 0x0, {[0x9, 0x64ac, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x80000000000006, 0x6, 0x1]}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c0001"], 0x60}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) write$FUSE_ENTRY(r9, &(0x7f00000004c0)={0x90, 0xfffffffffffffff5, r7, {0x5, 0x3, 0x6, 0x800, 0x6, 0x4, {0x3, 0x0, 0x6, 0x8000000000000000, 0x4, 0x101, 0xcd, 0x3, 0xee, 0xa000, 0x8, 0x0, r8, 0x2, 0x3}}}, 0x90) setgroups(0x3, &(0x7f0000000200)=[r5, r8, 0xffffffffffffffff]) 8m24.558752753s ago: executing program 47 (id=1550): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r1], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r3 = timerfd_create(0x5, 0x800) timerfd_gettime(r3, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0) socket(0x200000000000011, 0x2, 0x101) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000180)={0x1, 0x10}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0"], 0x0) 8m24.421592027s ago: executing program 48 (id=1553): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x401, @any, 0x9000, 0x1}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6m14.573671609s ago: executing program 9 (id=1873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = fanotify_init(0x20, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r6, 0x149}, 0x0, &(0x7f0000000a00)="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", 0x0) add_key(&(0x7f00000001c0)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 6m14.018582252s ago: executing program 9 (id=1874): syz_clone(0x80808000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m13.65349111s ago: executing program 9 (id=1876): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000004e40)={0xfb, 0x13, 0x0, 0x1, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fff29c"}) 6m11.906806755s ago: executing program 9 (id=1880): setns(0xc9, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x6, 0x2d191, 0xffff, 0x80000002004ce, 0x8, 0xa7c, 0x100000003, 0x5, 0x9, 0x9, 0x4, 0x942, 0x5], 0xeeee8000, 0x20a00}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r2, &(0x7f00000005c0)=ANY=[], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = inotify_init() inotify_add_watch(r4, 0x0, 0x850003d1) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000240)="2ae8d25acee67a3e81331495e12cf055d1d1b2363333562dec5202f6f278197cb1cea0a5b7b4ec5f733ffd033ee55faceee116b24808e760324db488e748c7e72102715e6b9c088d050e8114ccd658d206d398acfb83b35a00bccc46a4d9337fb676774f838bbd72c8d3587c", 0x6c}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r6, 0xff, 0x40}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 6m11.230910779s ago: executing program 9 (id=1883): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0x4a94, &(0x7f0000000440)={0x0, 0x0, 0x100, 0x20, 0x801e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)=ANY=[@ANYBLOB="ccc242ff", @ANYRES16=r7, @ANYBLOB="010029bd7000fddbdf2501000000"], 0x14}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x88d5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0xffffff5d, 0x0, 0x0}, 0x58) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x22, 0x0, r1, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') preadv(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x5, 0x1) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0xa0000016}) ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) ioctl$FIONCLEX(r0, 0x5450) ioctl$PPPIOCGFLAGS1(r10, 0x8004745a, &(0x7f0000000300)) sendmsg$NL80211_CMD_DEL_PMKSA(r10, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe76d, 0x34}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ce5a6bfd4b3d41bdcf137692e66e1560"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8818}, 0x4) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='test_file\x00', 0x42, 0x1ff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x2010, 0xffffffffffffffff, 0x7f000) write(r12, &(0x7f00000001c0)="eec165999f", 0x5) madvise(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x19) write(r0, &(0x7f0000000180)='/proc/self/cwd/test_file,0x0,0x1', 0x20) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000740)={""/32, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}]}) 6m10.558376934s ago: executing program 9 (id=1888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {0x2}, 0x0, 0x5}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000459dbb9938cd930600"}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x3}]}}}]}, 0x40}}, 0x0) 5m55.372379993s ago: executing program 49 (id=1888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {0x2}, 0x0, 0x5}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000459dbb9938cd930600"}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x3}]}}}]}, 0x40}}, 0x0) 5m39.095158727s ago: executing program 6 (id=1966): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) syz_usbip_server_init(0x3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/68, 0x0, 0x2000}) r1 = socket(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SET_PTRACER(0x59616d61, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x48500000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0x40003) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x107100, 0x0) write$P9_RSTATFS(r9, &(0x7f0000000280)={0x43, 0x9, 0x1, {0x8000fff, 0x9, 0x6, 0xfbfffffffffffff9, 0x6, 0x8000000000000000, 0x3, 0xe20, 0x79f9}}, 0x43) 5m36.839630229s ago: executing program 6 (id=1975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x383000, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000380)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000740)="00a02173601000e859fc01e341244e11e2d23b8ae7e58c194ecbb3e213df3128dea90388a597845ab3ce05f0168d3e0f9b82b9fcf7ab27d6fad1fc3bff86304f0a", 0x41) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="c30c308c6f5733b9da705c051724e09731ec459c3adfc96d0959a231520a763129721a29b24632", @ANYRES64=0x0], 0x20) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[], 0x20) ioctl$NILFS_IOCTL_GET_CPSTAT(r5, 0x80186e83, &(0x7f0000000100)) stat(&(0x7f0000000000)='./sys\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, 0xee01, r7) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, r8, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 5m34.567102922s ago: executing program 6 (id=1982): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r0, &(0x7f0000000800), 0x0) 5m33.165835873s ago: executing program 6 (id=1989): unshare(0x2c020400) r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x696080, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, &(0x7f0000000340)={0x9, 0x0, [{0x4, 0x4, 0x5, 0x25db, 0x4, 0x4, 0x4}, {0xd, 0x3, 0x2, 0x1, 0x6, 0x10000, 0x6}, {0xc0000000, 0x8, 0x1, 0x8, 0x7, 0x0, 0x80}, {0x80000007, 0x49, 0x1, 0x9, 0x3, 0x8001, 0x10000}, {0x4, 0x7, 0x6, 0x5, 0x9, 0x40, 0x90}, {0x80000000, 0x0, 0x0, 0x5, 0x1, 0xee77, 0x6}, {0x80000008, 0x6, 0x1, 0x2f22, 0x7f, 0xfffffeff, 0x6}, {0x0, 0x25, 0x0, 0xa, 0xd0ac, 0x7}, {0x40000001, 0x9, 0x4, 0x40, 0xbf4, 0x8, 0x1}]}) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone(0x80808000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 5m32.036083115s ago: executing program 6 (id=1991): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) r0 = io_uring_setup(0x2a8d, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000200)={0x800008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x10) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x0, 0xa0) getdents64(r7, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m29.12290262s ago: executing program 6 (id=2007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0xa50003d1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x26, &(0x7f0000000100)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2, @broadcast}}}}}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x0, 'ip6gretap0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$unix(0x1, 0x5, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r7, &(0x7f0000001180)={0x2020}, 0x2020) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="0400870046003300626ee73d13f640840000080211000000ffffffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r8 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r8, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x0, 0xfffffffffffffff9, 0x206}}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r9 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) 5m13.443712846s ago: executing program 50 (id=2007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0xa50003d1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x26, &(0x7f0000000100)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast2, @broadcast}}}}}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x0, 'ip6gretap0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$unix(0x1, 0x5, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r7, &(0x7f0000001180)={0x2020}, 0x2020) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="0400870046003300626ee73d13f640840000080211000000ffffffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r8 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r8, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x0, 0xfffffffffffffff9, 0x206}}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r9 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) 4m9.012266284s ago: executing program 0 (id=2253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 4m6.740924827s ago: executing program 0 (id=2258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer']) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0xf7, @private1, 0x10000}, 0xffffffffffffffa7) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x40, 0x4) 4m6.287592974s ago: executing program 0 (id=2260): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000340)='autofs\x00', 0x3222084, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x400082) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./myproc\x00', 0x20) lseek(r1, 0x2000000008, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe90780000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@file={0x1, './myproc/file0\x00'}, 0x68) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20040800, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000040)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x6, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20084884) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) 4m5.692591082s ago: executing program 0 (id=2262): timer_create(0x0, &(0x7f0000000180)={0x0, 0x2a, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./config/usb_gadget/g1\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c040000", @ANYRES16=0x0, @ANYRES8=r0, @ANYBLOB="64e55ee86a916b34b6efbeea1aaef65247e2e45c5332aa2ee0f35730598a9d58a1ace8f66cbf41828dc0af34ae7face6d46ea99f99ab045eeafe597ffa874c5e000538cec4d1", @ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="b239f417b01a7212ea2aae8c876ac1b0aeeec3bcd60ed99082a61904b15a105a51b8818cf7e233ed5fd7ce1697a140ee9cc6b7f80571f79eb4656e37c9c80d0159bf4d8190740e60810f6912d2baa6da01706c6cc136ed927194b9d5087cd1e0a050cb0402786c8b5afb4cba4a6f61aa4f8c41f8a73a2c601b7d21fadbf25b7124110750fc571f1c28d6ee2ae3bef548cc7d7b2019dccf8a42cc30aed34678dd0203a678f7", @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x24040021) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000500"/28], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x100, 0x0) close_range(r1, r2, 0x2) timer_create(0x3, 0x0, &(0x7f0000002400)=0x0) timer_delete(r3) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x2, 0x9}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x3e, 0x4c, 0x2ba5}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) epoll_create(0xd441) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) 4m4.643710038s ago: executing program 0 (id=2266): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000380)=0x6, 0x4) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x404, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xff, 0xffffffffffffffff, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x4000000000001, 0x8000000000000000, 0xfc85, 0xfffffffffffffffe, 0xb, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000000, 0x8, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x2000100, 0x80000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x1, 0x6, 0x0, 0x101, 0x1, 0x10001, 0x4000, 0x4, 0x2, 0x0, 0x3, 0xfffffffa, 0x0, 0x0, 0x0, 0x5c, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x0, 0x2000, 0x800002]}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 4m3.739962757s ago: executing program 0 (id=2271): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x96a08928f1d844ca, 0x20010, 0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x7, 0xfff3}, {0xfff2, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x801, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2080200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x240000c1}, 0x4001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 4m3.162725213s ago: executing program 51 (id=2271): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x96a08928f1d844ca, 0x20010, 0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x7, 0xfff3}, {0xfff2, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x801, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2080200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x240000c1}, 0x4001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 3m15.861403095s ago: executing program 7 (id=2412): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0xd, "2a161d2d71db37f20a8f1597f0"}}) (fail_nth: 7) 3m15.241269176s ago: executing program 7 (id=2414): symlink(&(0x7f0000000440)='./proc\x00', &(0x7f0000000580)='./proc/thread-self/fail-nth\x00') syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @multicast2}, "0018630100000003"}}}}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5034, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0) setns(0xc9, 0x20000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) syz_emit_ethernet(0x52, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @local, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) accept4$nfc_llcp(r1, 0x0, &(0x7f0000000100), 0x800) mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x144) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./dev/dlm-control\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)="060000000000000002000000040100000000000000000000646c6d3100"/104, 0x68) mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_debugfs/asoc/dais\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f00000003c0)=[r6, r6, r6]) mount$fuse(0x0, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', &(0x7f0000000380), 0x20000, &(0x7f0000002900)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@blksize}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x800}}], [{@fowner_eq={'fowner', 0x3d, r5}}]}}) unlink(&(0x7f0000000400)='my_debugfs/asoc/dais\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 3m14.910966884s ago: executing program 7 (id=2416): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) mount$nfs(0x0, 0x0, 0x0, 0x400, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x800}, 0x40000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x1b6e, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x50}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) r5 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040803dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000007c0)={0x24, &(0x7f0000000600)={0x20, 0xe, 0xc4, {0xc4, 0x5, "4fef385830e80cd5570fc41f2e3d085e3081403af9b865b272ac4b25f292a5ea1636046c36e8c5c7df6de2726a6c898f1ede6e50969d74fe29582750521757bf292d2193fc70eb3e1b6f4c54246edb9197f711318d2a90165c4453706cd83aa70dc9b388cfa1721053abf295422863d205ae35981746183e43e244ad38800af52efb859df50572c02f233586c2ddc601c83ea9d4286e920d55ce1c1c8ca94823e52a84621754eb3dad8c52fff2c0dc06392f536fe326ece27b1181b35e07b4987ec1"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x64b}}, &(0x7f0000000740)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "e6fa4ccd"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0xa7f}}}}, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x1, 0x17, "bf68968a420ab29f6a9471ecc30dabcffb6d00071be004"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f00000004c0), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp\x00') read$FUSE(r8, &(0x7f0000003d00)={0x2020}, 0xffffffc9) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r9, &(0x7f00000004c0)={'#! ', './mnt/module/block2mtd/parameters/block2mtd', [{0x20, '--+*\x00\x00V,&\x00'/25}]}, 0x49) r10 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c004}, 0x8000) getsockname$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10) 3m10.351475323s ago: executing program 7 (id=2421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x301000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x14) write$P9_RLERRORu(r2, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x1f) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() listns(&(0x7f0000001140)={0x20, 0x0, 0x8}, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0) sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x30, 0xffffffffffffffff, 0x202fa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) connect$unix(r6, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000180), 0x35, 0x850) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() getpeername(r5, &(0x7f0000000240)=@caif=@dgm, &(0x7f00000002c0)=0x80) r7 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1801810, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRESOCT=r1]) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') 3m9.246899501s ago: executing program 7 (id=2426): symlink(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) rename(&(0x7f0000000340)='./dev/sda1\x00', &(0x7f0000000380)='./dev/file0\x00') mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f00000003c0)='./dev\x00') r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000080)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000400)='t\x94\xb4\xadt\xectd\xe6t\xf4\xdfA\x03\xba\xb7\x96\f\xb3\x12\xdfx\xb2\xf6p\x89\xc8teFy{\v\xb8)vp\x93\xe7w-\x16\xd1w\xb6\xa8!\x18\x83,\xcfEu\xb2\xd0q!>\x88-\x10c\xe7\xdb;\x14\\\xc0/\v\x13\x1fK\xa2=\x94\xa2\xab\x02+\xbd\x92k\x0f\xee;\xdf\x89I\x95\x7f\x91-\x7f\x9c\xfd\xba\x8a\x00\xdf\xb9[\x02\xb5\xd9_\xac\xeaT\x93\b)$\xcd\xe0\x95*l\x85\xce\\\xe6\xfc\x18\xe5\xbc\x91\n\x99m7\xf0a \x9ez\xa0\xe8\xc3\xf6\x94\x85*\xa8\xa5xC', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000180)='1234\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0xf65, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, 0x14, 0x0, 0x0, 0x0, {0x2, 0x1}, [@typed={0x0, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x0, 0x2) symlinkat(&(0x7f0000000280)='./bus\x00', r2, &(0x7f0000000300)='./file0\x00') mkdir(0x0, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') 3m6.673864598s ago: executing program 7 (id=2434): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002200)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0xeffd) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 2m49.723417155s ago: executing program 52 (id=2434): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002200)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0xeffd) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 28.818570195s ago: executing program 4 (id=3015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000}) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') pipe2(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,cachetag=']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0x0, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r7, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x14}], 0x1}, 0x4011) 15.89649011s ago: executing program 4 (id=3025): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x50010, 0x7a2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x10, 0x100, {{0x14, 0x4, 0x3, 0xc, 0x50, 0x68, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0xc, 0x2f, 0x1, 0xa, [{@rand_addr=0x64010101, 0x9}]}, @ssrr={0x89, 0x17, 0x28, [@remote, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @lsrr={0x83, 0x17, 0xf7, [@multicast1, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x81, 0x5f4, 0x1e, @private0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x1, 0x7, 0x6, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x2f, 0x14, 0x5, 0xffffffff, 0x1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0xc, 0xf}, {}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=@newqdisc={0x174, 0x24, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x7, 0x3}, {0x7, 0x7}, {0x1, 0x10}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7fff}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xf, 0x4, 0x1, 0x2, 0x6123, 0x28, 0x3}}, {0xa, 0x2, [0x8, 0x6, 0xa]}}, {{0x1c, 0x1, {0x9, 0xc, 0x3, 0x5, 0x2, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0xb, 0x2, 0xa727]}}, {{0x1c, 0x1, {0x1, 0x4, 0x5e, 0x3, 0x0, 0x20000000, 0x6, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x9, 0x4, 0x0, 0x800, 0x0, 0x9, 0x8001, 0x1}}, {0x6, 0x2, [0x101]}}, {{0x1c, 0x1, {0xe, 0x8, 0xfff2, 0x80, 0x2, 0xfffff5b0, 0x5, 0x4}}, {0xc, 0x2, [0xf, 0x6, 0x8001, 0x8]}}, {{0x1c, 0x1, {0x80, 0x6, 0x7, 0x800, 0x2, 0x7, 0x80, 0x5}}, {0xe, 0x2, [0x844a, 0xae28, 0x1, 0xf000, 0x5]}}, {{0x1c, 0x1, {0x6, 0xf, 0x800, 0x3895, 0x0, 0x4c93, 0x4, 0x5}}, {0xe, 0x2, [0x8, 0x2, 0x7, 0xfff5, 0xfff8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}]}, 0x174}, 0x1, 0x0, 0x0, 0x40004811}, 0x41810) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x40, 0x40, 0xb, 0xfffff6c6, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x68, 0x0, 0x31, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x83, 0x7, "e22df66ef9"}, @timestamp_prespec={0x44, 0x4c, 0x4e, 0x3, 0x6, [{@loopback}, {@empty, 0x3}, {@multicast2, 0x58ee}, {@local, 0x800}, {@remote, 0x1ff}, {@multicast2, 0x1}, {@private=0xa010100, 0xd392}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffe5}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000280), 0xc, &(0x7f0000000e80)={&(0x7f0000000980)={0x4c4, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r11}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x29, 0x9, 0xe}, {0x401, 0x39, 0x8, 0x8}, {0xffff, 0x4, 0x0, 0x9}, {0xd9d0, 0x4, 0x8f, 0xf}, {0xfff8, 0x3, 0x9, 0x5}, {0x4, 0xb, 0x8, 0x2}, {0xfffc, 0x2, 0x0, 0x2}, {0x2, 0xff, 0x0, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe34}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_usb_connect$uac2(0x5, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000401e04203040000102030109029500030107000b080b010101ff2005090400000001012000092401018100b90c240305ff01070200ec0006090401000001022000090401c2ad0b3360a9b116f0e783010101022000092402026b000600041024010501030300000003f7ff0000ce09050109400024ff0e082501810c02feff09040200000102200009040201010102200009058209ff03"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 12.538038644s ago: executing program 4 (id=3034): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x0) epoll_create(0x1) syz_io_uring_submit(0x0, 0x0, r1, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x3e) mount$fuse(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0), 0x900000, &(0x7f0000000680)=ANY=[]) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80040, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000380)={0xa00}) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000800d00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4014) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)) mkdir(0x0, 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) 11.782280893s ago: executing program 3 (id=3035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="db0000000001"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0xd38a3768e099983, 0x0, {[0x6, 0x8801, 0x8000000000000000, 0x3, 0xffff, 0x401, 0x7, 0xd]}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000240)={r1}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x5, 0x4, 0x6, 0x50, 0xfffffffffffffffc}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x33}, 0x94) write(r0, &(0x7f0000000080)="7c0000001800050605000000000000000a400000fe040001000000001400010020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x7c) 10.989000835s ago: executing program 3 (id=3036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002080650000705010200020007058202000200090400010408066200"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00002df000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xb4, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) listen(r2, 0x100101) accept4(r2, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002", @ANYRES32=r1], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r4, &(0x7f00000001c0)="98", 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) write(r6, &(0x7f00000014c0)="6585", 0x2) syz_usb_control_io$lan78xx(r5, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x4, 0x3e, {0x3e, 0x4, "cb37f0edb4d1f4ff5ecf85a142a887d41459971809d8efd342c8b4d02544621b20c88a2e3e48b48bd410fc5df8b6ead801019c865ee8bdf8194375b1"}}, &(0x7f00000005c0)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "7101419a687c618a61f3039d0bee3966df8d9a86c76a0e809c0765d63c09b4654289d553af82ae7491be6f0a52e3ae00f0be5e78bd5e4f8a68d699ecffaad57fae24cea0830570e2b5aac0744d434ed4eb807f80ce5543fdb96bc67bdc849d37ef4f9b19f7d7836e5d20a91d96386330f411ed8d97e07d714597d7269df5b8c28b2d31f9abd691854b3cf5bfc065e97b93f542f427d0fbf4b3d02f1f76cc0d6c701f441503ca"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x0, 0x16, 0x84, "a3c881daf86a52f2b270b8ee7135d7e5e4001fca7d2ab2be2a0315e93af93a081007f9441ee3396c426f4dcd631ae1237ad5052e6a209254c93341cb092e222bdfc2017f067377896639138e16ecdc666bae1d7bf86f14986e04756e8bfb7175218d6f0cf810f2eb7bc1a3267d0936b7bc3f969df498fd8d3a70990ce9c34a3e797292d4"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xef}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xe5}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0x1ff}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x40009}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "ea7704be3cf55de4106f5a3f5f8fd18650eaa7cd75ac9ec98f2c4b3e0f376bfb7de8cad2fc8cce784d50fd67a2341e"}}) 10.829132615s ago: executing program 4 (id=3037): getrandom(&(0x7f0000001500)=""/265, 0x109, 0x3) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x0, 0x0, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x1, {@mac=@broadcast}, {@mac=@multicast, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {0xff}}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c0000180037801300010071747228"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x470bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ptrace$pokeuser(0x6, r2, 0x388, 0xffffffffffffffff) ptrace$pokeuser(0x6, r2, 0x358, 0xff) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x801d, 0x2, @thr={&(0x7f0000001180)="6bc54c19f6c88c324ce8980760dcc9505c97cdb7fb7c93e290b1a832bd34d47381a347c14779768fa23653585b69fd222764db5ff0ef44d242df853ae7ff69986c17dffb7b05bbb22f26980352fee4ea334f7def15e77fe4ffeacd7691625b7149ccada74638ea0f1e8698e9bd4f8059dd4fbc3ffb776f8ee48cd08247ac50335bc44a783d81d97a17fa3a1a2282e9", &(0x7f0000001240)="e22a121072c004209c2e88e052a9d5d14a6d005d6aeef57567b3ed00f1b3f0f33177dede0e81299398344f1914adee809d0d078a09b176a4b556f586e3275d1b1c2849f2d3e855becc366ac279df8a9eb0ea3099815d8068ed66f3f5a52d2e2513"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r9, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}], 0x18}}], 0x1, 0x40) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 7.760343893s ago: executing program 8 (id=3045): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="db0000000001"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0xd38a3768e099983, 0x0, {[0x6, 0x8801, 0x8000000000000000, 0x3, 0xffff, 0x401, 0x7, 0xd]}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r7, 0xc00c620f, &(0x7f0000000240)={r1}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x5, 0x4, 0x6, 0x50, 0xfffffffffffffffc}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x33}, 0x94) write(r0, &(0x7f0000000080)="7c0000001800050605000000000000000a400000fe040001000000001400010020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x7c) 7.720249648s ago: executing program 3 (id=3046): socket$netlink(0x10, 0x3, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7.391313904s ago: executing program 8 (id=3047): socket$netlink(0x10, 0x3, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x80004}, 0x1c) 6.78307092s ago: executing program 8 (id=3048): socket$netlink(0x10, 0x3, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 6.678069287s ago: executing program 4 (id=3049): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000040)='7', 0x1) syz_usb_disconnect(r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000000d0601010000000000000000070000030500010007000000f0e39c8f8b36dd6785962b0eac2f4fcb1dd8a790b1c52326029319f3337cc0f7f23847eb1913d2e401d7ec889bd87c645165fd01342339c4c41fe0fdbadf1eed97efee5b5dcbf0fa7aea2622a7a7f3094f6a24088705bc70cdc27a87835f47c17a4486b560ac2e95cad1bd07aab86f81e34a2440d7234742d2447743c4ff473f0cdc7503e457b27940011d2fd286343be224076ec07013a4575eb258174d74afb6b4c864c07f7fa8f3f2c03f9401e702968e"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40895}, 0x20048080) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') read$FUSE(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000088840000000000000000000095000000000000009500000000000000aa99712332979a17"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r6}, 0x38) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) r9 = memfd_create(&(0x7f0000000000)='test\x00', 0x0) write(r9, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168000000000000000000000000000000000000000000000064", 0x2c) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000000c0)=@multiplanar_userptr={0x800, 0x2, 0x4, 0x100000, 0x612, {}, {0x3, 0xc, 0x6, 0x7f, 0x8, 0x7, "d9e18211"}, 0x4, 0x2, {&(0x7f0000000480)=[{0x9, 0x80000001, {&(0x7f0000000400)}, 0x40}, {0x8001, 0x2, {&(0x7f0000000440)}, 0xbb45}]}, 0x4, 0x0, r5}) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_DECODER_CMD(r8, 0xc0485660, &(0x7f0000000300)={0x1}) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000200)=0x1) fsmount(r7, 0x0, 0x0) 6.404259441s ago: executing program 3 (id=3051): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r4, 0x100, 0x306c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0xeb64d656001f6f32) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x5, {{0xa, 0x0, 0x7, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000600)={0x1, {{0xa, 0x4e23, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a004e1f000000000000000000000001dfab000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffffffffffff00"/134], 0x90) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) 6.288042795s ago: executing program 1 (id=3052): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xa8e, @mcast1, 0x8000004}, 0x7c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c464a030403ff0700000000000002000300040000003e03000038000000d6000000977000007e032000", @ANYRES16=r1], 0x38) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) ioctl(0xffffffffffffffff, 0x40104d05, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r3, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x9, 0x90000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xff}, &(0x7f0000000200)=0x90) unshare(0x6020400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c00028008000240000000170800014000000003080003000000008920000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r5}, 0x8) 5.386939574s ago: executing program 8 (id=3053): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x401, @any, 0x9000, 0x1}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/125, 0x7d, 0x1, &(0x7f00000002c0)={0x77359400}) dup(r7) 4.304915243s ago: executing program 2 (id=3055): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') exit(0xffff) close(0x3) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(0x0, &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, 0x0) 4.244396913s ago: executing program 8 (id=3056): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f00003ee000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x5, 0x6, 0x4c) getsockname$packet(r4, 0x0, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x150) pread64(r5, &(0x7f0000000240)=""/3, 0x3, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xd6) r10 = syz_open_pts(r8, 0x0) dup3(r10, r8, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[]) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000000)={{0x6, 0x1}, {0x2, 0x2}, 0x2005f, 0x2, 0x81}) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x0, 0x401d031, r1, 0x0) 4.008644356s ago: executing program 3 (id=3057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="db0000000001"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0xd38a3768e099983, 0x0, {[0x6, 0x8801, 0x8000000000000000, 0x3, 0xffff, 0x401, 0x7, 0xd]}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r7, 0xc00c620f, &(0x7f0000000240)={r1}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x5, 0x4, 0x6, 0x50, 0xfffffffffffffffc}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x33}, 0x94) write(r0, &(0x7f0000000080)="7c0000001800050605000000000000000a400000fe040001000000001400010020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x7c) 3.165338959s ago: executing program 8 (id=3058): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r1, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r1, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') write(r0, &(0x7f000001fa40)="fc", 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 3.140295096s ago: executing program 1 (id=3059): socket$netlink(0x10, 0x3, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x80004}, 0x1c) 3.07482337s ago: executing program 2 (id=3060): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0x0, 0x2, 0x9) creat(&(0x7f0000000080)='./file0\x00', 0x0) fanotify_init(0x2, 0x1) 2.865573393s ago: executing program 4 (id=3061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) io_uring_setup(0x1b7b, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[], 0x0) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) 2.834152263s ago: executing program 2 (id=3062): r0 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x77359400}, {r2, r3+60000000}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000040)=0x41a, 0x4) ftruncate(0xffffffffffffffff, 0x10000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff004) eventfd(0x6) sendto$inet(r4, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r4, 0x1) timer_create(0x6, &(0x7f0000000080)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000000100)=0x0) timer_delete(r6) 2.72193237s ago: executing program 1 (id=3063): r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r1, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) 2.37520661s ago: executing program 2 (id=3064): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='\x7f\xa3\x11M', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04902920"], 0x7) 2.296485146s ago: executing program 1 (id=3065): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) socket(0x400000000010, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b745f7072696f202d6e65745f7072696f202d667265653ef8b5ca"], 0x2e) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='/proc/self/cw', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_open_dev$evdev(0x0, 0x2, 0x862b01) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) syz_open_dev$media(&(0x7f0000000180), 0x8000000000000001, 0x10880) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0xab09) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000002000010083e8fffffbffffbf020000000000000200000000080001006401010108000b000000000008000100ac1414aa0800040009000008"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x14, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1300000019"], 0xfe33) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="13a76f6f746d6f64653d303030303030303030d43ecb3c3030302c757365725f69643d13d097eb7dd3e63cd63718d4d2f814a3e61a741110fc82447087a7ec913468e176cb11a20f29f3b8059b7b67f72f167b000301b4b5d7642d23d7fb6ae2bc783f10304195af7900b7bd69f50212d7496a8758c1b35da156978565bddbd6e2d2ace90794e7f7a067783be6269ad9a3c67a", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x840120, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) read$FUSE(r4, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r6}, 0x10) 1.768355624s ago: executing program 1 (id=3066): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000001608000240000000000800044000000008080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 1.495622839s ago: executing program 3 (id=3067): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) syz_usb_connect(0xb, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001a9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000160000/0x2000)=nil, &(0x7f00000f2000/0x4000)=nil, &(0x7f0000afd000/0x1000)=nil, &(0x7f00006b6000/0x1000)=nil, &(0x7f00001dd000/0x4000)=nil, &(0x7f000004e000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00000c4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8894}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) 1.309151295s ago: executing program 2 (id=3068): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup(0xffffffffffffffff) 57.727599ms ago: executing program 1 (id=3069): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080700"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000004095000000000000007e950000000000005608ffff020000008500000081000000b7000000000000009500000000000000c18869e969e44089278f7a0de4af16dc223303dbdd23c4595eb91263887b1067e86105757f0d471deacc6350d5d70a06a7600bac8a69fa2f566236266acb0febfea1a4e6c3faff71ed0ae3852b0af897659b34cace6b0671d7e5e18a66bdeb854f01eb5349a9dfabe069479b946e8acbc6797420b597d7ad23a352fbfa687cee8e0d1a291395909e570fbaf91b950a"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) fcntl$getown(r2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x8000200) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) 0s ago: executing program 2 (id=3070): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138", 0xca}], 0x1}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r4, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x187540) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7105"], 0xbb) kernel console output (not intermixed with test programs): 9] [ 1099.374910][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1099.377401][ T5779] imon:send_packet: packet tx failed (-71) [ 1099.401913][ T5779] imon 3-1:0.0: remote input dev register failed [ 1099.402002][ T5779] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1099.461630][ T31] audit: type=1800 audit(2000000728.484:5749): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1099.657313][ T5779] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1099.664657][ T5779] imon:imon_probe: failed to initialize context! [ 1099.678446][ T5779] imon 3-1:0.0: unable to register, err -19 [ 1099.693685][ T31] audit: type=1800 audit(2000000728.708:5750): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=338294 res=0 errno=0 [ 1099.716300][ T31] audit: type=1800 audit(2000000728.736:5751): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=338295 res=0 errno=0 [ 1099.741201][ T5779] usb 3-1: USB disconnect, device number 58 [ 1099.751659][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 1099.758011][ T31] audit: type=1800 audit(2000000728.764:5752): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=338274 res=0 errno=0 [ 1099.781697][ T31] audit: type=1800 audit(2000000728.793:5753): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=338296 res=0 errno=0 [ 1099.868037][ T31] audit: type=1800 audit(2000000728.867:5754): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1100.351208][ T31] audit: type=1800 audit(2000000729.316:5755): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1100.462798][ T31] audit: type=1800 audit(2000000729.429:5756): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1100.534193][T21003] input: syz1 as /devices/virtual/input/input84 [ 1100.542705][T21003] input: failed to attach handler leds to device input84, error: -6 [ 1100.698826][T21011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2834'. [ 1100.983337][T21017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2835'. [ 1101.135679][T21020] jffs2: notice: (21020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (2 unchecked, 1 orphan) and 6 of xref (0 dead, 3 orphan) found. [ 1101.226828][ T11] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1101.387089][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 1101.393709][ T11] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1101.404035][ T11] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.404061][ T11] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.404080][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1101.404102][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.434072][ T11] usb 2-1: config 0 descriptor?? [ 1101.537790][ T5779] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1101.590386][ T5698] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1101.699193][ T5779] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1101.709685][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1101.709712][ T5779] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1101.709768][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.746929][ T5779] usb 5-1: config 0 descriptor?? [ 1101.753167][ T5698] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1101.764043][ T5698] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.764112][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1101.764128][ T5698] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1101.764143][ T5698] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1101.764165][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.173750][ T11] usbhid 2-1:0.0: can't add hid device: -71 [ 1102.173846][ T11] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1102.196420][ T11] usb 2-1: USB disconnect, device number 74 [ 1102.225091][T21029] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1102.273935][ T5779] hid (null): global environment stack underflow [ 1102.297910][ T5779] hid-led 0003:1294:1320.0039: unknown main item tag 0x0 [ 1102.307613][ T5779] hid-led 0003:1294:1320.0039: unknown main item tag 0x0 [ 1102.307648][ T5779] hid-led 0003:1294:1320.0039: unknown main item tag 0x0 [ 1102.307663][ T5779] hid-led 0003:1294:1320.0039: global environment stack underflow [ 1102.307673][ T5779] hid-led 0003:1294:1320.0039: item 0 4 1 11 parsing failed [ 1102.308055][ T5779] hid-led 0003:1294:1320.0039: probe with driver hid-led failed with error -22 [ 1103.418776][T21025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.427551][T21025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.515197][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 1103.638725][ T5698] gud 4-1:1.0: USB-2: Failed to add properties (ret=-71) [ 1103.638762][ T5698] gud 4-1:1.0: Failed to get connectors (error=-71) [ 1103.638795][ T5698] gud 4-1:1.0: probe with driver gud failed with error -71 [ 1103.706246][ T5698] usb 4-1: USB disconnect, device number 49 [ 1103.761722][T21056] fuse: Bad value for 'fd' [ 1103.805264][T21056] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2844'. [ 1103.948583][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2845'. [ 1103.948606][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2845'. [ 1103.948621][T21060] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 1104.138781][T21066] netlink: 8332 bytes leftover after parsing attributes in process `syz.1.2845'. [ 1104.664158][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 1104.664184][ T31] audit: type=1800 audit(2000000733.358:5804): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1104.738150][ T31] audit: type=1800 audit(2000000733.423:5805): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1104.865805][ T31] audit: type=1800 audit(2000000733.545:5806): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1104.951390][ T31] audit: type=1800 audit(2000000733.629:5807): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1105.162548][ T31] audit: type=1800 audit(2000000733.826:5808): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1105.335419][ T31] audit: type=1800 audit(2000000733.985:5809): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1105.421502][ T31] audit: type=1800 audit(2000000734.069:5810): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1105.693331][ T31] audit: type=1800 audit(2000000734.321:5811): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1105.736028][T21099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.749821][T21099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.779443][ T31] audit: type=1800 audit(2000000734.396:5812): pid=21097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2855" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1105.885550][T21084] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1105.911541][T21099] team0 (unregistering): Port device team_slave_0 removed [ 1105.952834][T21099] team0 (unregistering): Port device team_slave_1 removed [ 1106.022115][ T31] audit: type=1800 audit(2000000734.630:5813): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1106.142017][T21105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2857'. [ 1106.159173][T21112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2857'. [ 1106.531296][T21120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1107.005414][T21125] fuse: Unknown parameter '!' [ 1107.197685][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 1107.223445][ T11] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1107.234834][ T5779] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1107.245722][T13249] usb 5-1: USB disconnect, device number 61 [ 1107.385276][ T11] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1107.395310][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1107.395335][ T11] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.395357][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.420686][ T5779] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1107.420811][ T5698] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1107.430622][ T5779] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.430648][ T5779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1107.430660][ T5779] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1107.430673][ T5779] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.430694][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.432680][ T11] usb 9-1: config 0 descriptor?? [ 1107.579406][ T5698] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1107.589553][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1107.589581][ T5698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1107.589610][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.615717][ T5698] usb 3-1: config 0 descriptor?? [ 1107.988035][T21134] qnx6: unable to read the first superblock [ 1107.990178][T21134] qnx6: unable to read the first superblock [ 1107.990204][T21134] qnx6: unable to read the first superblock [ 1108.182677][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.192402][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.201131][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.209595][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.209620][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.209635][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.209649][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.209663][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.209678][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.209714][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: unknown main item tag 0x0 [ 1108.277353][ T5698] aquacomputer_d5next 0003:0C70:F00B.003A: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 1108.756808][T21138] binder: 21136:21138 unknown command 0 [ 1108.756834][T21138] binder: 21136:21138 ioctl c0306201 200000000080 returned -22 [ 1108.782827][T21138] binder: BINDER_SET_CONTEXT_MGR already set [ 1108.782845][T21138] binder: 21136:21138 ioctl 4018620d 200000004a80 returned -16 [ 1108.972509][ T9] usb 3-1: USB disconnect, device number 59 [ 1109.033499][ T5779] [drm] Initialized gud 1.0.0 for 2-1:1.0 on minor 1 [ 1109.116345][ T5698] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1109.290097][ T5698] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1109.302374][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1109.302404][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 138, setting to 64 [ 1109.302428][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.338245][ T5698] usb 5-1: config 0 descriptor?? [ 1109.343681][T21138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1109.909544][ T11] usbhid 9-1:0.0: can't add hid device: -71 [ 1109.909627][ T11] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1109.934423][ T11] usb 9-1: USB disconnect, device number 43 [ 1110.082874][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 1110.082900][ T31] audit: type=1800 audit(2000000738.428:5856): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1110.117247][T21149] input: syz1 as /devices/virtual/input/input85 [ 1110.170970][ T31] audit: type=1800 audit(2000000738.503:5857): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1110.231449][ T31] audit: type=1800 audit(2000000738.569:5858): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=339315 res=0 errno=0 [ 1110.265278][ T31] audit: type=1800 audit(2000000738.597:5859): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=339361 res=0 errno=0 [ 1110.307919][T21153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2867'. [ 1110.325139][ T31] audit: type=1800 audit(2000000738.653:5860): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=339376 res=0 errno=0 [ 1110.391811][ T31] audit: type=1800 audit(2000000738.718:5861): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=339379 res=0 errno=0 [ 1110.391860][ T31] audit: type=1800 audit(2000000738.718:5862): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=339378 res=0 errno=0 [ 1110.436911][ T31] audit: type=1800 audit(2000000738.765:5863): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=339377 res=0 errno=0 [ 1110.468223][ T31] audit: type=1800 audit(2000000738.784:5864): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=339368 res=0 errno=0 [ 1110.498384][ T31] audit: type=1800 audit(2000000738.821:5865): pid=20151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=339371 res=0 errno=0 [ 1110.527857][ T5698] ath6kl: Failed to submit usb control message: -110 [ 1110.527891][ T5698] ath6kl: unable to send the bmi data to the device: -110 [ 1110.527907][ T5698] ath6kl: Unable to send get target info: -110 [ 1110.551844][ T5698] ath6kl: Failed to init ath6kl core: -110 [ 1110.552373][ T5698] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1110.711971][ T5779] Console: switching to colour frame buffer device 128x48 [ 1110.748459][ T5779] gud 2-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 1110.782401][ T5779] usb 2-1: USB disconnect, device number 75 [ 1110.906446][T21154] overlayfs: missing 'lowerdir' [ 1111.141081][ T5779] Console: switching to colour VGA+ 128x48 [ 1112.576616][ T11] usb 5-1: USB disconnect, device number 62 [ 1112.939375][T21185] FAULT_INJECTION: forcing a failure. [ 1112.939375][T21185] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.939406][T21185] CPU: 0 UID: 0 PID: 21185 Comm: syz.2.2879 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.939424][T21185] Tainted: [L]=SOFTLOCKUP [ 1112.939429][T21185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1112.939436][T21185] Call Trace: [ 1112.939441][T21185] [ 1112.939446][T21185] dump_stack_lvl+0x100/0x190 [ 1112.939467][T21185] should_fail_ex.cold+0x5/0xa [ 1112.939483][T21185] should_failslab+0xc2/0x120 [ 1112.939498][T21185] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1112.939510][T21185] ? __lock_acquire+0x4c5/0x1ec0 [ 1112.939522][T21185] ? sk_prot_alloc+0x60/0x2a0 [ 1112.939537][T21185] sk_prot_alloc+0x60/0x2a0 [ 1112.939551][T21185] sk_alloc+0x36/0xe80 [ 1112.939568][T21185] __vsock_create.constprop.0+0x3c/0xb70 [ 1112.939586][T21185] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1112.939600][T21185] vsock_create+0x126/0x510 [ 1112.939612][T21185] __sock_create+0x339/0x860 [ 1112.939629][T21185] __sys_socket+0x14d/0x260 [ 1112.939643][T21185] ? __pfx___sys_socket+0x10/0x10 [ 1112.939661][T21185] __x64_sys_socket+0x72/0xb0 [ 1112.939675][T21185] ? lockdep_hardirqs_on+0x7d/0x110 [ 1112.939688][T21185] do_syscall_64+0x123/0x790 [ 1112.939703][T21185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.939714][T21185] RIP: 0033:0x7f1eeb19e159 [ 1112.939724][T21185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.939735][T21185] RSP: 002b:00007f1eec0be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1112.939746][T21185] RAX: ffffffffffffffda RBX: 00007f1eeb426090 RCX: 00007f1eeb19e159 [ 1112.939753][T21185] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 1112.939759][T21185] RBP: 00007f1eeb235024 R08: 0000000000000000 R09: 0000000000000000 [ 1112.939766][T21185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.939772][T21185] R13: 00007f1eeb426128 R14: 00007f1eeb426090 R15: 00007fff09f79188 [ 1112.939786][T21185] [ 1113.121923][ T5779] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1113.333499][ T5779] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1113.346816][ T5779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.346846][ T5779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.346874][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.034201][T21197] qnx6: unable to read the first superblock [ 1114.034316][T21197] qnx6: unable to read the first superblock [ 1114.034330][T21197] qnx6: unable to read the first superblock [ 1114.170494][T21199] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1114.219960][T21199] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1114.220008][T21199] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1114.284022][ T5779] hid_parser_main: 28 callbacks suppressed [ 1114.284051][ T5779] hid-picolcd 0003:04D8:C002.003B: unknown main item tag 0x2 [ 1114.349640][ T5779] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.003B/input/input86 [ 1114.642108][ T5779] rc_core: IR keymap rc-rc6-mce not found [ 1114.642129][ T5779] Registered IR keymap rc-empty [ 1114.653772][ T5779] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.003B/rc/rc0 [ 1114.674341][ T5779] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.003B/rc/rc0/input87 [ 1114.689926][ T5779] hid-picolcd 0003:04D8:C002.003B: unsupported CONTRAST report [ 1114.765590][ T5779] hid-picolcd 0003:04D8:C002.003B: probe with driver hid-picolcd failed with error -22 [ 1114.790449][ T5779] usb 4-1: USB disconnect, device number 50 [ 1114.845210][ T11] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1115.017748][ T11] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1115.029492][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.029525][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1115.029543][ T11] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1115.029558][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.029581][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.199708][ T2314] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1115.381855][ T2314] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1115.392004][ T2314] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1115.392038][ T2314] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 70, changing to 10 [ 1115.392060][ T2314] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 42393, setting to 1024 [ 1115.392077][ T2314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1115.413550][T21217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 1115.426251][ T2314] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1115.426268][ T2314] usb 3-1: Product: syz [ 1115.426277][ T2314] usb 3-1: Manufacturer: syz [ 1115.426285][ T2314] usb 3-1: SerialNumber: syz [ 1115.454625][ T2314] usb 3-1: config 0 descriptor?? [ 1115.463755][T21210] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1115.485878][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 1115.485902][ T31] audit: type=1800 audit(2000000743.480:5926): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=339843 res=0 errno=0 [ 1115.516354][ T2314] hub 3-1:0.0: bad descriptor, ignoring hub [ 1115.516371][ T2314] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1115.517792][ T2314] usb 3-1: selecting invalid altsetting 0 [ 1115.550785][ T31] audit: type=1800 audit(2000000743.536:5927): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=339875 res=0 errno=0 [ 1115.550822][ T31] audit: type=1800 audit(2000000743.536:5928): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=339850 res=0 errno=0 [ 1115.604369][ T31] audit: type=1800 audit(2000000743.602:5929): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=339851 res=0 errno=0 [ 1115.637258][ T11] usb 2-1: USB disconnect, device number 76 [ 1115.735393][ T31] audit: type=1800 audit(2000000743.714:5930): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=339872 res=0 errno=0 [ 1115.759385][ T31] audit: type=1800 audit(2000000743.742:5931): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=339873 res=0 errno=0 [ 1115.783196][ T31] audit: type=1800 audit(2000000743.761:5932): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=339852 res=0 errno=0 [ 1115.811558][ T2314] usb 3-1: USB disconnect, device number 60 [ 1115.949362][ T31] audit: type=1800 audit(2000000743.920:5933): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1116.017906][ T31] audit: type=1800 audit(2000000743.976:5934): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=339874 res=0 errno=0 [ 1116.089652][T20028] udevd[20028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1116.138325][ T11] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1116.166951][ T31] audit: type=1800 audit(2000000744.116:5935): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1116.301671][ T11] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1116.311804][ T11] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1116.311828][ T11] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1116.311847][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1116.311864][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1116.311880][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1116.374009][ T2314] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1116.393717][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.393743][ T11] usb 4-1: Product: syz [ 1116.393758][ T11] usb 4-1: Manufacturer: syz [ 1116.393768][ T11] usb 4-1: SerialNumber: syz [ 1116.419160][ T11] usb 4-1: config 0 descriptor?? [ 1116.432441][T21224] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1116.452998][ T11] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input88 [ 1116.469551][T21230] loop2: detected capacity change from 0 to 7 [ 1116.488112][T21230] Dev loop2: unable to read RDB block 7 [ 1116.488154][T21230] loop2: unable to read partition table [ 1116.488284][T21230] loop2: partition table beyond EOD, truncated [ 1116.488298][T21230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1116.536450][ T2314] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1116.549403][ T2314] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1116.549479][ T2314] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 70, changing to 10 [ 1116.549504][ T2314] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 42393, setting to 1024 [ 1116.549521][ T2314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1116.612818][ T2314] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1116.612846][ T2314] usb 3-1: Product: syz [ 1116.612863][ T2314] usb 3-1: Manufacturer: syz [ 1116.612873][ T2314] usb 3-1: SerialNumber: syz [ 1116.641477][ T2314] usb 3-1: config 0 descriptor?? [ 1116.649062][T21210] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1116.657339][ T2314] hub 3-1:0.0: bad descriptor, ignoring hub [ 1116.657355][ T2314] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1116.686697][ T2314] usb 3-1: selecting invalid altsetting 0 [ 1117.248015][T21239] qnx6: unable to read the first superblock [ 1117.248106][T21239] qnx6: unable to read the first superblock [ 1117.248119][T21239] qnx6: unable to read the first superblock [ 1117.422507][ T2314] usb 3-1: USB disconnect, device number 61 [ 1117.521059][T21242] xt_hashlimit: size too large, truncated to 1048576 [ 1117.537185][T21224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.537398][T21224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.832390][T21247] openvswitch: netlink: Message has 13080 unknown bytes. [ 1117.832428][T21247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1118.209375][T21255] qnx6: unable to read the first superblock [ 1118.209469][T21255] qnx6: unable to read the first superblock [ 1118.209483][T21255] qnx6: unable to read the first superblock [ 1118.240770][T21252] netlink: 'syz.8.2896': attribute type 4 has an invalid length. [ 1118.701958][T21246] netlink: 'syz.4.2898': attribute type 13 has an invalid length. [ 1118.710675][T21246] gretap0: refused to change device tx_queue_len [ 1118.710690][T21246] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1118.998604][T21262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2901'. [ 1119.015085][T21262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2901'. [ 1119.025655][ T2314] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1119.083869][T21266] loop7: detected capacity change from 0 to 16384 [ 1119.123097][T21262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'. [ 1119.792720][ T2314] usb 5-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 1119.808070][ T2314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1119.808096][ T2314] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1119.808122][ T2314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.854543][ T2314] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1119.977930][ T11] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1120.109353][ T5779] usb 4-1: USB disconnect, device number 51 [ 1120.159488][ T11] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1120.175186][ T11] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1120.175222][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.218584][T21262] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1120.234984][ T11] opticon 3-1:1.0: opticon converter detected [ 1120.282115][ T11] usb 3-1: opticon converter now attached to ttyUSB0 [ 1120.389735][ T2314] usb-storage 5-1:1.0: probe with driver usb-storage failed with error -5 [ 1120.690257][T21258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.690578][T21258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.986318][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 1120.986388][ T31] audit: type=1800 audit(2000000748.625:6010): pid=21278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2904" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1122.038447][ T31] audit: type=1800 audit(2000000749.561:6011): pid=21282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2904" name="enabled" dev="sysfs" ino=55847 res=0 errno=0 [ 1122.103413][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2904'. [ 1122.224506][ T2314] usb 5-1: USB disconnect, device number 63 [ 1122.539773][ T31] audit: type=1800 audit(2000000750.076:6012): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1122.712053][ T31] audit: type=1800 audit(2000000750.235:6013): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1122.790128][T21284] loop2: detected capacity change from 0 to 7 [ 1123.077042][ T31] audit: type=1800 audit(2000000750.590:6014): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1123.243282][ T31] audit: type=1800 audit(2000000750.740:6015): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1123.281146][T21284] Dev loop2: unable to read RDB block 7 [ 1123.281180][T21284] loop2: unable to read partition table [ 1123.281332][T21284] loop2: partition table beyond EOD, truncated [ 1123.281347][T21284] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1123.485530][ T31] audit: type=1800 audit(2000000750.964:6016): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1123.566060][ T31] audit: type=1800 audit(2000000751.039:6017): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1123.697259][ T31] audit: type=1800 audit(2000000751.170:6018): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1123.868330][ T11] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1123.917600][ T31] audit: type=1800 audit(2000000751.367:6019): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1123.954321][T21302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.037915][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 1124.043765][ T11] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1124.053828][ T11] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1124.053844][ T11] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1124.053856][ T11] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1124.053866][ T11] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1124.053877][ T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1124.053888][ T11] usb 5-1: config 0 has no interface number 0 [ 1124.053979][ T11] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1124.053994][ T11] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1124.054007][ T11] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1124.054024][ T11] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1124.054038][ T11] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1124.054049][ T11] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1124.073456][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.073473][ T11] usb 5-1: Product: syz [ 1124.073482][ T11] usb 5-1: Manufacturer: syz [ 1124.073542][ T11] usb 5-1: SerialNumber: syz [ 1124.148225][ T11] usb 5-1: config 0 descriptor?? [ 1124.212097][ T11] usb 5-1: selecting invalid altsetting 2 [ 1124.740253][T21301] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1125.409542][T21320] qnx6: unable to read the first superblock [ 1125.409711][T21320] qnx6: unable to read the first superblock [ 1125.409769][T21320] qnx6: unable to read the first superblock [ 1125.543011][T21297] overlay: Unknown parameter 'obj_role' [ 1125.579197][T21297] omfs: Invalid superblock (0) [ 1125.737747][T21297] 9p: Could not find request transport: fðí`^œ»\¨0x0000000000000003 [ 1125.802640][ T5779] usb 5-1: USB disconnect, device number 64 [ 1126.005321][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 1126.127702][ T5779] usb 3-1: USB disconnect, device number 62 [ 1126.149469][ T5779] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1126.165077][ T5779] opticon 3-1:1.0: device disconnected [ 1126.378052][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 1126.378084][ T31] audit: type=1800 audit(2000000753.668:6040): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1126.418911][ T31] audit: type=1400 audit(2000000753.705:6041): avc: denied { write } for pid=21314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.565104][ T31] audit: type=1800 audit(2000000753.846:6042): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1126.586313][ T5698] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1126.586412][ T11] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1126.698850][ T31] audit: type=1800 audit(2000000753.967:6043): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1126.745540][ T11] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1126.755165][ T5698] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1126.767983][ T5698] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.768013][ T5698] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.768033][ T5698] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1126.768056][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.816335][ T5698] usb 9-1: config 0 descriptor?? [ 1126.824181][ T31] audit: type=1800 audit(2000000754.089:6044): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=341027 res=0 errno=0 [ 1126.856420][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1126.872977][ T11] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1126.873001][ T11] usb 2-1: Product: syz [ 1126.873017][ T11] usb 2-1: Manufacturer: syz [ 1126.873029][ T11] usb 2-1: SerialNumber: syz [ 1126.898500][ T31] audit: type=1800 audit(2000000754.154:6045): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=341056 res=0 errno=0 [ 1126.898536][ T31] audit: type=1800 audit(2000000754.154:6046): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=341034 res=0 errno=0 [ 1126.898564][ T31] audit: type=1800 audit(2000000754.154:6047): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=341035 res=0 errno=0 [ 1126.973951][ T11] usb 2-1: config 0 descriptor?? [ 1126.981947][ T31] audit: type=1800 audit(2000000754.239:6048): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=341091 res=0 errno=0 [ 1127.005887][ T31] audit: type=1800 audit(2000000754.257:6049): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=341036 res=0 errno=0 [ 1127.038628][T21334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1127.053653][ T11] hub 2-1:0.0: bad descriptor, ignoring hub [ 1127.060226][ T11] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1127.366681][ T5698] plantronics 0003:047F:FFFF.003C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1127.398929][ T11] usb 2-1: USB disconnect, device number 77 [ 1127.523630][T13249] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1127.697022][T13249] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1127.709945][T13249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.709971][T13249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.709990][T13249] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1127.710013][T13249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.759294][T13249] usb 3-1: config 0 descriptor?? [ 1127.796931][T21366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2922'. [ 1127.819697][T21365] netlink: 'syz.4.2923': attribute type 1 has an invalid length. [ 1127.819720][T21365] netlink: 'syz.4.2923': attribute type 2 has an invalid length. [ 1128.031243][T21371] ip6erspan0: entered allmulticast mode [ 1128.049456][T21335] FAULT_INJECTION: forcing a failure. [ 1128.049456][T21335] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.049489][T21335] CPU: 0 UID: 0 PID: 21335 Comm: syz.8.2915 Tainted: G L syzkaller #0 PREEMPT(full) [ 1128.049508][T21335] Tainted: [L]=SOFTLOCKUP [ 1128.049513][T21335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1128.049521][T21335] Call Trace: [ 1128.049525][T21335] [ 1128.049534][T21335] dump_stack_lvl+0x100/0x190 [ 1128.049554][T21335] should_fail_ex.cold+0x5/0xa [ 1128.049571][T21335] should_failslab+0xc2/0x120 [ 1128.049586][T21335] __kmalloc_cache_noprof+0x91/0x6d0 [ 1128.049603][T21335] ? sctp_association_new+0xbb/0x2990 [ 1128.049622][T21335] sctp_association_new+0xbb/0x2990 [ 1128.049640][T21335] ? sctp_v4_scope+0x183/0x1a0 [ 1128.049653][T21335] sctp_connect_new_asoc+0x1a8/0x770 [ 1128.049671][T21335] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1128.049689][T21335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1128.049707][T21335] __sctp_connect+0x3e7/0xc70 [ 1128.049727][T21335] ? __pfx___sctp_connect+0x10/0x10 [ 1128.049744][T21335] ? selinux_sctp_bind_connect+0xe0/0x230 [ 1128.049764][T21335] __sctp_setsockopt_connectx+0x100/0x190 [ 1128.049783][T21335] sctp_setsockopt+0x46a9/0xb370 [ 1128.049803][T21335] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1128.049819][T21335] ? __fget_files+0x215/0x3d0 [ 1128.049834][T21335] ? selinux_socket_setsockopt+0x6a/0x80 [ 1128.049849][T21335] ? sock_common_setsockopt+0x2e/0xf0 [ 1128.049864][T21335] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1128.049879][T21335] do_sock_setsockopt+0xf3/0x1d0 [ 1128.049894][T21335] __sys_setsockopt+0x195/0x220 [ 1128.049913][T21335] __x64_sys_setsockopt+0xbd/0x160 [ 1128.049929][T21335] ? do_syscall_64+0xae/0x790 [ 1128.049941][T21335] ? lockdep_hardirqs_on+0x7d/0x110 [ 1128.049953][T21335] do_syscall_64+0x123/0x790 [ 1128.049967][T21335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.049978][T21335] RIP: 0033:0x7f211bb9e159 [ 1128.049988][T21335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.049999][T21335] RSP: 002b:00007f211ca00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1128.050010][T21335] RAX: ffffffffffffffda RBX: 00007f211be26090 RCX: 00007f211bb9e159 [ 1128.050018][T21335] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 1128.050024][T21335] RBP: 00007f211bc35024 R08: 000000000000001c R09: 0000000000000000 [ 1128.050031][T21335] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1128.050038][T21335] R13: 00007f211be26128 R14: 00007f211be26090 R15: 00007fff770b1c18 [ 1128.050052][T21335] [ 1128.452432][T21379] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1128.477081][T13249] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1129.688072][T21350] FAULT_INJECTION: forcing a failure. [ 1129.688072][T21350] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.688107][T21350] CPU: 0 UID: 0 PID: 21350 Comm: syz.2.2920 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.688125][T21350] Tainted: [L]=SOFTLOCKUP [ 1129.688130][T21350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1129.688139][T21350] Call Trace: [ 1129.688143][T21350] [ 1129.688149][T21350] dump_stack_lvl+0x100/0x190 [ 1129.688170][T21350] should_fail_ex.cold+0x5/0xa [ 1129.688187][T21350] should_failslab+0xc2/0x120 [ 1129.688203][T21350] __kmalloc_cache_noprof+0x91/0x6d0 [ 1129.688221][T21350] ? sctp_association_new+0xbb/0x2990 [ 1129.688241][T21350] sctp_association_new+0xbb/0x2990 [ 1129.688260][T21350] ? sctp_v4_scope+0x183/0x1a0 [ 1129.688274][T21350] sctp_connect_new_asoc+0x1a8/0x770 [ 1129.688292][T21350] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1129.688310][T21350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1129.688327][T21350] __sctp_connect+0x3e7/0xc70 [ 1129.688349][T21350] ? __pfx___sctp_connect+0x10/0x10 [ 1129.688367][T21350] ? selinux_sctp_bind_connect+0xe0/0x230 [ 1129.688389][T21350] __sctp_setsockopt_connectx+0x100/0x190 [ 1129.688408][T21350] sctp_setsockopt+0x46a9/0xb370 [ 1129.688427][T21350] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1129.688444][T21350] ? __fget_files+0x215/0x3d0 [ 1129.688459][T21350] ? selinux_socket_setsockopt+0x6a/0x80 [ 1129.688474][T21350] ? sock_common_setsockopt+0x2e/0xf0 [ 1129.688488][T21350] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1129.688503][T21350] do_sock_setsockopt+0xf3/0x1d0 [ 1129.688517][T21350] __sys_setsockopt+0x195/0x220 [ 1129.688536][T21350] __x64_sys_setsockopt+0xbd/0x160 [ 1129.688553][T21350] ? do_syscall_64+0xae/0x790 [ 1129.688565][T21350] ? lockdep_hardirqs_on+0x7d/0x110 [ 1129.688577][T21350] do_syscall_64+0x123/0x790 [ 1129.688591][T21350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.688602][T21350] RIP: 0033:0x7f1eeb19e159 [ 1129.688612][T21350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.688624][T21350] RSP: 002b:00007f1eec0df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1129.688636][T21350] RAX: ffffffffffffffda RBX: 00007f1eeb425fa0 RCX: 00007f1eeb19e159 [ 1129.688644][T21350] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 1129.688651][T21350] RBP: 00007f1eeb235024 R08: 000000000000001c R09: 0000000000000000 [ 1129.688657][T21350] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1129.688664][T21350] R13: 00007f1eeb426038 R14: 00007f1eeb425fa0 R15: 00007fff09f79188 [ 1129.688678][T21350] [ 1130.014845][ T5698] usb 3-1: reset high-speed USB device number 63 using dummy_hcd [ 1130.097967][T13249] usb 9-1: USB disconnect, device number 44 [ 1130.619443][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'. [ 1130.818845][T21418] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 1130.818872][T21418] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 1130.876817][ T11] usb 3-1: USB disconnect, device number 63 [ 1130.924890][T21426] PM: Enabling pm_trace changes system date and time during resume. [ 1130.924890][T21426] PM: Correct system time has to be restored manually after resume. [ 1131.017046][T21426] ALSA: mixer_oss: invalid OSS volume 'OGADá¿CaptuOª'.â‹L*8ŒP88�re' [ 1131.017073][T21426] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1131.105722][T21424] syzkaller0: entered promiscuous mode [ 1131.105746][T21424] syzkaller0: entered allmulticast mode [ 1131.319211][ T7767] IPVS: starting estimator thread 0... [ 1131.413282][T21436] IPVS: using max 83 ests per chain, 199200 per kthread [ 1131.750994][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 1131.751020][ T31] audit: type=1800 audit(2000000758.701:6095): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1131.819037][ T31] audit: type=1800 audit(2000000758.757:6096): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1131.879309][ T31] audit: type=1800 audit(2000000758.813:6097): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1132.060180][ T31] audit: type=1800 audit(2000000758.991:6098): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1132.103236][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 1132.103267][T21441] netlink: 'syz.1.2937': attribute type 5 has an invalid length. [ 1132.103283][T21441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2937'. [ 1132.159182][ T31] audit: type=1800 audit(2000000759.075:6099): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1132.193618][ T11] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1132.297888][ T51] Bluetooth: hci1: unexpected event for opcode 0x007b [ 1132.330632][ T31] audit: type=1800 audit(2000000759.234:6100): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1132.406699][ T11] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1132.419627][ T11] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1132.419664][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1132.419688][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 1132.419712][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.458415][ T11] usb 3-1: config 0 descriptor?? [ 1132.468373][T21443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1132.491197][ T31] audit: type=1800 audit(2000000759.384:6101): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=341698 res=0 errno=0 [ 1132.491236][ T31] audit: type=1800 audit(2000000759.384:6102): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=341727 res=0 errno=0 [ 1132.547599][ T31] audit: type=1800 audit(2000000759.449:6103): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=341705 res=0 errno=0 [ 1132.547638][ T31] audit: type=1800 audit(2000000759.449:6104): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=341706 res=0 errno=0 [ 1132.777404][T21457] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2944'. [ 1133.062513][ T11] hid-thrustmaster 0003:044F:B65D.003E: ignoring exceeding usage max [ 1133.087480][ T11] hid-thrustmaster 0003:044F:B65D.003E: unknown main item tag 0x4 [ 1133.107145][ T11] hid-thrustmaster 0003:044F:B65D.003E: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 1133.464965][ T11] hid-thrustmaster 0003:044F:B65D.003E: setup data couldn't be sent [ 1133.465230][ C0] hid-thrustmaster 0003:044F:B65D.003E: URB to get model id failed with error -71 [ 1133.889887][ T11] usb 3-1: USB disconnect, device number 64 [ 1134.119027][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2946'. [ 1134.286215][T21472] fido_id[21472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1134.422916][T21450] loop7: detected capacity change from 16384 to 0 [ 1135.827369][T21492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1135.882063][ T51] Bluetooth: hci2: unexpected event for opcode 0x007b [ 1136.365992][T21492] qnx6: unable to read the first superblock [ 1136.366102][T21492] qnx6: unable to read the first superblock [ 1136.366116][T21492] qnx6: unable to read the first superblock [ 1136.426810][ T5779] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1136.449937][ T5698] hid-generic 0005:15C2:0003.003F: item fetching failed at offset 0/1 [ 1136.481406][ T5698] hid-generic 0005:15C2:0003.003F: probe with driver hid-generic failed with error -22 [ 1136.565508][ T5779] usb 2-1: device descriptor read/64, error -71 [ 1136.792866][T21509] loop2: detected capacity change from 0 to 7 [ 1136.800063][T21509] Dev loop2: unable to read RDB block 7 [ 1136.800099][T21509] loop2: unable to read partition table [ 1136.800207][T21509] loop2: partition table beyond EOD, truncated [ 1136.800222][T21509] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1136.822331][ T5779] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 1136.971830][ T5779] usb 2-1: device descriptor read/64, error -71 [ 1137.089493][ T5779] usb usb2-port1: attempt power cycle [ 1137.186062][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 1137.305941][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 1137.305964][ T31] audit: type=1800 audit(2000000763.893:6130): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1137.413877][ T31] audit: type=1800 audit(2000000763.996:6131): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1137.455011][ T5779] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 1137.476606][ T5779] usb 2-1: device descriptor read/8, error -71 [ 1137.499853][T21523] overlayfs: missing 'lowerdir' [ 1137.530421][T21526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2964'. [ 1137.579010][ T31] audit: type=1800 audit(2000000764.146:6132): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1137.694138][ T31] audit: type=1800 audit(2000000764.258:6133): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1137.732328][ T5779] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 1137.784210][ T5779] usb 2-1: device descriptor read/8, error -71 [ 1137.863675][ T31] audit: type=1800 audit(2000000764.417:6134): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1137.901845][ T5779] usb usb2-port1: unable to enumerate USB device [ 1137.942642][ T31] audit: type=1800 audit(2000000764.492:6135): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1138.107367][ T31] audit: type=1800 audit(2000000764.651:6136): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1138.202718][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2969'. [ 1138.247064][ T31] audit: type=1800 audit(2000000764.782:6137): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=341932 res=0 errno=0 [ 1138.302625][ T5779] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1138.356695][ T31] audit: type=1800 audit(2000000764.875:6138): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1138.546381][ T5779] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1138.557295][ T5779] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.557326][ T5779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1138.557344][ T5779] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1138.557359][ T5779] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.557381][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.589943][T21543] qnx6: unable to read the first superblock [ 1138.590013][T21543] qnx6: unable to read the first superblock [ 1138.590018][T21543] qnx6: unable to read the first superblock [ 1138.635245][ T31] audit: type=1800 audit(2000000765.137:6139): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=341951 res=0 errno=0 [ 1138.922334][T21545] cramfs: checking physical address 0x0000000143aa0000 for linear cramfs image [ 1138.922549][T21545] cramfs: wrong magic [ 1139.127504][T21545] cramfs: wrong magic [ 1139.149057][T21549] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 1139.149104][T21549] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2972'. [ 1139.549541][T21557] netlink: 'syz.1.2976': attribute type 29 has an invalid length. [ 1139.549564][T21557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1139.669096][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2975'. [ 1139.794071][T13249] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1139.826033][ T5698] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1139.856110][ T5779] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 1139.970544][T13249] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1139.983047][T13249] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.983080][T13249] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.983099][T13249] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1139.983122][T13249] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.995894][T13249] usb 9-1: config 0 descriptor?? [ 1140.019653][ T5698] usb 2-1: Using ep0 maxpacket: 16 [ 1140.044487][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1140.044522][ T5698] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=f8.1d [ 1140.044563][ T5698] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 1140.071083][ T5698] usb 2-1: config index 0 descriptor too short (expected 25305, got 18) [ 1140.071099][ T5698] usb 2-1: config 27 has too many interfaces: 156, using maximum allowed: 32 [ 1140.071112][ T5698] usb 2-1: config 27 has an invalid descriptor of length 113, skipping remainder of the config [ 1140.071123][ T5698] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 156 [ 1140.117374][ T5698] usb 2-1: config index 1 descriptor too short (expected 25305, got 18) [ 1140.117398][ T5698] usb 2-1: config 27 has too many interfaces: 156, using maximum allowed: 32 [ 1140.117417][ T5698] usb 2-1: config 27 has an invalid descriptor of length 113, skipping remainder of the config [ 1140.117450][ T5698] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 156 [ 1140.172143][ T5698] usb 2-1: config index 2 descriptor too short (expected 25305, got 18) [ 1140.172174][ T5698] usb 2-1: config 27 has too many interfaces: 156, using maximum allowed: 32 [ 1140.172194][ T5698] usb 2-1: config 27 has an invalid descriptor of length 113, skipping remainder of the config [ 1140.172206][ T5698] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 156 [ 1140.219226][ T5698] usb 2-1: config index 3 descriptor too short (expected 25305, got 18) [ 1140.219252][ T5698] usb 2-1: config 27 has too many interfaces: 156, using maximum allowed: 32 [ 1140.219271][ T5698] usb 2-1: config 27 has an invalid descriptor of length 113, skipping remainder of the config [ 1140.219284][ T5698] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 156 [ 1140.262105][ T5698] usb 2-1: config index 4 descriptor too short (expected 25305, got 18) [ 1140.262124][ T5698] usb 2-1: config 27 has too many interfaces: 156, using maximum allowed: 32 [ 1140.262149][ T5698] usb 2-1: config 27 has an invalid descriptor of length 113, skipping remainder of the config [ 1140.262160][ T5698] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 156 [ 1140.305636][ T5698] usb 2-1: config index 5 descriptor too short (expected 25305, got 18) [ 1140.305661][ T5698] usb 2-1: config 27 has too many interfaces: 156, using maximum allowed: 32 [ 1140.305680][ T5698] usb 2-1: config 27 has an invalid descriptor of length 113, skipping remainder of the config [ 1140.305693][ T5698] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 156 [ 1140.352390][ T5698] usb 2-1: config index 6 descriptor too short (expected 25305, got 18) [ 1140.352409][ T5698] usb 2-1: config 27 has too many interfaces: 156, using maximum allowed: 32 [ 1140.352420][ T5698] usb 2-1: config 27 has an invalid descriptor of length 113, skipping remainder of the config [ 1140.352430][ T5698] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 156 [ 1140.399434][ T5698] usb 2-1: config index 7 descriptor too short (expected 25305, got 18) [ 1140.399460][ T5698] usb 2-1: config 27 has too many interfaces: 156, using maximum allowed: 32 [ 1140.399478][ T5698] usb 2-1: config 27 has an invalid descriptor of length 113, skipping remainder of the config [ 1140.399491][ T5698] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 156 [ 1140.461539][ T5698] usb 2-1: New USB device strings: Mfr=252, Product=255, SerialNumber=255 [ 1140.461580][ T5698] usb 2-1: Product: syz [ 1140.461597][ T5698] usb 2-1: Manufacturer: syz [ 1140.461607][ T5698] usb 2-1: SerialNumber: syz [ 1140.616177][ T5779] Console: switching to colour frame buffer device 128x48 [ 1140.653996][ T5779] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 1140.679106][ T5779] usb 3-1: USB disconnect, device number 65 [ 1140.701480][T21572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21572 comm=syz.3.2979 [ 1140.809403][ T5779] Console: switching to colour VGA+ 128x48 [ 1141.987063][T13249] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1142.057969][ T5698] usb 2-1: USB disconnect, device number 82 [ 1142.236561][T21583] jffs2: notice: (21583) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (2 unchecked, 1 orphan) and 6 of xref (0 dead, 3 orphan) found. [ 1142.361199][T21554] FAULT_INJECTION: forcing a failure. [ 1142.361199][T21554] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.361233][T21554] CPU: 0 UID: 0 PID: 21554 Comm: syz.8.2973 Tainted: G L syzkaller #0 PREEMPT(full) [ 1142.361252][T21554] Tainted: [L]=SOFTLOCKUP [ 1142.361257][T21554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1142.361265][T21554] Call Trace: [ 1142.361270][T21554] [ 1142.361275][T21554] dump_stack_lvl+0x100/0x190 [ 1142.361297][T21554] should_fail_ex.cold+0x5/0xa [ 1142.361313][T21554] should_failslab+0xc2/0x120 [ 1142.361329][T21554] __kmalloc_cache_noprof+0x91/0x6d0 [ 1142.361348][T21554] ? sctp_association_new+0xbb/0x2990 [ 1142.361368][T21554] sctp_association_new+0xbb/0x2990 [ 1142.361385][T21554] ? sctp_v4_scope+0x183/0x1a0 [ 1142.361399][T21554] sctp_connect_new_asoc+0x1a8/0x770 [ 1142.361417][T21554] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1142.361435][T21554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1142.361452][T21554] __sctp_connect+0x3e7/0xc70 [ 1142.361474][T21554] ? __pfx___sctp_connect+0x10/0x10 [ 1142.361491][T21554] ? selinux_sctp_bind_connect+0xe0/0x230 [ 1142.361512][T21554] __sctp_setsockopt_connectx+0x100/0x190 [ 1142.361531][T21554] sctp_setsockopt+0x46a9/0xb370 [ 1142.361551][T21554] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1142.361567][T21554] ? __fget_files+0x215/0x3d0 [ 1142.361582][T21554] ? selinux_socket_setsockopt+0x6a/0x80 [ 1142.361597][T21554] ? sock_common_setsockopt+0x2e/0xf0 [ 1142.361610][T21554] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1142.361625][T21554] do_sock_setsockopt+0xf3/0x1d0 [ 1142.361639][T21554] __sys_setsockopt+0x195/0x220 [ 1142.361658][T21554] __x64_sys_setsockopt+0xbd/0x160 [ 1142.361674][T21554] ? do_syscall_64+0xae/0x790 [ 1142.361687][T21554] ? lockdep_hardirqs_on+0x7d/0x110 [ 1142.361699][T21554] do_syscall_64+0x123/0x790 [ 1142.361713][T21554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.361725][T21554] RIP: 0033:0x7f211bb9e159 [ 1142.361736][T21554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.361746][T21554] RSP: 002b:00007f211ca21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1142.361758][T21554] RAX: ffffffffffffffda RBX: 00007f211be25fa0 RCX: 00007f211bb9e159 [ 1142.361765][T21554] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 1142.361772][T21554] RBP: 00007f211bc35024 R08: 000000000000001c R09: 0000000000000000 [ 1142.361778][T21554] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1142.361785][T21554] R13: 00007f211be26038 R14: 00007f211be25fa0 R15: 00007fff770b1c18 [ 1142.361799][T21554] [ 1142.774020][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 1142.774053][ T31] audit: type=1800 audit(2000000769.010:6180): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1142.836691][ T31] audit: type=1800 audit(2000000769.067:6181): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1142.969518][ T5698] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1143.057949][ T31] audit: type=1800 audit(2000000769.282:6182): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1143.204319][ T5779] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1143.236469][ T5698] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1143.247008][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.247034][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.247059][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.013191][ T11] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1144.053546][ T5698] usb 3-1: config 0 descriptor?? [ 1144.059910][ T31] audit: type=1800 audit(2000000770.217:6183): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=342537 res=0 errno=0 [ 1144.090884][ T31] audit: type=1800 audit(2000000770.236:6184): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=342566 res=0 errno=0 [ 1144.112767][ T31] audit: type=1800 audit(2000000770.236:6185): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=342544 res=0 errno=0 [ 1144.113750][ T5779] usb 2-1: Using ep0 maxpacket: 16 [ 1144.221408][ T31] audit: type=1800 audit(2000000770.367:6186): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=342545 res=0 errno=0 [ 1144.250217][ T5779] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1144.267917][ T5779] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.267965][ T5779] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1144.267989][ T5779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1144.268009][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.294385][ T31] audit: type=1800 audit(2000000770.423:6187): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=342546 res=0 errno=0 [ 1144.343871][ T5779] usb 2-1: config 0 descriptor?? [ 1144.353313][ T11] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1144.368787][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.368815][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.368855][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1144.368879][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.418286][ T31] audit: type=1800 audit(2000000770.545:6188): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1144.440188][ T11] usb 5-1: config 0 descriptor?? [ 1144.459560][ T31] audit: type=1800 audit(2000000770.591:6189): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=342613 res=0 errno=0 [ 1144.509906][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'. [ 1145.017184][T13249] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1145.276716][ T5779] elan 0003:04F3:074D.0041: failed to start in urb: -90 [ 1145.744015][T13249] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1145.744056][T13249] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=1b.25 [ 1145.763297][T13249] usb 4-1: config 7 has an invalid interface number: 106 but max is 0 [ 1145.763324][T13249] usb 4-1: config 7 has no interface number 0 [ 1145.763346][T13249] usb 4-1: config 7 interface 106 has no altsetting 0 [ 1145.773488][ T5779] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0041/input/input89 [ 1145.811476][T13249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.811520][T13249] usb 4-1: Product: syz [ 1145.811537][T13249] usb 4-1: Manufacturer: syz [ 1145.811548][T13249] usb 4-1: SerialNumber: syz [ 1145.855456][ T2314] usb 9-1: USB disconnect, device number 45 [ 1145.895838][ T11] plantronics 0003:047F:FFFF.0042: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1146.060885][ T5779] elan 0003:04F3:074D.0041: input,hidraw2: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input0 [ 1146.168831][T21599] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1146.206399][T13249] ums-freecom 4-1:7.106: USB Mass Storage device detected [ 1146.330184][T13249] usb 4-1: USB disconnect, device number 52 [ 1146.331844][ T5698] usbhid 3-1:0.0: can't add hid device: -71 [ 1146.331908][ T5698] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1146.354822][T21593] FAULT_INJECTION: forcing a failure. [ 1146.354822][T21593] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.354855][T21593] CPU: 0 UID: 0 PID: 21593 Comm: syz.4.2985 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.354873][T21593] Tainted: [L]=SOFTLOCKUP [ 1146.354878][T21593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1146.354885][T21593] Call Trace: [ 1146.354890][T21593] [ 1146.354895][T21593] dump_stack_lvl+0x100/0x190 [ 1146.354915][T21593] should_fail_ex.cold+0x5/0xa [ 1146.354931][T21593] should_failslab+0xc2/0x120 [ 1146.354947][T21593] __kmalloc_cache_noprof+0x91/0x6d0 [ 1146.354966][T21593] ? sctp_association_new+0xbb/0x2990 [ 1146.354986][T21593] sctp_association_new+0xbb/0x2990 [ 1146.355004][T21593] ? sctp_v4_scope+0x183/0x1a0 [ 1146.355018][T21593] sctp_connect_new_asoc+0x1a8/0x770 [ 1146.355046][T21593] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1146.355066][T21593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1146.355085][T21593] __sctp_connect+0x3e7/0xc70 [ 1146.355106][T21593] ? __pfx___sctp_connect+0x10/0x10 [ 1146.355125][T21593] ? selinux_sctp_bind_connect+0xe0/0x230 [ 1146.355148][T21593] __sctp_setsockopt_connectx+0x100/0x190 [ 1146.355168][T21593] sctp_setsockopt+0x46a9/0xb370 [ 1146.355189][T21593] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1146.355205][T21593] ? __fget_files+0x215/0x3d0 [ 1146.355220][T21593] ? selinux_socket_setsockopt+0x6a/0x80 [ 1146.355235][T21593] ? sock_common_setsockopt+0x2e/0xf0 [ 1146.355248][T21593] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1146.355262][T21593] do_sock_setsockopt+0xf3/0x1d0 [ 1146.355277][T21593] __sys_setsockopt+0x195/0x220 [ 1146.355296][T21593] __x64_sys_setsockopt+0xbd/0x160 [ 1146.355312][T21593] ? do_syscall_64+0xae/0x790 [ 1146.355324][T21593] ? lockdep_hardirqs_on+0x7d/0x110 [ 1146.355336][T21593] do_syscall_64+0x123/0x790 [ 1146.355349][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.355361][T21593] RIP: 0033:0x7f37c039e159 [ 1146.355371][T21593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.355383][T21593] RSP: 002b:00007f37c1275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1146.355395][T21593] RAX: ffffffffffffffda RBX: 00007f37c0626090 RCX: 00007f37c039e159 [ 1146.355402][T21593] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 1146.355409][T21593] RBP: 00007f37c0435024 R08: 000000000000001c R09: 0000000000000000 [ 1146.355416][T21593] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1146.355426][T21593] R13: 00007f37c0626128 R14: 00007f37c0626090 R15: 00007fffea3f7468 [ 1146.355441][T21593] [ 1146.671591][ T5698] usb 3-1: USB disconnect, device number 66 [ 1146.932271][T21612] xt_TCPMSS: Only works on TCP SYN packets [ 1147.007325][T21615] x_tables: duplicate underflow at hook 2 [ 1147.094227][ T5698] usb 2-1: USB disconnect, device number 83 [ 1147.508250][T13249] usb 5-1: USB disconnect, device number 65 [ 1147.555514][ T5698] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1147.834466][ T5698] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1148.019982][ T5698] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1148.020009][ T5698] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1148.307513][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.307541][ T5698] usb 2-1: Product: syz [ 1148.307558][ T5698] usb 2-1: Manufacturer: syz [ 1148.307569][ T5698] usb 2-1: SerialNumber: syz [ 1148.600612][ T5698] usb 2-1: config 0 descriptor?? [ 1148.608804][T21619] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1148.608873][T21619] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1148.625150][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 1148.625161][ T31] audit: type=1800 audit(2000000774.492:6243): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1148.673335][ T31] audit: type=1800 audit(2000000774.530:6244): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=343151 res=0 errno=0 [ 1148.707264][ T31] audit: type=1800 audit(2000000774.558:6245): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=343183 res=0 errno=0 [ 1148.707303][ T31] audit: type=1800 audit(2000000774.558:6246): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=343158 res=0 errno=0 [ 1148.707344][ T31] audit: type=1800 audit(2000000774.558:6247): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=343159 res=0 errno=0 [ 1148.795181][ T31] audit: type=1800 audit(2000000774.652:6248): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1148.869703][T21619] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1148.869796][T21619] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1148.916246][ T31] audit: type=1800 audit(2000000774.754:6249): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1149.000075][T21634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2996'. [ 1149.010174][T21634] tipc: Invalid UDP bearer configuration [ 1149.010201][T21634] tipc: Enabling of bearer rejected, failed to enable media [ 1149.130577][ T31] audit: type=1800 audit(2000000774.960:6250): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1149.332413][T21619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.342306][T21619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.364492][ T5698] Error reading MAC address [ 1149.372980][ T31] audit: type=1800 audit(2000000775.185:6251): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=343180 res=0 errno=0 [ 1149.396554][ T31] audit: type=1800 audit(2000000775.213:6252): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=343181 res=0 errno=0 [ 1150.283335][T21644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.283543][T21644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.433664][T21646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3002'. [ 1150.780402][T21658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1151.408018][T21668] qnx6: unable to read the first superblock [ 1151.408110][T21668] qnx6: unable to read the first superblock [ 1151.408130][T21668] qnx6: unable to read the first superblock [ 1151.487960][ T5698] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1151.495727][ T5779] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1151.691714][ T5779] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1151.702137][ T5698] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1151.711417][ T5779] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.711436][ T5779] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.711448][ T5779] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1151.711469][ T5779] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.735468][ T5698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.735495][ T5698] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1151.735508][ T5698] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1151.735521][ T5698] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1151.735541][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.750414][ T5779] usb 9-1: config 0 descriptor?? [ 1151.887316][ T11] usb 2-1: USB disconnect, device number 84 [ 1152.191816][T21674] input: syz1 as /devices/virtual/input/input90 [ 1152.567191][T21680] qnx6: unable to read the first superblock [ 1152.567358][T21680] qnx6: unable to read the first superblock [ 1152.567383][T21680] qnx6: unable to read the first superblock [ 1152.661589][ T5779] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1152.974549][ T5779] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1153.190350][T21686] netlink: 'syz.4.3012': attribute type 19 has an invalid length. [ 1153.207733][T21687] input: syz1 as /devices/virtual/input/input91 [ 1153.220989][ T5779] usb 4-1: Using ep0 maxpacket: 8 [ 1153.230473][ T5779] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1153.242806][ T5779] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1153.242831][ T5779] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1153.242848][ T5779] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1153.242864][ T5779] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1153.242881][ T5779] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1153.242911][ T5779] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.242934][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.584380][ T5698] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 1153.597422][ T5779] usb 4-1: GET_CAPABILITIES returned 0 [ 1153.597456][ T5779] usbtmc 4-1:16.0: can't read capabilities [ 1153.658205][ T7970] IPVS: starting estimator thread 0... [ 1153.755670][T21692] IPVS: using max 82 ests per chain, 196800 per kthread [ 1153.854958][T21693] gretap0: refused to change device tx_queue_len [ 1153.855085][T21693] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1153.980425][ T5779] usb 4-1: USB disconnect, device number 53 [ 1154.039411][ T5698] Console: switching to colour frame buffer device 128x48 [ 1154.068625][ T5698] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 1154.123788][ T5698] usb 3-1: USB disconnect, device number 67 [ 1154.133511][ T31] kauditd_printk_skb: 68 callbacks suppressed [ 1154.133535][ T31] audit: type=1800 audit(2000000779.638:6321): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1154.226964][ T5698] Console: switching to colour VGA+ 128x48 [ 1154.275969][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1154.423338][ T31] audit: type=1800 audit(2000000779.909:6322): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1154.520865][ T6942] usb 9-1: USB disconnect, device number 46 [ 1154.573793][ T31] audit: type=1800 audit(2000000780.049:6323): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1154.661642][ T31] audit: type=1800 audit(2000000780.124:6324): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1154.720475][ T31] audit: type=1800 audit(2000000780.190:6325): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1154.766256][T21704] 9pnet: Found fid 0 not clunked [ 1154.839821][T21707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.880744][T21707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.964682][T21704] syzkaller0: entered promiscuous mode [ 1154.964708][T21704] syzkaller0: entered allmulticast mode [ 1155.048248][ T6942] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1155.132768][ T5779] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1155.210998][ T6942] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1155.227003][ T6942] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 1155.246168][ T6942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.246193][ T6942] usb 2-1: Product: syz [ 1155.246209][ T6942] usb 2-1: Manufacturer: syz [ 1155.246220][ T6942] usb 2-1: SerialNumber: syz [ 1155.272403][ T5779] usb 4-1: device descriptor read/64, error -71 [ 1155.281465][ T31] audit: type=1800 audit(2000000780.704:6326): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344259 res=0 errno=0 [ 1155.313751][ T31] audit: type=1800 audit(2000000780.742:6327): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=344291 res=0 errno=0 [ 1155.313818][ T31] audit: type=1800 audit(2000000780.742:6328): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=344266 res=0 errno=0 [ 1155.367410][ T31] audit: type=1800 audit(2000000780.789:6329): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=344267 res=0 errno=0 [ 1155.528323][ T5779] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1155.542493][ T31] audit: type=1800 audit(2000000780.957:6330): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1155.667283][ T5779] usb 4-1: device descriptor read/64, error -71 [ 1155.786490][ T5779] usb usb4-port1: attempt power cycle [ 1156.047649][T21721] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3017'. [ 1156.149195][ T5779] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1156.170088][ T5779] usb 4-1: device descriptor read/8, error -71 [ 1156.325447][T21723] FAULT_INJECTION: forcing a failure. [ 1156.325447][T21723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.339409][T21723] CPU: 0 UID: 0 PID: 21723 Comm: syz.2.3021 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.339430][T21723] Tainted: [L]=SOFTLOCKUP [ 1156.339435][T21723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1156.339442][T21723] Call Trace: [ 1156.339447][T21723] [ 1156.339452][T21723] dump_stack_lvl+0x100/0x190 [ 1156.339473][T21723] should_fail_ex.cold+0x5/0xa [ 1156.339489][T21723] _copy_to_user+0x32/0xd0 [ 1156.339508][T21723] simple_read_from_buffer+0xcb/0x170 [ 1156.339525][T21723] proc_fail_nth_read+0x1af/0x230 [ 1156.339539][T21723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1156.339553][T21723] ? rw_verify_area+0xce/0x6d0 [ 1156.339569][T21723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1156.339582][T21723] vfs_read+0x1e4/0xb40 [ 1156.339599][T21723] ? lock_acquire+0x1d1/0x380 [ 1156.339610][T21723] ? __fget_files+0x34/0x3d0 [ 1156.339623][T21723] ? __pfx_vfs_read+0x10/0x10 [ 1156.339639][T21723] ? find_held_lock+0x2b/0x80 [ 1156.339655][T21723] ? __fget_files+0x215/0x3d0 [ 1156.339669][T21723] ? __fget_files+0x21f/0x3d0 [ 1156.339685][T21723] ksys_read+0x12a/0x250 [ 1156.339696][T21723] ? __pfx_ksys_read+0x10/0x10 [ 1156.339705][T21723] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1156.339720][T21723] ? syscall_user_dispatch+0x76/0x130 [ 1156.339737][T21723] do_syscall_64+0x123/0x790 [ 1156.339752][T21723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.339764][T21723] RIP: 0033:0x7f1eeb15e98e [ 1156.339775][T21723] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1156.339786][T21723] RSP: 002b:00007f1eec0defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1156.339798][T21723] RAX: ffffffffffffffda RBX: 00007f1eec0df6c0 RCX: 00007f1eeb15e98e [ 1156.339805][T21723] RDX: 000000000000000f RSI: 00007f1eec0df0a0 RDI: 0000000000000004 [ 1156.339811][T21723] RBP: 00007f1eec0df090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.339818][T21723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.339825][T21723] R13: 00007f1eeb426038 R14: 00007f1eeb425fa0 R15: 00007fff09f79188 [ 1156.339839][T21723] [ 1156.430933][ T5779] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1156.456376][ T5779] usb 4-1: device descriptor read/8, error -71 [ 1156.569899][ T5779] usb usb4-port1: unable to enumerate USB device [ 1157.035479][ T5779] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1157.195837][ T5779] usb 3-1: Using ep0 maxpacket: 32 [ 1157.201455][ T5779] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1157.220282][ T5779] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1157.220310][ T5779] usb 3-1: config 0 has no interface number 0 [ 1157.220338][ T5779] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1157.220355][ T5779] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1157.255882][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.255904][ T5779] usb 3-1: Product: syz [ 1157.255921][ T5779] usb 3-1: Manufacturer: syz [ 1157.255949][ T5779] usb 3-1: SerialNumber: syz [ 1157.279815][ T5779] usb 3-1: config 0 descriptor?? [ 1159.645937][ T5698] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1159.815501][ T5698] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1159.825613][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1159.835473][ T5698] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1159.845214][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.865574][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 1159.865600][ T31] audit: type=1800 audit(2000000784.998:6345): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344435 res=0 errno=0 [ 1159.904368][ T31] audit: type=1800 audit(2000000785.026:6346): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=344464 res=0 errno=0 [ 1159.926883][ T31] audit: type=1800 audit(2000000785.026:6347): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=344442 res=0 errno=0 [ 1159.948634][ T31] audit: type=1800 audit(2000000785.026:6348): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=344443 res=0 errno=0 [ 1159.977883][ T31] audit: type=1800 audit(2000000785.036:6349): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=344444 res=0 errno=0 [ 1160.011932][ T31] audit: type=1800 audit(2000000785.139:6350): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344484 res=0 errno=0 [ 1160.068990][ T31] audit: type=1800 audit(2000000785.176:6351): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344503 res=0 errno=0 [ 1160.178388][ T31] audit: type=1800 audit(2000000785.279:6352): pid=21732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3024" name="new_device" dev="sysfs" ino=24518 res=0 errno=0 [ 1160.179621][ T31] audit: type=1800 audit(2000000785.298:6353): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344567 res=0 errno=0 [ 1160.753022][ T6942] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1160.828151][ T6942] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1160.872416][ T6942] usb 2-1: selecting invalid altsetting 1 [ 1160.872441][ T6942] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 1160.890363][ T6942] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1160.906790][ T31] audit: type=1800 audit(2000000785.981:6354): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=344288 res=0 errno=0 [ 1161.018464][T20000] udevd[20000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1162.713514][ T5779] appletouch 3-1:0.85: Failed to read mode from device. [ 1162.713615][ T5779] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1167.256546][T21725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.263984][T21725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.347245][ T59] netdevsim netdevsim12 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.347278][ T59] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.387662][ T5779] usb 4-1: USB disconnect, device number 58 [ 1167.456875][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 1167.456901][ T31] audit: type=1800 audit(2000000792.099:6368): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1167.517185][ T31] audit: type=1800 audit(2000000792.155:6369): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1167.566885][ T6942] usb 3-1: USB disconnect, device number 68 [ 1167.584000][ T31] audit: type=1800 audit(2000000792.221:6370): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1167.679150][ T31] audit: type=1800 audit(2000000792.305:6371): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1167.751869][ T6942] usb 2-1: USB disconnect, device number 85 [ 1167.849336][ T31] audit: type=1800 audit(2000000792.464:6372): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 1167.898896][ T31] audit: type=1800 audit(2000000792.511:6373): pid=21739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3027" name="run" dev="sysfs" ino=1838 res=0 errno=0 [ 1167.982078][ T5779] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1168.050925][T21754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21754 comm=syz.1.3029 [ 1168.184930][ T5779] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1168.261834][ T5779] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.261862][ T5779] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.261877][ T5779] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1168.261900][ T5779] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.334671][ T6942] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1168.398865][ T5779] usb 9-1: config 0 descriptor?? [ 1168.900741][ T6942] usb 4-1: device descriptor read/64, error -71 [ 1169.157284][ T6942] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1169.212938][ T31] audit: type=1800 audit(2000000793.745:6374): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1169.237504][ T31] audit: type=1800 audit(2000000793.773:6375): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345011 res=0 errno=0 [ 1169.285278][ T31] audit: type=1800 audit(2000000793.811:6376): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=345040 res=0 errno=0 [ 1169.285569][ T31] audit: type=1800 audit(2000000793.811:6377): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=345018 res=0 errno=0 [ 1169.339009][ T6942] usb 4-1: device descriptor read/64, error -71 [ 1169.380790][ T5779] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1169.456680][ T6942] usb usb4-port1: attempt power cycle [ 1169.532070][ T5698] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1169.706217][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1169.706253][ T5698] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1169.724165][ T5698] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1169.724189][ T5698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1169.724207][ T5698] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1169.724221][ T5698] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1169.769527][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.769552][ T5698] usb 5-1: Product: syz [ 1169.769563][ T5698] usb 5-1: Manufacturer: syz [ 1169.769573][ T5698] usb 5-1: SerialNumber: syz [ 1169.831035][ T6942] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1169.850658][ T5779] usb 9-1: USB disconnect, device number 47 [ 1169.858581][ T6942] usb 4-1: device descriptor read/8, error -71 [ 1170.013020][ T5698] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1170.067479][ T5698] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1170.082074][ T5698] usb 5-1: USB disconnect, device number 66 [ 1170.107089][T21757] udevd[21757]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1170.123452][ T6942] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1170.142066][ T6942] usb 4-1: device descriptor read/8, error -71 [ 1170.153086][ T2314] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1170.261978][ T6942] usb usb4-port1: unable to enumerate USB device [ 1170.324353][ T2314] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1170.334542][ T2314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.334568][ T2314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.334587][ T2314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1170.334610][ T2314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.347117][ T2314] usb 3-1: config 0 descriptor?? [ 1170.720155][T21775] jffs2: notice: (21775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (2 unchecked, 1 orphan) and 6 of xref (0 dead, 3 orphan) found. [ 1170.857112][ T5698] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1170.876516][ T2314] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1170.923147][T21777] FAULT_INJECTION: forcing a failure. [ 1170.923147][T21777] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.923179][T21777] CPU: 0 UID: 0 PID: 21777 Comm: syz.4.3034 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.923202][T21777] Tainted: [L]=SOFTLOCKUP [ 1170.923206][T21777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1170.923213][T21777] Call Trace: [ 1170.923218][T21777] [ 1170.923223][T21777] dump_stack_lvl+0x100/0x190 [ 1170.923244][T21777] should_fail_ex.cold+0x5/0xa [ 1170.923260][T21777] should_failslab+0xc2/0x120 [ 1170.923275][T21777] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1170.923289][T21777] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 1170.923310][T21777] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 1170.923330][T21777] idr_get_free+0x52e/0xa00 [ 1170.923348][T21777] idr_alloc_u32+0x1ac/0x320 [ 1170.923363][T21777] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1170.923377][T21777] ? lock_acquire+0x1d1/0x380 [ 1170.923389][T21777] ? __radix_tree_preload+0x7c/0x820 [ 1170.923407][T21777] idr_alloc_cyclic+0x10b/0x230 [ 1170.923421][T21777] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1170.923432][T21777] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1170.923446][T21777] ? kfree+0x22b/0x6d0 [ 1170.923463][T21777] btf_new_fd+0x3aa/0x5bc0 [ 1170.923479][T21777] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1170.923498][T21777] ? __pfx_btf_new_fd+0x10/0x10 [ 1170.923514][T21777] ? rcu_is_watching+0x13/0xc0 [ 1170.923531][T21777] ? security_capable+0x80/0x260 [ 1170.923547][T21777] ? ns_capable+0xd2/0xf0 [ 1170.923558][T21777] __sys_bpf+0x13ef/0x4a30 [ 1170.923572][T21777] ? __pfx___sys_bpf+0x10/0x10 [ 1170.923581][T21777] ? find_held_lock+0x2b/0x80 [ 1170.923596][T21777] ? futex_wake+0x4ea/0x5e0 [ 1170.923632][T21777] ? __x64_sys_futex+0x34f/0x4d0 [ 1170.923645][T21777] ? __x64_sys_futex+0x358/0x4d0 [ 1170.923661][T21777] ? xfd_validate_state+0x129/0x190 [ 1170.923674][T21777] ? __x64_sys_bpf+0xce/0x140 [ 1170.923684][T21777] __x64_sys_bpf+0xce/0x140 [ 1170.923694][T21777] ? do_syscall_64+0xae/0x790 [ 1170.923707][T21777] do_syscall_64+0x123/0x790 [ 1170.923720][T21777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.923732][T21777] RIP: 0033:0x7f37c039e159 [ 1170.923742][T21777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.923752][T21777] RSP: 002b:00007f37c1275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1170.923764][T21777] RAX: ffffffffffffffda RBX: 00007f37c0626090 RCX: 00007f37c039e159 [ 1170.923771][T21777] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000012 [ 1170.923778][T21777] RBP: 00007f37c0435024 R08: 0000000000000000 R09: 0000000000000000 [ 1170.923784][T21777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.923791][T21777] R13: 00007f37c0626128 R14: 00007f37c0626090 R15: 00007fffea3f7468 [ 1170.923805][T21777] [ 1171.038658][ T5698] usb 9-1: Using ep0 maxpacket: 32 [ 1171.080052][ T5698] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1171.091310][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.172992][ T5698] usb 9-1: config 0 descriptor?? [ 1171.277082][ T5698] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1171.724785][T21780] qnx6: unable to read the first superblock [ 1171.724887][T21780] qnx6: unable to read the first superblock [ 1171.724900][T21780] qnx6: unable to read the first superblock [ 1171.794045][T21766] FAULT_INJECTION: forcing a failure. [ 1171.794045][T21766] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.794084][T21766] CPU: 0 UID: 0 PID: 21766 Comm: syz.2.3031 Tainted: G L syzkaller #0 PREEMPT(full) [ 1171.794102][T21766] Tainted: [L]=SOFTLOCKUP [ 1171.794109][T21766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1171.794117][T21766] Call Trace: [ 1171.794121][T21766] [ 1171.794127][T21766] dump_stack_lvl+0x100/0x190 [ 1171.794153][T21766] should_fail_ex.cold+0x5/0xa [ 1171.794169][T21766] should_failslab+0xc2/0x120 [ 1171.794184][T21766] __kmalloc_cache_noprof+0x91/0x6d0 [ 1171.794203][T21766] ? sctp_association_new+0xbb/0x2990 [ 1171.794224][T21766] sctp_association_new+0xbb/0x2990 [ 1171.794242][T21766] ? sctp_v4_scope+0x183/0x1a0 [ 1171.794256][T21766] sctp_connect_new_asoc+0x1a8/0x770 [ 1171.794274][T21766] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1171.794292][T21766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1171.794309][T21766] __sctp_connect+0x3e7/0xc70 [ 1171.794330][T21766] ? __pfx___sctp_connect+0x10/0x10 [ 1171.794347][T21766] ? selinux_sctp_bind_connect+0xe0/0x230 [ 1171.794368][T21766] __sctp_setsockopt_connectx+0x100/0x190 [ 1171.794387][T21766] sctp_setsockopt+0x46a9/0xb370 [ 1171.794406][T21766] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1171.794422][T21766] ? __fget_files+0x215/0x3d0 [ 1171.794437][T21766] ? selinux_socket_setsockopt+0x6a/0x80 [ 1171.794452][T21766] ? sock_common_setsockopt+0x2e/0xf0 [ 1171.794466][T21766] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1171.794480][T21766] do_sock_setsockopt+0xf3/0x1d0 [ 1171.794494][T21766] __sys_setsockopt+0x195/0x220 [ 1171.794513][T21766] __x64_sys_setsockopt+0xbd/0x160 [ 1171.794530][T21766] ? do_syscall_64+0xae/0x790 [ 1171.794542][T21766] ? lockdep_hardirqs_on+0x7d/0x110 [ 1171.794554][T21766] do_syscall_64+0x123/0x790 [ 1171.794568][T21766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.794580][T21766] RIP: 0033:0x7f1eeb19e159 [ 1171.794591][T21766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.794602][T21766] RSP: 002b:00007f1eec0df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1171.794613][T21766] RAX: ffffffffffffffda RBX: 00007f1eeb425fa0 RCX: 00007f1eeb19e159 [ 1171.794620][T21766] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 1171.794627][T21766] RBP: 00007f1eeb235024 R08: 000000000000001c R09: 0000000000000000 [ 1171.794634][T21766] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1171.794641][T21766] R13: 00007f1eeb426038 R14: 00007f1eeb425fa0 R15: 00007fff09f79188 [ 1171.794655][T21766] [ 1171.901297][ T5698] gspca_sq930x: reg_r 001f failed -110 [ 1171.901340][ T5698] sq930x 9-1:0.0: probe with driver sq930x failed with error -110 [ 1172.102715][ T5698] usb 3-1: USB disconnect, device number 69 [ 1172.322635][ T2314] usb 9-1: USB disconnect, device number 48 [ 1172.557732][ T5779] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1172.622801][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3039'. [ 1172.762689][ T5779] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1172.844961][ T2314] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1172.871010][ T5779] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.871041][ T5779] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1172.873511][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.873526][ T5779] usb 4-1: Product: syz [ 1172.873534][ T5779] usb 4-1: Manufacturer: syz [ 1172.873541][ T5779] usb 4-1: SerialNumber: syz [ 1173.060598][ T2314] usb 5-1: Using ep0 maxpacket: 32 [ 1173.082352][ T2314] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1173.137136][ T2314] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.137174][ T2314] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1173.137195][ T2314] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1173.137212][ T2314] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1173.230738][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 1173.230749][ T31] audit: type=1800 audit(2000000797.506:6437): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345606 res=0 errno=0 [ 1173.544608][ T2314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.544635][ T2314] usb 5-1: Product: syz [ 1173.544651][ T2314] usb 5-1: Manufacturer: syz [ 1173.544662][ T2314] usb 5-1: SerialNumber: syz [ 1173.661050][ T31] audit: type=1800 audit(2000000797.908:6438): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=345638 res=0 errno=0 [ 1173.802288][ T31] audit: type=1800 audit(2000000798.039:6439): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=345613 res=0 errno=0 [ 1173.824274][ T5779] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1173.836578][ T31] audit: type=1800 audit(2000000798.077:6440): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=345614 res=0 errno=0 [ 1173.860184][ T5779] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1173.872556][ T5779] scsi host1: usb-storage 4-1:1.0 [ 1173.886324][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1173.961387][ T31] audit: type=1800 audit(2000000798.189:6441): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1173.989079][ T31] audit: type=1400 audit(2000000798.208:6442): avc: denied { name_connect } for pid=21782 comm="syz.3.3036" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1174.059795][ T31] audit: type=1800 audit(2000000798.283:6443): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1174.059833][ T31] audit: type=1800 audit(2000000798.283:6444): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345728 res=0 errno=0 [ 1174.108704][ T31] audit: type=1800 audit(2000000798.329:6445): pid=21740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345674 res=0 errno=0 [ 1174.135478][ T31] audit: type=1800 audit(2000000798.348:6446): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=345635 res=0 errno=0 [ 1174.302807][T21800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.327835][T21803] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3042'. [ 1174.371590][ T2314] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input93 [ 1174.406714][T21803] bond0: Error: Cannot enslave bond to itself. [ 1174.470991][T21783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.483415][T21783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.735322][T21783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.744894][T21783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.800391][T21803] sl0: header compression turned on [ 1174.822003][ T5779] usb 4-1: USB disconnect, device number 63 [ 1174.957233][T21798] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1174.986516][ T2314] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1174.986543][ T2314] (id 0x00) [ 1175.165624][ T2314] rc_core: IR keymap rc-imon-pad not found [ 1175.171985][ T2314] Registered IR keymap rc-empty [ 1175.179959][ T2314] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1175.191530][ T2314] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1175.218727][ T2314] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1175.272194][ T2314] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input94 [ 1175.318033][ T2314] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:67> initialized [ 1175.507080][ T2314] usb 5-1: USB disconnect, device number 67 [ 1175.518572][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1175.670925][T21824] qnx6: unable to read the first superblock [ 1175.671009][T21824] qnx6: unable to read the first superblock [ 1175.671022][T21824] qnx6: unable to read the first superblock [ 1175.702881][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1175.702917][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1175.723111][ T9] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 1175.723136][ T9] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 1175.723162][ T9] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1175.723175][ T9] usb 2-1: config 129 has no interface number 0 [ 1175.723186][ T9] usb 2-1: config 129 has no interface number 1 [ 1175.723210][ T9] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1175.723227][ T9] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1175.723246][ T9] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1175.723263][ T9] usb 2-1: config 129 interface 135 has no altsetting 0 [ 1175.723275][ T9] usb 2-1: config 129 interface 5 has no altsetting 0 [ 1175.802074][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1175.802139][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.926654][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1175.926692][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 1175.991033][T21818] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 1175.991076][T21818] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 1175.991102][T21818] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 1175.991113][T21818] lpc_ich 0000:00:00.0: No MFD cells added [ 1175.991625][T21818] lpc_ich 0000:00:01.3: RCBA is disabled by hardware/BIOS, device disabled [ 1175.991688][T21818] lpc_ich 0000:00:01.3: I/O space for GPIO uninitialized [ 1175.991699][T21818] lpc_ich 0000:00:01.3: No MFD cells added [ 1175.991863][T21818] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 1176.157905][T21818] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 1176.157945][T21818] lpc_ich 0000:00:05.0: I/O space for GPIO uninitialized [ 1176.157956][T21818] lpc_ich 0000:00:05.0: No MFD cells added [ 1176.372908][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 1176.420599][ T9] usb 2-1: USB disconnect, device number 86 [ 1177.011560][T21853] tipc: Can't bind to reserved service type 2 [ 1177.131731][ T2314] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1177.204468][ T5779] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1177.291705][ T2314] usb 5-1: Using ep0 maxpacket: 32 [ 1177.298209][ T2314] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1177.308681][ T2314] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1177.308710][ T2314] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1177.308736][ T2314] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1177.308752][ T2314] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1177.308771][ T2314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1177.365438][ T2314] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1177.365464][ T2314] usb 5-1: Product: syz [ 1177.365480][ T2314] usb 5-1: Manufacturer: syz [ 1177.374561][ T2314] usb 5-1: SerialNumber: syz [ 1177.379914][ T5779] usb 4-1: Using ep0 maxpacket: 32 [ 1177.384921][ T5779] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1177.413526][ T2314] usb 5-1: config 0 descriptor?? [ 1177.420259][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.420281][ T5779] usb 4-1: Product: syz [ 1177.420297][ T5779] usb 4-1: Manufacturer: syz [ 1177.420308][ T5779] usb 4-1: SerialNumber: syz [ 1177.449350][ T5779] usb 4-1: config 0 descriptor?? [ 1177.459279][ T2314] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1177.479422][ T2314] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1177.742148][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1177.742206][ T2314] usb 5-1: USB disconnect, device number 68 [ 1177.773335][T21846] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1177.866919][ T5698] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1177.894193][ T2314] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1178.046486][ T5698] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 1178.057354][ T5698] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1178.072833][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.072857][ T5698] usb 2-1: Product: syz [ 1178.072874][ T5698] usb 2-1: Manufacturer: syz [ 1178.072884][ T5698] usb 2-1: SerialNumber: syz [ 1178.476620][ T5779] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1178.632739][ T31] kauditd_printk_skb: 94 callbacks suppressed [ 1178.632766][ T31] audit: type=1400 audit(2000000802.558:6541): avc: denied { write } for pid=21856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.703061][ T5779] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 1178.720739][ T31] audit: type=1800 audit(2000000802.642:6542): pid=21740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=346484 res=0 errno=0 [ 1178.720780][ T31] audit: type=1800 audit(2000000802.642:6543): pid=21740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=346485 res=0 errno=0 [ 1178.768413][ T5779] usb 4-1: USB disconnect, device number 64 [ 1178.776468][ T31] audit: type=1800 audit(2000000802.689:6544): pid=21740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=346464 res=0 errno=0 [ 1178.813726][ T31] audit: type=1800 audit(2000000802.726:6545): pid=21740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=346486 res=0 errno=0 [ 1178.995931][ T31] audit: type=1800 audit(2000000802.895:6546): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 1179.054445][ T31] audit: type=1800 audit(2000000802.951:6547): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 1179.227584][ T31] audit: type=1800 audit(2000000803.110:6548): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 1179.272583][ T31] audit: type=1400 audit(2000000803.147:6549): avc: denied { write } for pid=21881 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1179.624581][ T31] audit: type=1400 audit(2000000803.484:6550): avc: denied { setopt } for pid=21879 comm="syz.8.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1179.678800][T21896] qnx6: unable to read the first superblock [ 1179.678923][T21896] qnx6: unable to read the first superblock [ 1179.678936][T21896] qnx6: unable to read the first superblock [ 1179.991986][ T5698] usb 2-1: USB disconnect, device number 87 [ 1180.468875][T21914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3061'. [ 1180.499979][ T5698] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1180.672280][ T5698] usb 9-1: Using ep0 maxpacket: 16 [ 1180.678405][ T5698] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1180.689341][ T5698] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.689368][ T5698] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1180.689391][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.730041][ T5698] usb 9-1: config 0 descriptor?? [ 1180.895490][T10728] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1181.065832][T10728] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1181.085149][T10728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.085186][T10728] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1181.085206][T10728] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1181.085221][T10728] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1181.085246][T10728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.179455][T21930] ./dev/sda1: Can't lookup blockdev [ 1181.234309][ T5698] HID 045e:07da: Invalid code 65791 type 1 [ 1181.256381][ T5698] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0046/input/input95 [ 1181.323502][ T5698] microsoft 0003:045E:07DA.0046: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1183.028618][T10728] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1 [ 1183.143028][T21903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.143291][T21903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.202068][ T2314] usb 9-1: USB disconnect, device number 49 [ 1184.232471][T10728] ================================================================== [ 1184.232484][T10728] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1184.232504][T10728] Read of size 256 at addr ffff8880779bddfa by task kworker/0:9/10728 [ 1184.232515][T10728] [ 1184.232522][T10728] CPU: 0 UID: 0 PID: 10728 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.232539][T10728] Tainted: [L]=SOFTLOCKUP [ 1184.232544][T10728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1184.232554][T10728] Workqueue: usb_hub_wq hub_event [ 1184.232570][T10728] Call Trace: [ 1184.232574][T10728] [ 1184.232581][T10728] dump_stack_lvl+0x100/0x190 [ 1184.232599][T10728] print_report+0x13d/0x4b0 [ 1184.232617][T10728] ? __virt_addr_valid+0x239/0x430 [ 1184.232629][T10728] ? fbcon_prepare_logo+0x94e/0xc60 [ 1184.232642][T10728] kasan_report+0xdf/0x1c0 [ 1184.232656][T10728] ? fbcon_prepare_logo+0x94e/0xc60 [ 1184.232669][T10728] kasan_check_range+0x10f/0x1e0 [ 1184.232684][T10728] __asan_memcpy+0x23/0x60 [ 1184.232700][T10728] fbcon_prepare_logo+0x94e/0xc60 [ 1184.232714][T10728] fbcon_init+0x1065/0x1830 [ 1184.232730][T10728] visual_init+0x320/0x620 [ 1184.232744][T10728] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1184.232762][T10728] do_take_over_console+0x501/0x5d0 [ 1184.232779][T10728] do_fbcon_takeover+0xe9/0x210 [ 1184.232791][T10728] fbcon_fb_registered+0x364/0x4b0 [ 1184.232805][T10728] do_register_framebuffer+0x503/0x870 [ 1184.232818][T10728] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1184.232832][T10728] ? find_held_lock+0x2b/0x80 [ 1184.232847][T10728] register_framebuffer+0x23/0x40 [ 1184.232859][T10728] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1184.232876][T10728] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1184.232892][T10728] drm_fb_helper_initial_config+0x44/0x60 [ 1184.232904][T10728] drm_fbdev_client_hotplug+0x19e/0x220 [ 1184.232916][T10728] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1184.232926][T10728] drm_client_register+0x197/0x280 [ 1184.232939][T10728] drm_fbdev_client_setup+0x155/0x480 [ 1184.232950][T10728] drm_client_setup+0x160/0x1a0 [ 1184.232959][T10728] gud_probe+0x1835/0x1c20 [ 1184.232972][T10728] ? __pfx_gud_probe+0x10/0x10 [ 1184.232983][T10728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1184.232996][T10728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1184.233006][T10728] ? __pm_runtime_set_status+0x13c/0x970 [ 1184.233019][T10728] usb_probe_interface+0x386/0x9b0 [ 1184.233034][T10728] ? __pfx_usb_probe_interface+0x10/0x10 [ 1184.233055][T10728] ? kernfs_put+0x3f/0x60 [ 1184.233069][T10728] ? sysfs_create_link+0x68/0xc0 [ 1184.233085][T10728] ? __pfx_usb_probe_interface+0x10/0x10 [ 1184.233101][T10728] really_probe+0x241/0xa60 [ 1184.233112][T10728] __driver_probe_device+0x210/0x460 [ 1184.233122][T10728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1184.233134][T10728] driver_probe_device+0x4a/0x140 [ 1184.233145][T10728] __device_attach_driver+0x1df/0x320 [ 1184.233157][T10728] ? __pfx___device_attach_driver+0x10/0x10 [ 1184.233169][T10728] bus_for_each_drv+0x159/0x1e0 [ 1184.233185][T10728] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1184.233200][T10728] ? lockdep_hardirqs_on+0x7d/0x110 [ 1184.233212][T10728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1184.233223][T10728] __device_attach+0x1e4/0x4d0 [ 1184.233233][T10728] ? __pfx___device_attach+0x10/0x10 [ 1184.233243][T10728] ? do_raw_spin_unlock+0x145/0x1e0 [ 1184.233257][T10728] device_initial_probe+0xaf/0xd0 [ 1184.233268][T10728] bus_probe_device+0x64/0x160 [ 1184.233283][T10728] device_add+0x121d/0x1970 [ 1184.233295][T10728] ? __pfx_device_add+0x10/0x10 [ 1184.233307][T10728] ? mark_held_locks+0x40/0x70 [ 1184.233317][T10728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1184.233329][T10728] usb_set_configuration+0xd97/0x1c60 [ 1184.233344][T10728] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1184.233363][T10728] usb_generic_driver_probe+0xa1/0xe0 [ 1184.233381][T10728] usb_probe_device+0xef/0x400 [ 1184.233393][T10728] ? __pfx_usb_probe_device+0x10/0x10 [ 1184.233407][T10728] really_probe+0x241/0xa60 [ 1184.233417][T10728] __driver_probe_device+0x210/0x460 [ 1184.233427][T10728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1184.233438][T10728] driver_probe_device+0x4a/0x140 [ 1184.233448][T10728] __device_attach_driver+0x1df/0x320 [ 1184.233459][T10728] ? __pfx___device_attach_driver+0x10/0x10 [ 1184.233469][T10728] bus_for_each_drv+0x159/0x1e0 [ 1184.233483][T10728] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1184.233498][T10728] ? lockdep_hardirqs_on+0x7d/0x110 [ 1184.233509][T10728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1184.233520][T10728] __device_attach+0x1e4/0x4d0 [ 1184.233531][T10728] ? __pfx___device_attach+0x10/0x10 [ 1184.233541][T10728] ? do_raw_spin_unlock+0x145/0x1e0 [ 1184.233555][T10728] device_initial_probe+0xaf/0xd0 [ 1184.233566][T10728] bus_probe_device+0x64/0x160 [ 1184.233581][T10728] device_add+0x121d/0x1970 [ 1184.233594][T10728] ? __pfx_device_add+0x10/0x10 [ 1184.233605][T10728] ? usb_detect_static_quirks+0x335/0x3e0 [ 1184.233617][T10728] usb_new_device.part.0+0xcc2/0x1686 [ 1184.233635][T10728] ? do_raw_spin_lock+0x128/0x260 [ 1184.233647][T10728] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1184.233664][T10728] ? mark_held_locks+0x40/0x70 [ 1184.233675][T10728] hub_event.cold+0x1e3/0xe90 [ 1184.233695][T10728] ? __pfx_hub_event+0x10/0x10 [ 1184.233707][T10728] ? mark_lock+0xea0/0x1020 [ 1184.233718][T10728] ? lock_acquire+0x1d1/0x380 [ 1184.233728][T10728] ? process_one_work+0xa2c/0x1b10 [ 1184.233744][T10728] ? process_one_work+0x906/0x1b10 [ 1184.233760][T10728] ? process_one_work+0x906/0x1b10 [ 1184.233776][T10728] process_one_work+0xac7/0x1b10 [ 1184.233794][T10728] ? __pfx_process_one_work+0x10/0x10 [ 1184.233811][T10728] ? lock_acquire+0x1d1/0x380 [ 1184.233823][T10728] ? __pfx_hub_event+0x10/0x10 [ 1184.233836][T10728] worker_thread+0x5ef/0xe50 [ 1184.233853][T10728] ? __pfx_worker_thread+0x10/0x10 [ 1184.233869][T10728] ? kthread+0x13a/0x450 [ 1184.233883][T10728] ? __pfx_worker_thread+0x10/0x10 [ 1184.233898][T10728] kthread+0x373/0x450 [ 1184.233912][T10728] ? __pfx_kthread+0x10/0x10 [ 1184.233926][T10728] ret_from_fork+0x730/0xd60 [ 1184.233939][T10728] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.233950][T10728] ? __switch_to+0x800/0x10f0 [ 1184.233965][T10728] ? __pfx_kthread+0x10/0x10 [ 1184.233979][T10728] ret_from_fork_asm+0x1a/0x30 [ 1184.233994][T10728] [ 1184.233998][T10728] [ 1184.234001][T10728] Allocated by task 1436: [ 1184.234007][T10728] kasan_save_stack+0x30/0x50 [ 1184.234018][T10728] kasan_save_track+0x14/0x30 [ 1184.234028][T10728] __kasan_kmalloc+0xaa/0xb0 [ 1184.234042][T10728] __kmalloc_noprof+0x32f/0x840 [ 1184.234052][T10728] fib6_info_alloc+0x40/0x160 [ 1184.234066][T10728] ip6_route_info_create+0x14c/0xad0 [ 1184.234080][T10728] addrconf_f6i_alloc+0x2d9/0x670 [ 1184.234091][T10728] ipv6_add_addr+0x580/0x1fb0 [ 1184.234104][T10728] addrconf_add_linklocal+0x2a5/0x500 [ 1184.234118][T10728] addrconf_addr_gen+0x364/0x3b0 [ 1184.234132][T10728] addrconf_init_auto_addrs+0x1cb/0x780 [ 1184.234146][T10728] addrconf_notify+0xa10/0x1ba0 [ 1184.234156][T10728] notifier_call_chain+0x99/0x3f0 [ 1184.234169][T10728] call_netdevice_notifiers_info+0xbe/0x110 [ 1184.234182][T10728] netif_state_change+0x165/0x380 [ 1184.234193][T10728] linkwatch_do_dev+0xe0/0x120 [ 1184.234206][T10728] __linkwatch_run_queue+0x3a9/0x900 [ 1184.234218][T10728] linkwatch_event+0x8f/0xc0 [ 1184.234230][T10728] process_one_work+0xac7/0x1b10 [ 1184.234244][T10728] worker_thread+0x5ef/0xe50 [ 1184.234258][T10728] kthread+0x373/0x450 [ 1184.234271][T10728] ret_from_fork+0x730/0xd60 [ 1184.234281][T10728] ret_from_fork_asm+0x1a/0x30 [ 1184.234291][T10728] [ 1184.234294][T10728] The buggy address belongs to the object at ffff8880779bdc00 [ 1184.234294][T10728] which belongs to the cache kmalloc-512 of size 512 [ 1184.234302][T10728] The buggy address is located 202 bytes to the right of [ 1184.234302][T10728] allocated 304-byte region [ffff8880779bdc00, ffff8880779bdd30) [ 1184.234313][T10728] [ 1184.234316][T10728] The buggy address belongs to the physical page: [ 1184.234321][T10728] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x779bc [ 1184.234331][T10728] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1184.234340][T10728] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1184.234350][T10728] page_type: f5(slab) [ 1184.234360][T10728] raw: 00fff00000000040 ffff88801c02ec80 dead000000000100 dead000000000122 [ 1184.234369][T10728] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1184.234378][T10728] head: 00fff00000000040 ffff88801c02ec80 dead000000000100 dead000000000122 [ 1184.234387][T10728] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1184.234397][T10728] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1184.234405][T10728] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1184.234411][T10728] page dumped because: kasan: bad access detected [ 1184.234417][T10728] page_owner tracks the page as allocated [ 1184.234421][T10728] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4974, tgid 4974 (udevd), ts 34665193004 [ 1184.234438][T10728] post_alloc_hook+0xfd/0x120 [ 1184.234452][T10728] get_page_from_freelist+0x110d/0x35d0 [ 1184.234467][T10728] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1184.234483][T10728] new_slab+0xa9/0x6e0 [ 1184.234497][T10728] refill_objects+0xe3/0x410 [ 1184.234511][T10728] __pcs_replace_empty_main+0x35e/0x650 [ 1184.234525][T10728] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 1184.234539][T10728] kernfs_fop_open+0x23d/0xd50 [ 1184.234547][T10728] do_dentry_open+0x6ab/0x14d0 [ 1184.234557][T10728] vfs_open+0x82/0x3f0 [ 1184.234568][T10728] path_openat+0x19fa/0x2440 [ 1184.234579][T10728] do_file_open+0x20e/0x430 [ 1184.234590][T10728] do_sys_openat2+0x10f/0x1e0 [ 1184.234602][T10728] __x64_sys_openat+0x12d/0x210 [ 1184.234614][T10728] do_syscall_64+0x123/0x790 [ 1184.234625][T10728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.234636][T10728] page last free pid 4977 tgid 4977 ts 34230375024 stack trace: [ 1184.234643][T10728] __free_frozen_pages+0x79f/0x10f0 [ 1184.234655][T10728] qlist_free_all+0x47/0xf0 [ 1184.234664][T10728] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1184.234674][T10728] __kasan_slab_alloc+0x69/0x90 [ 1184.234685][T10728] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1184.234694][T10728] do_getname+0x35/0x390 [ 1184.234707][T10728] __x64_sys_unlink+0x36/0x70 [ 1184.234719][T10728] do_syscall_64+0x123/0x790 [ 1184.234729][T10728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.234740][T10728] [ 1184.234742][T10728] Memory state around the buggy address: [ 1184.234748][T10728] ffff8880779bdc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1184.234755][T10728] ffff8880779bdd00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 1184.234762][T10728] >ffff8880779bdd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1184.234768][T10728] ^ [ 1184.234774][T10728] ffff8880779bde00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1184.234781][T10728] ffff8880779bde80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1184.234787][T10728] ================================================================== [ 1184.456240][T10728] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1185.339004][T10728] CPU: 0 UID: 0 PID: 10728 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.349999][T10728] Tainted: [L]=SOFTLOCKUP [ 1185.354301][T10728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1185.364329][T10728] Workqueue: usb_hub_wq hub_event [ 1185.369332][T10728] Call Trace: [ 1185.372586][T10728] [ 1185.375491][T10728] dump_stack_lvl+0x100/0x190 [ 1185.380153][T10728] vpanic+0x553/0x970 [ 1185.384115][T10728] ? __pfx_vpanic+0x10/0x10 [ 1185.388600][T10728] ? fbcon_prepare_logo+0x94e/0xc60 [ 1185.393779][T10728] panic+0xd1/0xe0 [ 1185.397469][T10728] ? __pfx_panic+0x10/0x10 [ 1185.401857][T10728] ? fbcon_prepare_logo+0x94e/0xc60 [ 1185.407037][T10728] ? preempt_schedule_common+0x3c/0xb0 [ 1185.412469][T10728] check_panic_on_warn.cold+0x19/0x34 [ 1185.417812][T10728] end_report.part.0+0x3a/0x90 [ 1185.422553][T10728] kasan_report.cold+0xe/0x18 [ 1185.427214][T10728] ? fbcon_prepare_logo+0x94e/0xc60 [ 1185.432404][T10728] kasan_check_range+0x10f/0x1e0 [ 1185.437318][T10728] __asan_memcpy+0x23/0x60 [ 1185.441712][T10728] fbcon_prepare_logo+0x94e/0xc60 [ 1185.446712][T10728] fbcon_init+0x1065/0x1830 [ 1185.451196][T10728] visual_init+0x320/0x620 [ 1185.455614][T10728] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1185.461225][T10728] do_take_over_console+0x501/0x5d0 [ 1185.466400][T10728] do_fbcon_takeover+0xe9/0x210 [ 1185.471223][T10728] fbcon_fb_registered+0x364/0x4b0 [ 1185.476316][T10728] do_register_framebuffer+0x503/0x870 [ 1185.481749][T10728] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1185.487702][T10728] ? find_held_lock+0x2b/0x80 [ 1185.492356][T10728] register_framebuffer+0x23/0x40 [ 1185.497359][T10728] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1185.504444][T10728] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1185.511962][T10728] drm_fb_helper_initial_config+0x44/0x60 [ 1185.517660][T10728] drm_fbdev_client_hotplug+0x19e/0x220 [ 1185.523178][T10728] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1185.529220][T10728] drm_client_register+0x197/0x280 [ 1185.534313][T10728] drm_fbdev_client_setup+0x155/0x480 [ 1185.539656][T10728] drm_client_setup+0x160/0x1a0 [ 1185.544478][T10728] gud_probe+0x1835/0x1c20 [ 1185.548876][T10728] ? __pfx_gud_probe+0x10/0x10 [ 1185.553618][T10728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1185.559397][T10728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1185.565173][T10728] ? __pm_runtime_set_status+0x13c/0x970 [ 1185.570798][T10728] usb_probe_interface+0x386/0x9b0 [ 1185.575889][T10728] ? __pfx_usb_probe_interface+0x10/0x10 [ 1185.581495][T10728] ? kernfs_put+0x3f/0x60 [ 1185.585800][T10728] ? sysfs_create_link+0x68/0xc0 [ 1185.590719][T10728] ? __pfx_usb_probe_interface+0x10/0x10 [ 1185.596325][T10728] really_probe+0x241/0xa60 [ 1185.600807][T10728] __driver_probe_device+0x210/0x460 [ 1185.606072][T10728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1185.611848][T10728] driver_probe_device+0x4a/0x140 [ 1185.616844][T10728] __device_attach_driver+0x1df/0x320 [ 1185.622187][T10728] ? __pfx___device_attach_driver+0x10/0x10 [ 1185.628051][T10728] bus_for_each_drv+0x159/0x1e0 [ 1185.632886][T10728] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1185.638236][T10728] ? lockdep_hardirqs_on+0x7d/0x110 [ 1185.643409][T10728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1185.649186][T10728] __device_attach+0x1e4/0x4d0 [ 1185.653922][T10728] ? __pfx___device_attach+0x10/0x10 [ 1185.659192][T10728] ? do_raw_spin_unlock+0x145/0x1e0 [ 1185.664366][T10728] device_initial_probe+0xaf/0xd0 [ 1185.669362][T10728] bus_probe_device+0x64/0x160 [ 1185.674102][T10728] device_add+0x121d/0x1970 [ 1185.678585][T10728] ? __pfx_device_add+0x10/0x10 [ 1185.683408][T10728] ? mark_held_locks+0x40/0x70 [ 1185.688144][T10728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1185.693922][T10728] usb_set_configuration+0xd97/0x1c60 [ 1185.699272][T10728] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1185.705316][T10728] usb_generic_driver_probe+0xa1/0xe0 [ 1185.710665][T10728] usb_probe_device+0xef/0x400 [ 1185.715406][T10728] ? __pfx_usb_probe_device+0x10/0x10 [ 1185.720760][T10728] really_probe+0x241/0xa60 [ 1185.725235][T10728] __driver_probe_device+0x210/0x460 [ 1185.730490][T10728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1185.736266][T10728] driver_probe_device+0x4a/0x140 [ 1185.741261][T10728] __device_attach_driver+0x1df/0x320 [ 1185.746606][T10728] ? __pfx___device_attach_driver+0x10/0x10 [ 1185.752470][T10728] bus_for_each_drv+0x159/0x1e0 [ 1185.757315][T10728] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1185.762671][T10728] ? lockdep_hardirqs_on+0x7d/0x110 [ 1185.767846][T10728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1185.773622][T10728] __device_attach+0x1e4/0x4d0 [ 1185.778358][T10728] ? __pfx___device_attach+0x10/0x10 [ 1185.783613][T10728] ? do_raw_spin_unlock+0x145/0x1e0 [ 1185.788787][T10728] device_initial_probe+0xaf/0xd0 [ 1185.793792][T10728] bus_probe_device+0x64/0x160 [ 1185.798532][T10728] device_add+0x121d/0x1970 [ 1185.803017][T10728] ? __pfx_device_add+0x10/0x10 [ 1185.807838][T10728] ? usb_detect_static_quirks+0x335/0x3e0 [ 1185.813542][T10728] usb_new_device.part.0+0xcc2/0x1686 [ 1185.818899][T10728] ? do_raw_spin_lock+0x128/0x260 [ 1185.823904][T10728] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1185.829692][T10728] ? mark_held_locks+0x40/0x70 [ 1185.834434][T10728] hub_event.cold+0x1e3/0xe90 [ 1185.839092][T10728] ? __pfx_hub_event+0x10/0x10 [ 1185.843837][T10728] ? mark_lock+0xea0/0x1020 [ 1185.848310][T10728] ? lock_acquire+0x1d1/0x380 [ 1185.852968][T10728] ? process_one_work+0xa2c/0x1b10 [ 1185.858057][T10728] ? process_one_work+0x906/0x1b10 [ 1185.863143][T10728] ? process_one_work+0x906/0x1b10 [ 1185.868231][T10728] process_one_work+0xac7/0x1b10 [ 1185.873154][T10728] ? __pfx_process_one_work+0x10/0x10 [ 1185.878502][T10728] ? lock_acquire+0x1d1/0x380 [ 1185.883158][T10728] ? __pfx_hub_event+0x10/0x10 [ 1185.887894][T10728] worker_thread+0x5ef/0xe50 [ 1185.892462][T10728] ? __pfx_worker_thread+0x10/0x10 [ 1185.897551][T10728] ? kthread+0x13a/0x450 [ 1185.901773][T10728] ? __pfx_worker_thread+0x10/0x10 [ 1185.906866][T10728] kthread+0x373/0x450 [ 1185.910916][T10728] ? __pfx_kthread+0x10/0x10 [ 1185.915481][T10728] ret_from_fork+0x730/0xd60 [ 1185.920051][T10728] ? __pfx_ret_from_fork+0x10/0x10 [ 1185.925135][T10728] ? __switch_to+0x800/0x10f0 [ 1185.929787][T10728] ? __pfx_kthread+0x10/0x10 [ 1185.934352][T10728] ret_from_fork_asm+0x1a/0x30 [ 1185.939097][T10728] [ 1185.942126][T10728] Kernel Offset: disabled [ 1185.946422][T10728] Rebooting in 86400 seconds..