last executing test programs: 3m24.331481514s ago: executing program 2 (id=1936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pimreg0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="676d3d38a08912cbd75b5f14b9a427e06f20ee3af7d41229bfca6740a6dc93a6b85c14299cc702500699ea8eba8a4a020bc1445efa8ed3f72b20f57a206bbf7b2eb2b365ef010000000000004c0a3f105f1b3f263897ae1eb6688aeff066182b3d581ea6"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r5, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x4200, 0x0) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x8a, r2, 0x1000}, 0xc) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r8, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0x800}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffe94}, 0x20048004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x4005) socket$inet(0x2, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c009610cc39a1e200", @ANYBLOB="708f6d4d7e69daf2ef878869af125108f561513e9697cdf02f74c88eee496fdccf004933915662bdf663f9efc8b3e0a520e7a131c23677b37f4492316d543d250aac290fc031f3e75a268b60113371a790909f47f308340ba4ecd46405fd76cddd14d1e90c7605aa61a8abab748b8a0a9a2ee7cfd87defdd16fa4fa6e30d5c24b1432dda6d14e7de64ecfd42c953c8a0db0338e2a783feeed23604", @ANYRES64=r1, @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x44044880}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ecffffff00000000000000009500000000000000"], 0x0, 0xcd3b, 0x0, 0x0, 0x40f00, 0x47d5bc4c0754ea53, '\x00', 0x0, 0x0, r9}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 3m20.137132636s ago: executing program 2 (id=1949): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='dax\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003003f00050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) lseek(r3, 0x3, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 3m18.707250193s ago: executing program 2 (id=1956): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r2, &(0x7f0000006100)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000001a80)=[@tclass={{0x14, 0x29, 0x43, 0x80006}}], 0x18}}], 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000080)={@my=0x0}) 3m18.20431332s ago: executing program 2 (id=1957): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffbfffdc, 0x10001, 0x0, 0x7, 0x4, "03f0090000000000002000", 0x6, 0x3}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x9) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0x7ff, 0x93, 0x9, 0xc0, 0xc0, 0xf, 0x23, 0x5, 0x6, 0xa, 0x0, 0x7, 0x6}, {0x5, 0x2, 0xf9, 0x8, 0xdd, 0xff, 0x3, 0x3, 0x5, 0x9, 0x7, 0xa, 0x4}, {0x3, 0xa, 0x4, 0x3, 0xf8, 0xf8, 0x8, 0xff, 0xa, 0x82, 0xfa, 0xa7, 0x6}], 0xffbffff7}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffeb, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c8}, [@IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xb, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x5, 0x1}], 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181080, 0x0) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) fsmount(r5, 0x1, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x5000000, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a006a3600000000fc010000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000080ff000000c7000800120002000200000000000000000030002b00"], 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m16.051372309s ago: executing program 2 (id=1965): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x25, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5008, &(0x7f0000000180)={0x0, 0x1c75, 0x20000, 0x2, 0x335}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) syz_clone3(0x0, 0x0) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x80, 0x2, 0x2c0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m13.219468538s ago: executing program 2 (id=1975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x100003}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x8f, 0x68, 0x74, 0x40, 0x47e, 0x1001, 0xc606, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd7, 0x7e, 0xed}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 2m57.883347575s ago: executing program 32 (id=1975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x100003}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x8f, 0x68, 0x74, 0x40, 0x47e, 0x1001, 0xc606, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd7, 0x7e, 0xed}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 2m45.449925262s ago: executing program 4 (id=2047): syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x60a02, 0x0) sendfile(r1, r1, 0x0, 0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001280)=0x10}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r7, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 2m44.175199869s ago: executing program 4 (id=2052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x82, 0x1, 0x100}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000003c0)) 2m41.809177208s ago: executing program 4 (id=2058): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = fsmount(0xffffffffffffffff, 0x1, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000), 0x8) listen(r2, 0x3) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x13, 0x0, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x5e2c7065, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800e713000000001000000010000000020000000000000000000011000000000000000000001c6f8cfcac6d212955d16b676d415bf5c0bd76306e3366ad2a61ac58f64789556d1bec6a8def"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffffaf5a00000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0xfffffffffffffef6}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000380), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r4, 0x20, &(0x7f0000000100)={&(0x7f0000000540)=""/254, 0xfe, 0x0, &(0x7f00000000c0)=""/8, 0x8}}, 0x10) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000f1401002dbd7000fcdb1dba8de98ba0adf9000008000300046400"/40], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048404) write(0xffffffffffffffff, &(0x7f00000003c0)="69672505bde5d1853a", 0x9) setrlimit(0xb, &(0x7f0000000080)={0x8b74, 0xffffffff}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0) 2m39.367809871s ago: executing program 4 (id=2061): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 2m39.308555702s ago: executing program 4 (id=2062): syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x60a02, 0x0) sendfile(r1, r1, 0x0, 0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001280)=0x10}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r7, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 2m38.976527373s ago: executing program 4 (id=2064): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001ea"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000400000000000000000b7080000000000007b8af8ff00000000b7080000020000407b8af0ff00000000bfa100000000000007010000f8ffffffbfa4005d3eeb360007040000f0ffffffb70200070000000018230000d9f1dc878b04396b3344228c7c8560ceac701eacc2da305a8bd0f99ae7105d933dfeae66cd5960627305e7", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) (async) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000000)=0x970) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x2000001, 0x3fe190dd, 0x2, 0xcbf, 0x1, 0x8}) mmap(&(0x7f000085e000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x8d56c000) (async, rerun: 32) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="32010000fe07124081173809499b0102030109022400010000000009040000028b860100000000000009050a00000000000000001b00c26daee69d800fc7a331f2abaad932"], 0x0) (rerun: 32) 2m23.858347327s ago: executing program 33 (id=2064): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001ea"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000400000000000000000b7080000000000007b8af8ff00000000b7080000020000407b8af0ff00000000bfa100000000000007010000f8ffffffbfa4005d3eeb360007040000f0ffffffb70200070000000018230000d9f1dc878b04396b3344228c7c8560ceac701eacc2da305a8bd0f99ae7105d933dfeae66cd5960627305e7", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) (async) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000000)=0x970) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x2000001, 0x3fe190dd, 0x2, 0xcbf, 0x1, 0x8}) mmap(&(0x7f000085e000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x8d56c000) (async, rerun: 32) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="32010000fe07124081173809499b0102030109022400010000000009040000028b860100000000000009050a00000000000000001b00c26daee69d800fc7a331f2abaad932"], 0x0) (rerun: 32) 2m16.951621823s ago: executing program 5 (id=2124): inotify_init() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m15.907916131s ago: executing program 5 (id=2128): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x0, 0xfffffffc) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) read$msr(r5, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0267cfb8ff73958ee59966ae3c89473153992200fcdbdf2508000500"], 0x14}, 0x1, 0x0, 0x0, 0x4000c}, 0x4044080) setpriority(0x2, 0x0, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x85a, 0x0, 0xffffffffffff8001}, {0xa63, 0x0, 0x7fffffffffffffff}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) socket$inet6(0xa, 0x2, 0x3a) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 2m13.037306496s ago: executing program 5 (id=2134): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 2m11.484639107s ago: executing program 5 (id=2138): syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x60a02, 0x0) sendfile(r1, r1, 0x0, 0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001280)=0x10}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r7, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 2m10.97558466s ago: executing program 5 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x1900}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m9.961162557s ago: executing program 5 (id=2144): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x80, &(0x7f00000022c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi3\x00', 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone3(&(0x7f0000002240)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4000000000000145}, 0x58) ptrace$cont(0x20, r5, 0x40, 0x1) (async) ptrace$cont(0x20, r5, 0x40, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var={0x6, 0x0, 0x0, 0xe, 0x5, 0x2}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @union={0x3, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x7, 0x5, 0x8}]}, @volatile={0x4}]}}, &(0x7f0000000740)=""/190, 0x5a, 0xbe}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var={0x6, 0x0, 0x0, 0xe, 0x5, 0x2}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @union={0x3, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x7, 0x5, 0x8}]}, @volatile={0x4}]}}, &(0x7f0000000740)=""/190, 0x5a, 0xbe}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) r9 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800"], 0x44}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000200)={0x2020}, 0x2020) symlinkat(&(0x7f0000000840)='./file0\x00', r10, &(0x7f0000000880)='./file1\x00') sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xa}}}, 0x24}}, 0x0) 1m54.779050076s ago: executing program 34 (id=2144): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x80, &(0x7f00000022c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi3\x00', 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone3(&(0x7f0000002240)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4000000000000145}, 0x58) ptrace$cont(0x20, r5, 0x40, 0x1) (async) ptrace$cont(0x20, r5, 0x40, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var={0x6, 0x0, 0x0, 0xe, 0x5, 0x2}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @union={0x3, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x7, 0x5, 0x8}]}, @volatile={0x4}]}}, &(0x7f0000000740)=""/190, 0x5a, 0xbe}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var={0x6, 0x0, 0x0, 0xe, 0x5, 0x2}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @union={0x3, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x7, 0x5, 0x8}]}, @volatile={0x4}]}}, &(0x7f0000000740)=""/190, 0x5a, 0xbe}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) r9 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800"], 0x44}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000200)={0x2020}, 0x2020) symlinkat(&(0x7f0000000840)='./file0\x00', r10, &(0x7f0000000880)='./file1\x00') sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xa}}}, 0x24}}, 0x0) 14.620404471s ago: executing program 6 (id=2537): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffff8]}, 0x8) recvmmsg(r0, &(0x7f0000000400), 0x0, 0x40000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46000400000180ffffffffffff03003e00ffffffff7c0000000000000040000000000005bd01000000000000001de600000c20380001"], 0x78) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000600)=""/109, 0x6d}], 0x1, 0x7fff, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23, @local}}, 0xf54, 0x7}, 0x90) sendmsg$key(0xffffffffffffffff, 0x0, 0x44040800) io_uring_setup(0x503, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r4 = memfd_create(0x0, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2, 0x9101) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000800)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0xf) 14.058116203s ago: executing program 6 (id=2538): r0 = syz_usb_connect(0x2, 0x88, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xf8, 0x33, 0x70, 0x20, 0x5cc, 0x3362, 0xa327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x3, 0x4, 0x80, 0x81, [{{0x9, 0x4, 0xaa, 0x9, 0x3, 0xad, 0xcf, 0x67, 0xc, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "40101bc90e05"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x5, 0xb3cd, 0xb}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x7053}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x5, 0x9}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x8, 0x9, 0x3, [@generic={0xb, 0xb, "38a33edcc1a30d89da"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x7, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7d}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xb8, 0x40, 0xff}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x210, 0x1, 0x9, 0x1, 0xff, 0x8}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x6, 0x9, 0x1, 0x8000, 0x7}]}, 0x2, [{0xea, &(0x7f0000000140)=@string={0xea, 0x3, "ea73273a9e86de7724fd0a4c506373839ba2010494da681f0324112428d3aeef2be8d4b0b1bdc6ca89bbfb8223de2aeb42d82d87d2d36803bb1fb314a4332537f19fc03ee07ea869f6b8be1bab0b58fa0eac00ed4d33e04ebf3e369e3e711b051ba6c56dbd9fd09c4b30631a0292e4c697fa560305d5cb096cd37df29bef2c5ee634c10e7df5e7d4ab716fd6d4736bbf29820da1d26ceca58ad447331924a7815a2073886293908526b82dcce410076be31db2f3644745a83149d37d9b73e3c2cce67910ac82f56932c7fa57b6d6ec62b0f0606013b591eb3db3b50650187a36918f32e40ce55738"}}, {0xc, &(0x7f0000000240)=@string={0xc, 0x3, "1225e43eeecfb0e8a672"}}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) clock_settime(0x2, &(0x7f00000002c0)={0x77359400}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000340)) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000400)={{r3}, "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"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) io_setup(0x8, &(0x7f0000001400)=0x0) io_getevents(r5, 0x401, 0x1, &(0x7f0000001440)=[{}], &(0x7f0000001480)={0x0, 0x989680}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000014c0)=0x5) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000001500)=0x1000) io_submit(r5, 0x1, &(0x7f0000001600)=[&(0x7f00000015c0)={0x0, 0x0, 0x0, 0x7, 0xb, r4, &(0x7f0000001540)="91d2570dc4dcb1c4ef9e8cd698b834434a6920ffa710c7eade8b204ca0140193d7e3fa51ad169802abb525b676171586471ef71f9e9a0ea2c44659b64c2dfc7dd56c8b934432e391f1fd2f2dad124e37478603682d8542a1438e215c358f7cc2ef945c8697c2bc4a8d9f07284c08d0", 0x6f, 0x80000000, 0x0, 0x3, r2}]) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000001640)) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000001680)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000016c0)={'\x00', 0x613a, 0x10001, 0x100, 0x1a0c264a, 0xfffffffffffffff8, 0xffffffffffffffff}) sched_setattr(r6, &(0x7f0000001740)={0x38, 0x0, 0x22, 0x880, 0x6, 0x2, 0x9, 0x200, 0xfffffff7, 0xc93}, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000001780)={0x2, @null, @rose={'rose', 0x0}, 0x6, 'syz1\x00', @bcast, 0x1, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) prctl$PR_SET_PTRACER(0x59616d61, r6) syz_usb_control_io(r0, &(0x7f0000001a40)={0x2c, &(0x7f0000001800)={0x20, 0x7, 0x5d, {0x5d, 0x4, "4a67b65948d35531c0a758ce452c31e93959dc84409cd5f6eec4915a9ad03006f816bf1c6eebeef1e4013e98961eb950a9090484ae378fc039bc64f32004eeb2dae5cb68274ac885f9e317663285c94802c78348a3a8ea6bb8bc3c"}}, &(0x7f0000001880)={0x0, 0x3, 0x19, @string={0x19, 0x3, "75898cc1f18a8ece8da5cad7eaa604be7fc8df6ee0e36f"}}, &(0x7f00000018c0)={0x0, 0xf, 0xc1, {0x5, 0xf, 0xc1, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "b82946564c93ab6738c33a772c9bc8c5"}, @generic={0xa8, 0x10, 0x4, "bdcd190861791e151aad6462d75c80ed71cd28f31eb6c484000e51895d444d870a164adc2f2f579fbfe871537036ee5fb668badaaa39f99d13003c1695bc117e9f5049439be96257db0a97b82318f83d488416bc09bd799dbc725bd4ea47a78c66d49e706e8964feb5e22ffbab54e8d44bdbe38bd68bf2787d43265e757e61bb5a611c0f2b3be66f7487ec52faac64dba6e1e2ef272696b0cdbf333248a7302e3b156b8b44"}]}}, &(0x7f00000019c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x8, 0x0, "d9e9e12e", "221a26ce"}}, &(0x7f0000001a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x9, 0x77, 0x7, 0x19, 0x4, 0x5}}}, &(0x7f0000001f00)={0x84, &(0x7f0000001a80)={0x40, 0x3, 0xa7, "d7c0a59df1399f46062f0d036d9b2a8e6afb0a65f335185edc9cb8b5aa9734750ffef17d08bd7be3f1e15c16be94352989c7627564b95fd54805dd4150446395438e099b8bf566a5b5a3d87a1e1c85179af0d93d4c1ad99fdfd75f42855b681e84d2c7153c89b01e344f80541454c69492c3997db516b41167ec15a857702877ada68f5006f78507ac9fdbb21cdf6b6a628cb48a48000f18ceb49a825cdd8d35e6aa20bff9190c"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001bc0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001c00)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000001c40)={0x40, 0x7, 0x2, 0xced}, &(0x7f0000001c80)={0x40, 0x9, 0x1, 0x76}, &(0x7f0000001cc0)={0x40, 0xb, 0x2, '$`'}, &(0x7f0000001d00)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001d40)={0x40, 0x13, 0x6, @random="3dceadb42714"}, &(0x7f0000001d80)={0x40, 0x17, 0x6}, &(0x7f0000001dc0)={0x40, 0x19, 0x2, "fc30"}, &(0x7f0000001e00)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001e40)={0x40, 0x1c, 0x1}, &(0x7f0000001e80)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000001ec0)={0x40, 0x21, 0x1, 0x6}}) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000001fc0)={0x1, "b7ffba03f387cb577ec4e6ec81678f9f509bf2f4d7de605deb2c5adf0ad09b52", 0x8, 0x3, 0xa3e, 0x5, 0x5}) prctl$PR_SET_PTRACER(0x59616d61, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002040)) syz_usb_control_io$uac1(r0, &(0x7f0000002140)={0x14, &(0x7f0000002080)={0x20, 0x1, 0x6b, {0x6b, 0x10, "564bcc11114bd2b1a643a351420d1bc3bd1e7b0265220653c4e48f95e0b93230c7f2e306729996f36048dd3255edf753c26b316bd94a9c7090659eedac41e0736dae525a4a61b780c8d24fa5d93fd41bfa4c955ed5cf86473af01ea6b62e63d49b92cb4142cd851d7b"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f00000023c0)={0x44, &(0x7f0000002180)={0x20, 0x11, 0x44, "9340f1318098e8a100320efe340253df2558ec4c03848462b71029838271e1159e048779604ba4570a555a261a344677cf686e814e074a42936c595df6420c9373401b28"}, &(0x7f0000002200)={0x0, 0xa, 0x1}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002280)={0x20, 0x81, 0x2, '#R'}, &(0x7f00000022c0)={0x20, 0x82, 0x1, 'P'}, &(0x7f0000002300)={0x20, 0x83, 0x1, '\v'}, &(0x7f0000002340)={0x20, 0x84, 0x3, "e50c31"}, &(0x7f0000002380)={0x20, 0x85, 0x3, "9b1ef9"}}) r7 = dup(r3) move_pages(r6, 0x1, &(0x7f0000002440)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f0000002480)=[0x8, 0x6, 0x74c, 0x10], &(0x7f00000024c0)=[0x0, 0x0, 0x0, 0x0], 0x2) r8 = accept4$nfc_llcp(r3, &(0x7f0000002500), &(0x7f0000002580)=0x60, 0x0) shutdown(r8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000002600)={0x9e0000, 0x1, 0x76, r7, 0x0, &(0x7f00000025c0)={0x990a93, 0xfffffffe, '\x00', @value64=0xf9b3}}) ioctl$PTP_PIN_GETFUNC2(r7, 0xc0603d0f, &(0x7f0000002640)={'\x00', 0x1, 0x3}) fcntl$setflags(r2, 0x2, 0x1) 11.784444298s ago: executing program 6 (id=2546): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', r0, &(0x7f0000000640)='./file0\x00', 0x261) 11.232810208s ago: executing program 6 (id=2548): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb30500010000000000080003400000800108000240000001e12c001980080001000000000008000200010000020000000000000000080001000000000008000200010800000800154000000001b0000f800c000a8008000140000000000800084000000001900003802c00018014"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x100000000000f7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb0100180000000000040030000000300000000400000002de00000000001103000000000005918743ea460de4523da413d3930000000000"], 0x0, 0x4c, 0x0, 0x2}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtaction={0x174, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x160, 0x1, [@m_skbmod={0x15c, 0x18, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x42b, 0x5, 0x1, 0x7, 0x1}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf, 0x4000000, 0x8, 0x8f, 0x3}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa24a}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xfffffff7, 0x3, 0x5, 0x7}, 0xd}}]}, {0xa3, 0x6, "2034a00288f836215cef5095842267fd397d634d6ae9e8ce23b8b9d9f0e51f8a46b85f104f0885a5f5e756c7089caaa23a6f443ce1a04c2b52643655ced8fbc67f0ccfa2e68d4c7649ca30f2450771a1365a68b451adac4dafea60ab397286dec4e478414e81a3022794b044a6850b2b2b5c1a3b80005033b2e8ea51874209cacd92c747317bb2bc19eaa3638472aa78166f0f48eb5c70e9c0a518e08d9ffc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x5}}}}]}]}, 0x174}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 10.402328822s ago: executing program 3 (id=2552): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xe) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES8=r5, @ANYRESOCT, @ANYRESDEC=r4, @ANYRES64=r6, @ANYRES8=r3, @ANYRESHEX=r3, @ANYRESHEX=r6], 0x3c}}, 0x800) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 10.335974134s ago: executing program 1 (id=2554): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000b95"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 10.303143249s ago: executing program 1 (id=2556): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220500000083c94ffbea"], 0x0}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x10, 0x1419, 0x201}, 0x10}}, 0x840) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) readlink(0x0, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000000)={&(0x7f0000000200)=[{0x29, 0x7801, 0x0, 0x0}, {0x1, 0x8000, 0x0, 0x0}], 0x2}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) 8.472509122s ago: executing program 7 (id=2558): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', r0, &(0x7f0000000640)='./file0\x00', 0x261) 8.174666197s ago: executing program 3 (id=2559): r0 = io_uring_setup(0x2622, &(0x7f0000000240)={0x0, 0xfffffffd, 0x800, 0x1, 0x4000159}) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x1d) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x4020, {0x23, 0x1f, 0x40}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r5, &(0x7f0000002840), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.052219245s ago: executing program 7 (id=2560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000003000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c0001400000000000000101080004400001"], 0xf4}}, 0x0) 7.383772683s ago: executing program 7 (id=2561): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46000400000180ffffffffffff03003e00ffffffff7c0000000000000040000000000005bd01000000000000001de600000c20380001"], 0x78) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000001bc0), 0x1) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="74000000100003040200000000000000000004", @ANYRES32=0x0, @ANYBLOB="0003000000000000540012800b000107007269646765550e0000440002800c001f000200000000000000050016000000000005002b00fa00000005002900000000000c001e00a00000000000000008001b00fbffffff05002a0000000000"], 0x74}}, 0x8044) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1, 0xf, 0x68, @empty, @empty, 0x8, 0x700, 0xa, 0xfffff001}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000038529c4c00000000fcffffff850000008d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000170000009500002000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="00ba547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect$uac1(0x4, 0xb5, &(0x7f0000000780)=ANY=[@ANYBLOB="12010102000000006b1d0190040904000000010100000a2401e3f6050201020f2406e2040402000500060009030000000000000081790d24070507000132eaffffff7f0000000002030303039b24070102000999ad64631909040100000d0200000904010101010200000b24020101015e3dc3a71409050109200000f90107250102070000090402000001020000090582096000050e09072501020f0010ad9d5657341acd2ee23aa6d570742547428f7b0000fcb4aa72f68cf32696adb676b1f8c62a847a599cb9291af1a370680486e3dfdcd3c0c2e6a4950f1dd64110963907529eb48da80d9c"], &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x74, 0xef, 0xfa, 0x8, 0xf8}, 0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="050f7a00041510040e9d37f912322839a96c91bb7879878b840b10010c0400bc087f7f054f10015ae260eb7b549826a0c70ca208bf31afd09d5d9d7094c8b2295807d4f93b359efec6d746e5a0b1e9cee8552652fbf71c0d240db3801ba8277d16c42e24426088a2febe4691b89e30282e0ee907100208280500"], 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x807}}, {0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="5203a324de4d6eeb49a7eb289618982058bdaadd61c61f36a94132e21920935daab5893675cd70117d1a23401505ebd6c8376d2994a0825e004f8da6e029c588755e8914346bd662d4bb03e40b5370b52dee"]}, {0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="40037564781b8c262e942027cd718887882b7607755f7c44527301bcfb24f8d8edcf2bf8e097e9b8109a718a07f20adc8b89f7c82d1ca2dbbb8634a2cf5fe0ef"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40f}}, {0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="b80353044be6a4d56eab2c44b019746ebefd3e89b1db6d143db88401935dbfc1fe245250f9df9edc49003539d43a692288f4ee5cee8eb7c0229e0b1a725efed2d387688adc1cff0419110e66326b0a2893c19b704e107604fcc9ed6dc0b8401beec2c1cd6e8e3ed929effe7546f35eb02947c0b13307266196df96c0cb5c82b467212244888ed59cdd81c7d334d0341e1620fae17217e4b9ead1ff42d69bb99c9070098ff54ee859ede9297f9a7ceb7b09cd8e66b04b6b0ffc3ac530d87200"/200]}]}) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040090701feff33b462ffff00000020010000040042801c800a000008001500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="04000280"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000740)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) 7.242282194s ago: executing program 3 (id=2562): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) ioprio_get$uid(0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet_nvme_of_msg(r6, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() 5.866289561s ago: executing program 1 (id=2565): r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_SETWSUBD(r2, 0x6411) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) readv(r7, &(0x7f0000000c40)=[{0x0}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1de, 0x652, 0xfff, 0x20, r8, 0x2, '\x00', 0x0, r8, 0x0, 0x1, 0x5, 0xc}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300fe800000000000000000000000a9b6bb14000400ff0200000000000000000000003a00010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d8014000400ff010000000000000000000000000001"], 0xac}}, 0x0) fsmount(r0, 0x0, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='bdev\x00', 0x1020, &(0x7f0000000340)='\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 5.743169764s ago: executing program 0 (id=2566): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080), 0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00ff8000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) 5.741420783s ago: executing program 3 (id=2567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "669e7e", 0x0, 0x32, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local}}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 5.00405809s ago: executing program 7 (id=2568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0xffd, 0x800}, 0x0) 4.872384034s ago: executing program 3 (id=2569): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x410101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockname(r4, &(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r4, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1800000027bd7000000000000800000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x40850) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.446846061s ago: executing program 0 (id=2570): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_dev$loop(&(0x7f0000000300), 0x8, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) syz_emit_ethernet(0x7a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004508006c00680000811190780a0101007f0000014408746000000003890bce00000000ac141425832b3cac14142be0000002e0000001ffffffff0a010101ac1414aa0a0101007984841cd77f000001e00000026401010200004e204e210018907844229c7fa8e86745e59f25991fb177f6b60e741236da3dce47753cf93bbeac6e9999410d55501ac620afdea7557323dbcd6ee700ab062a652721f05266be646c57cddfd975d78097e92737936acbba5203045ead6c2eac7a107f0ac4796c42e80b2a5f13959cad9d5353db5a57176dd44aab09996e191c54b76eb078ff40348a65fb99f309c2507248aaa4b66dea580e2295c469dd0a14638c02ee8eb05ba448777b6f2b7d0d6cd9d3a8637f65bea28fa0980846e5d1fb7ff3f613f57b2c00c7306c093bb576e5d2ca800ad2cafd5840b864e6544a1911544130e3792966d3c100"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0) 4.384309874s ago: executing program 7 (id=2571): syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x60a02, 0x0) sendfile(r1, r1, 0x0, 0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001280)=0x10}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 3.733831357s ago: executing program 1 (id=2572): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='dax\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x3f00) lseek(r3, 0x3, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 3.689618749s ago: executing program 7 (id=2573): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e7f3d", @ANYRESHEX=r1, @ANYBLOB="2c63616368658a0caa33616368652c63616368657462673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f8590700000088123b56361ed3cc4c3e5523eb70372d09d6bc2f01c5403a5b65222ca1869dd94d45dc1d071a90f52073c471d0792bc545507c66cf8cb57280759f98ae643bedae6795d72bd5ec242a6fc471a41cdf844541abc2c57a6ce4d7d035"]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120110031a877008c41001161c07010203010902"], &(0x7f00000008c0)={0x0, 0x0, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f0f00010a100300000039000000aef3009de6c05524c22206060a9a46aac1b6c7a0f0b31a0499968fa1d9932ee71833f3c933974fd806429c985e0d71e4688c519264097409fbf9cd38853f24d579d1b24f8dec88f23e4cad80377f9e4773622845a2891feb8c14dd2dd3b0c44812fc5fd4f9a8861d3ca47594465e32a69b15007e0b000000000000004d0c3f2d6a1a4c14ed8e73db1e5a4408fed58169abb7ac6fbfa0268db041cb69fc63e4425e9c8784c99edf2c24e339c50710b54178bebf305c7b1bb59413130f488f05f02e68c1cadae3a030ec6b8a19d64e286642445d9434fab025b0a21490a1ec0392b4"], 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x0, 0x48, &(0x7f0000000400)=ANY=[@ANYBLOB="120100003d36d840890457e0d656000000010902360003000000000904"], 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'geneve0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000100)={0x18, 0x4000000, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'wg2\x00'}}) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x7) 3.390507127s ago: executing program 0 (id=2574): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x3}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x2) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x15, r4, 0x1, 0x1, 0x6, @random="31e223308d2f"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) r6 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000000380), 0x0) syz_io_uring_setup(0x231, &(0x7f00000004c0)={0x0, 0xc6b6, 0x1000, 0x200, 0x302}, &(0x7f0000000200), &(0x7f00000003c0)) r7 = socket(0x1e, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r7, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/20, 0x14}], 0x1, &(0x7f0000000540)=""/87, 0x57}, 0x1ff}], 0x1, 0x22, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x101, 0x4, 0x6, 0xfffffffa, 0x8, 0x6}, 0x20) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40181) 3.193117777s ago: executing program 6 (id=2575): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8000000}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2.005906261s ago: executing program 6 (id=2576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000200), 0x0}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e150100fff30000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r9, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae6014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'F\b1', 0x20, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x2, 0x3ff, 0x0, 0x3, 0x2, 0x4, 0x3, 0x100, 0xffff, 0x1, 0x4e23, 0x4e24}}}}}}}}}, 0x0) 1.828942997s ago: executing program 0 (id=2577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffff1b0001000000000000000000ff000000c2c911b7b3269b834d21b103a91fa561d320bd48b6f7d643733020ac2c7ade3cca395ada19f2ae9c9c9f6dadb49f37569cd90d27684260ed52aaa1d3efa26c9699603d08a0850679832d767d6fe133ceee00d44734e2daa2138678b1812b975fbf5cb8890dbc90b098d3a8460afe0002fc23c6022ce7292267ca00e6516aa80d98e610d9a863dde7d4e27d29a5658a972db1606bfdc812a4602803940231cb57a179f497cb8a6d201631e41f944b249886e232840dab38b426b7c7d2383f9b7657d076"], 0x14}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x3, 0x305c}) 1.595838691s ago: executing program 1 (id=2578): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x0, 0xfffffffc) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) read$msr(r5, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0267cfb8ff73958ee59966ae3c89473153992200fcdbdf2508000500"], 0x14}, 0x1, 0x0, 0x0, 0x4000c}, 0x4044080) setpriority(0x2, 0x0, 0x4) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x85a, 0x0, 0xffffffffffff8001}, {0xa63, 0x0, 0x7fffffffffffffff}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) socket$inet6(0xa, 0x2, 0x3a) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1.548367161s ago: executing program 0 (id=2579): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 567.459815ms ago: executing program 3 (id=2580): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x3}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x2) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x15, r4, 0x1, 0x1, 0x6, @random="31e223308d2f"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) r6 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f0000000380), 0x0) syz_io_uring_setup(0x231, &(0x7f00000004c0)={0x0, 0xc6b6, 0x1000, 0x200, 0x302}, &(0x7f0000000200), &(0x7f00000003c0)) r7 = socket(0x1e, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r7, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/20, 0x14}], 0x1, &(0x7f0000000540)=""/87, 0x57}, 0x1ff}], 0x1, 0x22, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x101, 0x4, 0x6, 0xfffffffa, 0x8, 0x6}, 0x20) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40181) 337.937614ms ago: executing program 0 (id=2581): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080), 0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00ff9000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) 0s ago: executing program 1 (id=2582): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0xffffffffffffffff, 0xe6368f3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x103000, &(0x7f0000000580)=ANY=[@ANYBLOB='=', @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2062) syz_fuse_handle_req(r1, &(0x7f0000004300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5bacabb8d965689422588ee102d6a6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80cee51e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf44c92026b5be1ad6933ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b6", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x9, {0x3, 0x4000000000, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x8000, 0x0, 0x0, r2, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x1000a080, 0x0, 0x10, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlink(&(0x7f0000000100)='./file0/file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42544, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}}, 0x24}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002400010013bd7000fcdbdf25ff03000006000300000000000600040080c9"], 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) kernel console output (not intermixed with test programs): d [ 662.849473][ T116] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 662.875121][ T116] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 662.969368][ T116] usb 2-1: USB disconnect, device number 55 [ 663.056707][ T5916] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 663.485306][ T5916] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 663.930244][T13360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.956292][T13360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.060045][T13363] xt_l2tp: wrong L2TP version: 0 [ 664.266438][ T5873] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 664.312484][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 664.503713][T13367] Cannot find del_set index 0 as target [ 664.528312][ T5873] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 664.985741][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.998437][ T5873] usb 1-1: config 0 descriptor?? [ 665.060070][T13326] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 665.169077][T13375] 9p: Bad value for 'rfdno' [ 666.172152][ T30] audit: type=1400 audit(2000000382.671:1051): avc: denied { setopt } for pid=13378 comm="syz.1.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 666.250895][ T30] audit: type=1400 audit(2000000382.761:1052): avc: denied { setopt } for pid=13378 comm="syz.1.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 668.883542][ T30] audit: type=1400 audit(2000000385.392:1053): avc: denied { setopt } for pid=13405 comm="syz.3.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 669.119879][T13414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 669.128972][T13414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 669.139963][T13414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 669.149122][T13414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 669.160055][T13414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 669.169041][T13414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 669.182293][T13414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 669.191372][T13414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 669.200401][T13414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 669.516853][ T30] audit: type=1400 audit(2000000386.032:1054): avc: denied { lock } for pid=13405 comm="syz.3.1995" path="socket:[43904]" dev="sockfs" ino=43904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 671.341536][T13326] usb 3-1: device descriptor read/64, error -110 [ 671.682334][T13326] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 671.878175][ T30] audit: type=1400 audit(2000000388.394:1055): avc: denied { map } for pid=13433 comm="syz.0.2002" path="socket:[44013]" dev="sockfs" ino=44013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 672.058853][ T30] audit: type=1400 audit(2000000388.574:1056): avc: denied { ioctl } for pid=13438 comm="syz.4.2003" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 672.681837][ T44] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 672.851760][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 672.868592][ T44] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 672.967681][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 673.017961][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 673.065113][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 673.109354][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.142843][ T44] usb 5-1: config 0 descriptor?? [ 673.256951][T13449] __nla_validate_parse: 21 callbacks suppressed [ 673.256967][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 673.795897][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 673.808856][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 673.844253][ T44] usb 5-1: USB disconnect, device number 49 [ 674.021126][ T5916] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 674.071186][T13461] binder: 13458:13461 ioctl 4018620d 0 returned -22 [ 674.082332][T13461] binder: 13458:13461 ioctl c0306201 200000000540 returned -22 [ 674.520867][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 674.538219][ T5916] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 674.555803][ T5916] usb 2-1: config 0 has no interface number 0 [ 674.570352][ T5916] usb 2-1: config 0 interface 184 has no altsetting 0 [ 674.679918][ T5916] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 674.801842][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.810900][ T5916] usb 2-1: Product: syz [ 674.815095][ T5916] usb 2-1: Manufacturer: syz [ 674.819699][ T5916] usb 2-1: SerialNumber: syz [ 674.839644][ T5916] usb 2-1: config 0 descriptor?? [ 674.850054][ T5916] smsc75xx v1.0.0 [ 675.911227][ T5916] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 675.923987][ T5916] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 675.934206][ T5916] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 675.945833][ T5916] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 676.018074][T13481] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 676.981847][T13326] usb 3-1: device descriptor read/64, error -110 [ 677.173688][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 677.182411][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 677.190344][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 677.198325][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 677.210109][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 677.230924][ T30] audit: type=1400 audit(2000000393.756:1057): avc: denied { mounton } for pid=13495 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 677.269573][T13326] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 677.299766][T13326] usb 3-1: device descriptor read/8, error -32 [ 677.315374][T13495] batadv0 speed is unknown, defaulting to 1000 [ 677.549419][T13326] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 677.639962][T13326] usb 3-1: device descriptor read/8, error -32 [ 677.908168][ T5865] usb 3-1: USB disconnect, device number 45 [ 678.069225][T12191] usb 2-1: USB disconnect, device number 56 [ 679.099804][ T5865] raw-gadget.2 gadget.2: failed to queue resume event [ 679.228642][ T5865] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 679.249024][ T5815] Bluetooth: hci5: command tx timeout [ 679.276709][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 679.296980][ T5865] raw-gadget.2 gadget.2: failed to queue reset event [ 679.599477][ T5865] raw-gadget.2 gadget.2: failed to queue resume event [ 679.668339][ T5865] usb 3-1: device descriptor read/64, error -32 [ 679.788992][ T5865] raw-gadget.2 gadget.2: failed to queue suspend event [ 679.804933][ T5865] raw-gadget.2 gadget.2: failed to queue reset event [ 679.926527][ T5865] raw-gadget.2 gadget.2: failed to queue resume event [ 680.088418][ T5865] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 680.264371][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 680.269004][T13495] chnl_net:caif_netlink_parms(): no params data found [ 680.288786][ T5865] raw-gadget.2 gadget.2: failed to queue reset event [ 680.354033][T13526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2025'. [ 680.377932][T13526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2025'. [ 680.423641][ T5865] raw-gadget.2 gadget.2: failed to queue resume event [ 680.438780][T13526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2025'. [ 680.452919][T13526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2025'. [ 680.479351][T13526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2025'. [ 680.494103][T13526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2025'. [ 680.516667][T13526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2025'. [ 680.566130][ T5865] usb 3-1: device descriptor read/64, error -32 [ 680.754496][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 680.763432][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 680.772554][T13534] netlink: 'syz.1.2022': attribute type 13 has an invalid length. [ 680.780468][T13534] netlink: 'syz.1.2022': attribute type 12 has an invalid length. [ 681.005405][ T5865] raw-gadget.2 gadget.2: failed to queue suspend event [ 681.017642][T13526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2025'. [ 681.026672][ T5865] usb usb3-port1: attempt power cycle [ 681.036766][ T5865] raw-gadget.2 gadget.2: failed to queue disconnect event [ 681.223556][ T5865] raw-gadget.2 gadget.2: failed to queue reset event [ 681.327808][ T5815] Bluetooth: hci5: command tx timeout [ 681.818308][T13540] overlayfs: missing 'workdir' [ 682.220471][ T5865] raw-gadget.2 gadget.2: failed to queue resume event [ 682.236329][ T5865] raw-gadget.2 gadget.2: failed to queue reset event [ 682.424254][ T30] audit: type=1400 audit(2000000398.949:1058): avc: denied { write } for pid=13545 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 682.504809][ T5865] raw-gadget.2 gadget.2: failed to queue resume event [ 682.568334][T13357] raw-gadget.2 gadget.2: failed to queue suspend event [ 682.619418][ T5865] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 682.622272][T13495] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.634537][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.635999][T13357] raw-gadget.2 gadget.2: failed to queue disconnect event [ 682.642202][T13495] bridge_slave_0: entered allmulticast mode [ 682.656367][T13495] bridge_slave_0: entered promiscuous mode [ 682.664986][T13495] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.672414][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.680337][T13495] bridge_slave_1: entered allmulticast mode [ 682.698634][T13495] bridge_slave_1: entered promiscuous mode [ 682.874312][T13495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.886744][ T5865] usb 3-1: device not accepting address 48, error -71 [ 682.980086][ T6031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.069259][T13495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.485820][ T5815] Bluetooth: hci5: command tx timeout [ 683.580448][T13495] team0: Port device team_slave_0 added [ 683.952863][ T6031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.015227][T13495] team0: Port device team_slave_1 added [ 684.478465][T13495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.486500][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.645998][T13495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.908199][ T6031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.945741][ T5886] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 684.984462][T13495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.014768][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.105790][T13495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.125756][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 685.172228][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.179475][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.595304][ T5815] Bluetooth: hci5: command tx timeout [ 685.602402][ T6031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.625542][ T5886] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 685.633705][ T5886] usb 5-1: config 0 has no interface number 0 [ 685.664144][ T5886] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 685.725000][ T5886] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 685.804602][ T5886] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 685.826788][T13495] hsr_slave_0: entered promiscuous mode [ 685.853377][T13495] hsr_slave_1: entered promiscuous mode [ 685.859647][ T5886] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 685.887959][T13495] debugfs: 'hsr0' already exists in 'hsr' [ 685.893685][T13495] Cannot create hsr debugfs directory [ 685.936691][ T5886] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 685.971899][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.997262][ T5886] usb 5-1: Product: syz [ 686.015163][ T5886] usb 5-1: Manufacturer: syz [ 686.025804][ T5886] usb 5-1: SerialNumber: syz [ 686.065676][ T5886] usb 5-1: config 0 descriptor?? [ 686.081291][T13567] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 686.104293][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input64 [ 686.559560][T13591] __nla_validate_parse: 156 callbacks suppressed [ 686.559594][T13591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2036'. [ 686.768396][ T6031] bridge_slave_1: left allmulticast mode [ 686.774259][ T6031] bridge_slave_1: left promiscuous mode [ 686.835910][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.945606][ T6031] bridge_slave_0: left allmulticast mode [ 686.974297][ T6031] bridge_slave_0: left promiscuous mode [ 687.043691][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.675571][T13585] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 689.344779][ T10] usb 5-1: USB disconnect, device number 50 [ 690.977078][T13495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 690.997015][T13495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 691.038479][T13495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 692.461190][ T6031] hsr_slave_0: left promiscuous mode [ 692.508271][ T6031] hsr_slave_1: left promiscuous mode [ 692.525806][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.666106][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.983263][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.035458][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.154844][ T6031] veth1_macvtap: left promiscuous mode [ 693.237714][T13684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2058'. [ 693.438592][ T6031] veth0_macvtap: left promiscuous mode [ 693.461754][ T6031] veth1_vlan: left promiscuous mode [ 693.579179][ T6031] veth0_vlan: left promiscuous mode [ 694.443276][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 694.494616][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 694.995311][T13495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 695.084228][T13684] –: renamed from vxcan1 (while UP) [ 695.678057][T13495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.760033][T13495] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.772490][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.779566][ T9542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.853724][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.860860][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.876101][ T6031] IPVS: stop unused estimator thread 0... [ 695.979289][T13713] syzkaller0: entered promiscuous mode [ 695.997162][T13713] syzkaller0: entered allmulticast mode [ 696.752357][T13495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.974043][T13746] netlink: 'syz.0.2067': attribute type 10 has an invalid length. [ 696.981907][T13746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2067'. [ 697.012115][T13746] batadv0: entered promiscuous mode [ 697.017317][T13746] batadv0: entered allmulticast mode [ 697.024995][ T30] audit: type=1400 audit(2000000413.556:1059): avc: denied { getopt } for pid=13736 comm="syz.3.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 697.061873][T13746] bridge0: port 3(batadv0) entered blocking state [ 697.094268][T13746] bridge0: port 3(batadv0) entered disabled state [ 697.262041][T13755] batadv0 speed is unknown, defaulting to 1000 [ 697.378598][T13757] netlink: 'syz.1.2065': attribute type 10 has an invalid length. [ 697.409720][T13495] veth0_vlan: entered promiscuous mode [ 697.447691][T13757] syz_tun: entered promiscuous mode [ 697.502818][T13495] veth1_vlan: entered promiscuous mode [ 697.529730][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 697.539194][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 697.765005][T13495] veth0_macvtap: entered promiscuous mode [ 697.787051][T13495] veth1_macvtap: entered promiscuous mode [ 698.009713][ T30] audit: type=1400 audit(2000000414.537:1060): avc: denied { write } for pid=13763 comm="syz.0.2069" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 698.089280][ T30] audit: type=1400 audit(2000000414.537:1061): avc: denied { open } for pid=13763 comm="syz.0.2069" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 698.169092][ T30] audit: type=1400 audit(2000000414.617:1062): avc: denied { ioctl } for pid=13763 comm="syz.0.2069" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 698.306744][T13495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.364849][T13495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.481562][ T9542] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.506877][ T9542] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.570703][ T9542] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.824201][ T9542] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.304723][ T6031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.347569][ T6031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.445137][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.487133][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.779995][ T30] audit: type=1400 audit(2000000416.318:1063): avc: denied { mounton } for pid=13495 comm="syz-executor" path="/root/syzkaller.GLuqiL/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 699.893438][ T30] audit: type=1400 audit(2000000416.348:1064): avc: denied { mount } for pid=13495 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 699.980456][ T30] audit: type=1400 audit(2000000416.348:1065): avc: denied { mounton } for pid=13495 comm="syz-executor" path="/root/syzkaller.GLuqiL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 700.098456][ T30] audit: type=1400 audit(2000000416.348:1066): avc: denied { mounton } for pid=13495 comm="syz-executor" path="/root/syzkaller.GLuqiL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 700.216861][ T30] audit: type=1400 audit(2000000416.418:1067): avc: denied { mounton } for pid=13495 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 700.402234][T13799] ufs: You didn't specify the type of your ufs filesystem [ 700.402234][T13799] [ 700.402234][T13799] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 700.402234][T13799] [ 700.402234][T13799] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 700.433622][T13799] ufs: ufstype=old is supported read-only [ 700.441785][T13799] ufs: ufs_fill_super(): bad magic number [ 700.852163][ T30] audit: type=1400 audit(2000000416.418:1068): avc: denied { mounton } for pid=13495 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 702.652667][T13824] Cannot find del_set index 0 as target [ 703.258677][ T5916] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 703.436585][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 703.499286][ T5916] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 703.761351][ T5916] usb 4-1: config 0 has no interface number 0 [ 703.767701][ T5916] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 703.778755][ T5916] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 703.791061][ T5916] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 703.801841][ T5916] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.844905][ T5916] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 703.857574][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.001302][ T5916] usb 4-1: Product: syz [ 704.056395][ T5916] usb 4-1: Manufacturer: syz [ 704.076040][ T5916] usb 4-1: SerialNumber: syz [ 704.098859][ T5916] usb 4-1: config 0 descriptor?? [ 704.118982][T13830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 704.172496][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input65 [ 704.593945][T13842] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2083'. [ 704.932643][ T5886] usb 4-1: USB disconnect, device number 47 [ 705.453292][T13846] overlayfs: missing 'workdir' [ 705.852688][T13848] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-ç/": -EINTR [ 706.618903][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 706.637409][ T5886] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 706.674671][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 707.077341][ T5886] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 707.099400][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.129974][ T5886] usb 4-1: Product: syz [ 707.134149][ T5886] usb 4-1: Manufacturer: syz [ 707.144551][ T5886] usb 4-1: SerialNumber: syz [ 707.309494][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2088'. [ 707.625340][T13856] wireguard1: entered promiscuous mode [ 707.630885][T13856] wireguard1: entered allmulticast mode [ 707.730568][ T10] IPVS: starting estimator thread 0... [ 707.776328][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 707.790539][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 707.802360][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 707.815161][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 707.829356][ T5886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 707.855127][ T5886] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 707.874287][T13877] IPVS: using max 49 ests per chain, 117600 per kthread [ 707.891788][ T5886] usb 4-1: USB disconnect, device number 48 [ 708.167255][T13881] IPVS: set_ctl: invalid protocol: 0 10.1.1.9:20001 [ 709.512133][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'. [ 711.144462][T13910] sg_write: data in/out 65489/38 bytes for SCSI command 0x8-- guessing data in; [ 711.144462][T13910] program syz.1.2105 not setting count and/or reply_len properly [ 711.765389][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 712.127593][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 712.139949][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 712.248097][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.256399][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.381377][T13922] batadv0 speed is unknown, defaulting to 1000 [ 712.470395][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2109'. [ 713.174477][T13951] overlayfs: missing 'lowerdir' [ 713.287501][T13922] chnl_net:caif_netlink_parms(): no params data found [ 713.569978][T13963] binder: 13958:13963 ioctl c0306201 0 returned -14 [ 713.578405][T13963] binder: 13958:13963 ioctl c0306201 200000000540 returned -22 [ 714.043942][T13922] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.071436][T13922] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.096540][T13922] bridge_slave_0: entered allmulticast mode [ 714.126206][T13922] bridge_slave_0: entered promiscuous mode [ 714.156200][T13967] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 714.169746][T13922] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.201088][T13922] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.274954][T13922] bridge_slave_1: entered allmulticast mode [ 714.362469][ T5816] Bluetooth: hci0: command tx timeout [ 714.438032][T13922] bridge_slave_1: entered promiscuous mode [ 715.244879][T13922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.252589][ T9542] wlan0: Trigger new scan to find an IBSS to join [ 715.290319][T13922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.349770][T13922] team0: Port device team_slave_0 added [ 715.404296][T13922] team0: Port device team_slave_1 added [ 715.428885][T13984] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 715.435414][T13984] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 715.465079][T13922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.480404][T13922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.519813][T13984] vhci_hcd vhci_hcd.0: Device attached [ 715.564368][T13922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.619612][T13922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.646529][T13922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.690324][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 715.745354][T13922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.760251][ T10] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 715.770203][ T5916] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 715.893001][T13922] hsr_slave_0: entered promiscuous mode [ 715.915397][T13922] hsr_slave_1: entered promiscuous mode [ 715.923669][ T30] audit: type=1400 audit(2000000432.466:1069): avc: denied { mounton } for pid=13990 comm="syz.0.2119" path="/449/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 715.926249][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 715.981774][T13922] debugfs: 'hsr0' already exists in 'hsr' [ 716.006002][T13922] Cannot create hsr debugfs directory [ 716.017274][ T30] audit: type=1400 audit(2000000432.496:1070): avc: denied { mounton } for pid=13990 comm="syz.0.2119" path="/449/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 716.055541][ T5916] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 716.080163][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.133488][ T30] audit: type=1400 audit(2000000432.576:1071): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 716.152289][ T5916] usb 2-1: config 0 descriptor?? [ 716.171496][ T5916] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 716.237634][ T30] audit: type=1400 audit(2000000432.666:1072): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 716.366540][ T5916] usb 2-1: Detected FT232A [ 716.375173][ T5916] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 716.430161][ T5816] Bluetooth: hci0: command tx timeout [ 716.516720][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'. [ 717.206278][ T44] usb 2-1: USB disconnect, device number 57 [ 717.213356][T13985] vhci_hcd: connection reset by peer [ 717.222400][ T9542] vhci_hcd vhci_hcd.1: stop threads [ 717.229049][ T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 717.239475][ T9542] vhci_hcd vhci_hcd.1: release socket [ 717.268697][ T9542] vhci_hcd vhci_hcd.1: disconnect device [ 717.285805][ T44] ftdi_sio 2-1:0.0: device disconnected [ 717.891686][T13922] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 718.074005][T13922] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 718.567366][ T5816] Bluetooth: hci0: command tx timeout [ 718.577290][ T9698] wlan0: Trigger new scan to find an IBSS to join [ 718.625680][T13922] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 718.673593][T13922] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 719.603456][T13922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.529932][T14053] input: syz1 as /devices/virtual/input/input66 [ 720.540471][T13922] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.567169][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.574329][ T9542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.617190][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.624323][ T9542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.638629][ T5816] Bluetooth: hci0: command tx timeout [ 721.027663][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 721.181749][ T9542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.272557][T13922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.364059][T13922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 722.737127][T13922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.854261][T14095] tmpfs: Unknown parameter 'ná—„ixÈ Y:Vi Õr_blocks' [ 723.462174][T14113] sg_write: data in/out 62939/38 bytes for SCSI command 0x8-- guessing data in; [ 723.462174][T14113] program syz.0.2140 not setting count and/or reply_len properly [ 723.473142][T14112] Bluetooth: MGMT ver 1.23 [ 723.766215][ T5916] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 724.836245][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 724.848305][ T5916] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 724.872590][ T5916] usb 4-1: config 0 has no interface number 0 [ 724.902320][ T5916] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 724.918438][T13922] veth0_vlan: entered promiscuous mode [ 724.942031][ T5916] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 724.962261][T13922] veth1_vlan: entered promiscuous mode [ 724.987789][ T5916] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 725.019166][ T5916] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.052847][T13922] veth0_macvtap: entered promiscuous mode [ 725.068853][ T5916] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 725.093690][T13922] veth1_macvtap: entered promiscuous mode [ 725.100775][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.134716][ T5916] usb 4-1: Product: syz [ 725.149228][ T5916] usb 4-1: Manufacturer: syz [ 725.155402][T13922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.174964][ T5916] usb 4-1: SerialNumber: syz [ 725.195149][ T5916] usb 4-1: config 0 descriptor?? [ 725.203407][T13922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.214209][T14115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 725.231906][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input67 [ 725.254632][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.300937][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.376657][ C1] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 725.377761][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.464803][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.612207][T14138] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2141'. [ 725.909879][ T10] usb 4-1: USB disconnect, device number 49 [ 725.924061][ T9698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.951057][ T9698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.056024][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.085492][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.266081][ T44] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 727.446043][ T44] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 727.474936][ T44] usb 4-1: config 0 has no interface number 0 [ 727.491911][ T44] usb 4-1: too many endpoints for config 0 interface 153 altsetting 48: 120, using maximum allowed: 30 [ 727.524822][T14163] tmpfs: Unknown parameter 'ná—„ixÈ Y:Vi Õr_blocks' [ 727.566707][ T44] usb 4-1: config 0 interface 153 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 727.614379][ T44] usb 4-1: config 0 interface 153 has no altsetting 0 [ 727.648271][ T44] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 727.700165][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.776596][ T44] usb 4-1: Product: syz [ 727.814019][ T44] usb 4-1: Manufacturer: syz [ 727.856993][ T44] usb 4-1: SerialNumber: syz [ 727.934516][ T44] usb 4-1: config 0 descriptor?? [ 728.124037][ T30] audit: type=1400 audit(2000000444.662:1073): avc: denied { create } for pid=14169 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 728.155933][T14171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2153'. [ 728.195146][ T44] sierra 4-1:0.153: Sierra USB modem converter detected [ 728.195251][ T30] audit: type=1400 audit(2000000444.702:1074): avc: denied { write } for pid=14169 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 728.775271][ T44] usb 4-1: USB disconnect, device number 50 [ 728.805263][ T44] sierra 4-1:0.153: device disconnected [ 729.132486][ T30] audit: type=1326 audit(2000000445.672:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e479aeb9 code=0x7ffc0000 [ 729.209259][ T30] audit: type=1326 audit(2000000445.672:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e479aeb9 code=0x7ffc0000 [ 729.241234][ T30] audit: type=1326 audit(2000000445.722:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e479aeb9 code=0x7ffc0000 [ 729.335517][ T30] audit: type=1326 audit(2000000445.722:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e479aeb9 code=0x7ffc0000 [ 729.362816][ T30] audit: type=1326 audit(2000000445.722:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e479aeb9 code=0x7ffc0000 [ 729.648633][ T30] audit: type=1326 audit(2000000445.722:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e479aeb9 code=0x7ffc0000 [ 729.913722][ T30] audit: type=1326 audit(2000000445.722:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e479aeb9 code=0x7ffc0000 [ 729.991497][ T30] audit: type=1326 audit(2000000445.722:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e479aeb9 code=0x7ffc0000 [ 730.673178][T14209] xt_l2tp: wrong L2TP version: 0 [ 731.128455][T14213] tmpfs: Unknown parameter 'ná—„ixÈ Y:Vi Õr_blocks' [ 731.535395][ T5886] IPVS: starting estimator thread 0... [ 731.632775][T14226] IPVS: using max 77 ests per chain, 184800 per kthread [ 732.567883][T14231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=14231 comm=syz.1.2169 [ 734.113025][T14245] xt_l2tp: wrong L2TP version: 0 [ 734.142645][ T5886] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 734.370460][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 734.614854][ T5886] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 734.680812][ T5886] usb 7-1: config 0 has no interface number 0 [ 734.710128][ T5886] usb 7-1: config 0 interface 235 altsetting 1 endpoint 0x2 has invalid maxpacket 528, setting to 64 [ 734.734910][ T5886] usb 7-1: config 0 interface 235 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 734.748377][T14255] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 734.748423][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 735.202089][T14260] overlayfs: missing 'workdir' [ 735.590531][ T5886] usb 7-1: config 0 interface 235 has no altsetting 0 [ 735.598426][T14262] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-ç/": -EINTR [ 735.605102][T14255] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2175'. [ 735.681599][ T5886] usb 7-1: New USB device found, idVendor=12d1, idProduct=32f0, bcdDevice=e8.55 [ 735.694315][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.722411][ T5886] usb 7-1: Product: syz [ 735.726660][ T5886] usb 7-1: Manufacturer: syz [ 735.732649][ T5886] usb 7-1: SerialNumber: syz [ 735.748405][ T5886] usb 7-1: config 0 descriptor?? [ 736.010837][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 736.010854][ T30] audit: type=1400 audit(2000000452.556:1088): avc: denied { write } for pid=14241 comm="syz.6.2172" path="socket:[50844]" dev="sockfs" ino=50844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 736.142724][T14242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.151856][T14242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.200786][ T5886] option 7-1:0.235: GSM modem (1-port) converter detected [ 737.225823][ T5886] usb 7-1: USB disconnect, device number 2 [ 737.277432][ T5886] option 7-1:0.235: device disconnected [ 737.529000][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2181'. [ 740.166398][T14301] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 740.862616][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 740.877887][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 740.886454][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 740.895444][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 740.903062][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 740.910068][ T30] audit: type=1400 audit(2000000457.458:1089): avc: denied { append } for pid=14308 comm="syz.3.2190" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 740.945945][T14312] 9p: Bad value for 'rfdno' [ 741.093920][T14309] batadv0 speed is unknown, defaulting to 1000 [ 742.981497][ T5815] Bluetooth: hci6: command tx timeout [ 743.473272][ T30] audit: type=1400 audit(2000000459.739:1090): avc: denied { audit_write } for pid=14341 comm="syz.0.2196" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 743.523675][T14309] chnl_net:caif_netlink_parms(): no params data found [ 744.339459][T14309] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.368988][T14309] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.393231][T14309] bridge_slave_0: entered allmulticast mode [ 744.439968][T14309] bridge_slave_0: entered promiscuous mode [ 744.468836][T14309] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.489989][T14309] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.505294][T14309] bridge_slave_1: entered allmulticast mode [ 744.532707][T14309] bridge_slave_1: entered promiscuous mode [ 744.829950][T14309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.092134][ T5815] Bluetooth: hci6: command tx timeout [ 745.106731][T14309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.451569][T14361] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4080425630 (4080425630 ns) > initial count (3745842588 ns). Using initial count to start timer. [ 745.477128][T14361] kvm: kvm [14360]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 745.486006][T14361] kvm: kvm [14360]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 745.503922][T14361] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 745.611402][T14309] team0: Port device team_slave_0 added [ 745.891140][T14309] team0: Port device team_slave_1 added [ 745.942688][T14309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.950655][T14309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.101777][T14380] sg_write: data in/out 65489/38 bytes for SCSI command 0x8-- guessing data in; [ 746.101777][T14380] program syz.6.2204 not setting count and/or reply_len properly [ 746.350537][T14309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.410667][T14309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.449902][T14309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.582536][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.589748][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.616386][T14309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.658768][T14382] tmpfs: Unknown parameter 'ná—„ixÈ Y:Vi Õr_blocks' [ 747.412142][ T5815] Bluetooth: hci6: command tx timeout [ 747.438688][T14309] hsr_slave_0: entered promiscuous mode [ 747.450460][T14309] hsr_slave_1: entered promiscuous mode [ 747.462960][T14309] debugfs: 'hsr0' already exists in 'hsr' [ 747.936468][T14309] Cannot create hsr debugfs directory [ 748.553828][T12191] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 748.802292][T12191] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 748.838541][T12191] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 748.882069][T12191] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.911841][T14309] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 748.954972][T12191] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.007502][T12191] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.095028][T14309] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 749.305815][T12191] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 749.308240][T14309] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 749.322420][T12191] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.345715][T14309] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 749.374372][T12191] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.453794][ T5815] Bluetooth: hci6: command tx timeout [ 749.460510][T12191] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.508052][T12191] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.552613][T12191] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 749.580665][T12191] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.624740][T12191] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.669157][T12191] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.742102][T14425] sg_write: data in/out 65489/38 bytes for SCSI command 0x8-- guessing data in; [ 749.742102][T14425] program syz.0.2214 not setting count and/or reply_len properly [ 749.861049][T12191] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 750.043080][T12191] usb 2-1: string descriptor 0 read error: -22 [ 750.050072][T12191] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 750.109447][T12191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.350185][T12191] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 750.506632][T14309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.516260][ T5865] usb 2-1: USB disconnect, device number 58 [ 750.850546][T14309] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.866204][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.873362][ T9698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.916402][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.923578][ T9698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.392612][ T5886] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 751.467566][T14309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.496527][T14458] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 751.865625][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 752.020897][ T5886] usb 7-1: config 0 has an invalid interface number: 88 but max is 3 [ 752.052395][ T5886] usb 7-1: config 0 has an invalid interface number: 250 but max is 3 [ 752.072085][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.113431][ T5886] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 752.143386][ T5886] usb 7-1: config 0 has no interface number 0 [ 752.287536][ T5886] usb 7-1: config 0 has no interface number 1 [ 752.310336][ T5886] usb 7-1: config 0 interface 88 has no altsetting 0 [ 752.347523][ T5886] usb 7-1: config 0 interface 250 has no altsetting 0 [ 752.369527][ T5886] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 752.410115][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.450827][ T5886] usb 7-1: config 0 descriptor?? [ 752.775492][T14442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.794842][T14442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.881699][ T5886] usb 7-1: string descriptor 0 read error: -71 [ 752.930752][ T5886] usb 7-1: selecting invalid altsetting 0 [ 752.964024][ T5886] usb 7-1: Could not set interface, error -22 [ 753.099308][T14309] veth0_vlan: entered promiscuous mode [ 753.106311][ T5886] usb 7-1: USB disconnect, device number 3 [ 753.136294][T14309] veth1_vlan: entered promiscuous mode [ 753.218386][T14476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2226'. [ 753.569279][T14309] veth0_macvtap: entered promiscuous mode [ 753.584032][T14309] veth1_macvtap: entered promiscuous mode [ 753.613089][ T9698] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 753.626190][T14309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.652914][T14309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.668841][ T9703] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.683403][ T9703] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.832354][ T9703] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.845139][ T9703] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.201027][ T9703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.256254][ T9703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.325595][T14483] Cannot find del_set index 0 as target [ 754.364381][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.386597][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.518719][T14493] sg_write: data in/out 768/26 bytes for SCSI command 0x0-- guessing data in; [ 754.518719][T14493] program syz.1.2232 not setting count and/or reply_len properly [ 754.600945][T12191] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 754.652478][T14499] xt_l2tp: wrong L2TP version: 0 [ 754.868937][T12191] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 754.903596][T12191] usb 4-1: config 4 has no interface number 0 [ 754.936238][T12191] usb 4-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 754.988489][T12191] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 755.040334][T12191] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 755.071393][T12191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.118033][T12191] usb 4-1: Product: syz [ 755.160351][T12191] usb 4-1: Manufacturer: syz [ 755.182656][T12191] usb 4-1: SerialNumber: syz [ 755.197369][T14512] tmpfs: Unknown parameter 'mp' [ 755.855032][T12191] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 755.956590][T12191] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 756.015810][T12191] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 756.062289][T12191] usb 4-1: media controller created [ 756.095911][T12191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 756.386425][T12191] DVB: Unable to find symbol dib7000p_attach() [ 756.401697][T12191] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 756.540092][T12191] rc_core: IR keymap rc-dib0700-rc5 not found [ 756.550951][T12191] Registered IR keymap rc-empty [ 756.559903][ T44] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 756.577831][T12191] dvb-usb: could not initialize remote control. [ 756.599811][T12191] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 756.829699][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 756.841849][T12191] usb 4-1: USB disconnect, device number 51 [ 756.870779][ T44] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 756.878962][ T44] usb 2-1: config 0 has no interface number 0 [ 756.914122][T12191] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 756.946886][ T44] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 757.008482][ T44] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 757.067856][ T44] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 757.119639][ T44] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.212127][ T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 757.234121][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.269593][ T44] usb 2-1: Product: syz [ 757.295710][ T44] usb 2-1: Manufacturer: syz [ 757.309786][ T44] usb 2-1: SerialNumber: syz [ 757.355234][ T44] usb 2-1: config 0 descriptor?? [ 757.393618][T14528] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 757.543376][ T30] audit: type=1400 audit(2000000474.076:1091): avc: denied { read write } for pid=14536 comm="syz.3.2244" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 757.975523][T14547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2241'. [ 758.222733][ T44] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input69 [ 758.242726][ T30] audit: type=1400 audit(2000000474.076:1092): avc: denied { open } for pid=14536 comm="syz.3.2244" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 758.346089][ T44] usb 2-1: USB disconnect, device number 59 [ 758.346149][ C0] bcm5974 2-1:0.119: trackpad urb failed: -19 [ 758.401168][ T30] audit: type=1400 audit(2000000474.146:1093): avc: denied { ioctl } for pid=14536 comm="syz.3.2244" path="/dev/usbmon4" dev="devtmpfs" ino=728 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 758.438393][T14549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2246'. [ 758.538841][ T30] audit: type=1400 audit(2000000474.997:1094): avc: denied { append } for pid=14548 comm="syz.3.2246" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 759.588649][ T5916] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 759.741666][ T5916] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 759.762698][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.772653][ T5916] usb 2-1: Product: syz [ 759.788205][ T5916] usb 2-1: Manufacturer: syz [ 759.804356][ T5916] usb 2-1: SerialNumber: syz [ 760.191772][T14557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2250'. [ 760.341236][T14577] fuse: Bad value for 'fd' [ 760.769225][ T5916] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 760.802884][T12817] udevd[12817]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 760.812944][ T5916] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 760.834026][ T5886] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 760.885518][ T5916] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 760.909149][ T5916] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 760.946090][ T5916] usb 2-1: USB disconnect, device number 60 [ 761.032321][ T5886] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.054527][ T5886] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 761.073972][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 761.082515][ T5886] usb 7-1: Product: syz [ 761.086717][ T5886] usb 7-1: Manufacturer: syz [ 761.100430][ T5886] usb 7-1: SerialNumber: syz [ 761.184996][ T30] audit: type=1400 audit(2000000477.748:1095): avc: denied { read } for pid=14578 comm="syz.3.2256" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 761.197502][ T5811] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 761.246139][T14587] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 761.259504][T14587] block device autoloading is deprecated and will be removed. [ 761.317588][ T30] audit: type=1400 audit(2000000477.748:1096): avc: denied { open } for pid=14578 comm="syz.3.2256" path="/453/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 761.342588][ T5886] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 761.425237][T14581] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2257'. [ 761.438923][ T5811] usb 8-1: Using ep0 maxpacket: 32 [ 761.461163][ T5811] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 761.481727][T14581] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2257'. [ 761.511818][ T5811] usb 8-1: config 0 has no interface number 0 [ 761.523341][ T5811] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 761.546129][ T5811] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 761.546264][T14581] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2257'. [ 761.558126][ T5811] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 761.689819][ T5811] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.706218][ T5811] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 761.717319][T14581] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2257'. [ 761.758079][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.768186][ T10] usb 7-1: USB disconnect, device number 4 [ 761.778115][ T5811] usb 8-1: Product: syz [ 761.783654][ T5811] usb 8-1: Manufacturer: syz [ 761.789307][ T10] usblp0: removed [ 761.794191][ T5811] usb 8-1: SerialNumber: syz [ 761.818107][ T5811] usb 8-1: config 0 descriptor?? [ 761.832563][T14585] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 761.853980][ T5811] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.119/input/input70 [ 762.780447][T14605] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2258'. [ 764.496098][ T44] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 764.705950][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 764.742692][ T44] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 764.779531][ T44] usb 7-1: config 0 has no interface number 0 [ 764.803116][ T44] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 764.840794][ T44] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 764.881016][ T44] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 764.907988][ T44] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 764.955017][ T44] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 764.964107][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.990926][ T44] usb 7-1: Product: syz [ 765.002022][ T44] usb 7-1: Manufacturer: syz [ 765.016688][ T44] usb 7-1: SerialNumber: syz [ 765.036024][ T44] usb 7-1: config 0 descriptor?? [ 765.053164][T14612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 765.065616][ T44] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input71 [ 765.736415][T14605] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.743724][T14605] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.776671][T14620] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2264'. [ 766.002270][T14624] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 766.006566][T14620] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.017118][T14620] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.038895][ T5866] usb 8-1: USB disconnect, device number 2 [ 766.585351][ T30] audit: type=1400 audit(2000000483.151:1097): avc: denied { ioctl } for pid=14628 comm="syz.1.2268" path="socket:[52959]" dev="sockfs" ino=52959 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 767.084637][ T44] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 767.584575][ T5811] usb 7-1: USB disconnect, device number 5 [ 767.634461][ T44] usb 8-1: device descriptor read/64, error -71 [ 767.884171][ T44] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 768.054278][ T44] usb 8-1: device descriptor read/64, error -71 [ 768.188009][ T44] usb usb8-port1: attempt power cycle [ 768.545478][ T44] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 768.578190][ T44] usb 8-1: device descriptor read/8, error -71 [ 769.070528][ T44] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 769.118685][ T44] usb 8-1: device descriptor read/8, error -71 [ 769.155926][T14665] Process accounting resumed [ 769.244138][ T44] usb usb8-port1: unable to enumerate USB device [ 769.537496][T14674] Bluetooth: hci0: invalid len left 7, exp >= 121 [ 773.514831][T14717] xt_l2tp: wrong L2TP version: 0 [ 773.959197][T14726] sg_write: data in/out 65489/38 bytes for SCSI command 0x8-- guessing data in; [ 773.959197][T14726] program syz.1.2297 not setting count and/or reply_len properly [ 774.769067][T14733] binder: 14730:14733 ioctl c0306201 200000000540 returned -14 [ 775.463699][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2303'. [ 775.472659][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2303'. [ 775.481648][T14743] netlink: 'syz.6.2303': attribute type 13 has an invalid length. [ 775.489466][T14743] netlink: 'syz.6.2303': attribute type 12 has an invalid length. [ 776.568327][T14753] netlink: 'syz.3.2302': attribute type 12 has an invalid length. [ 776.959596][ T5886] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 777.172849][ T5886] usb 8-1: device descriptor read/64, error -71 [ 777.509681][ T5886] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 777.560695][T14768] netlink: 'syz.6.2308': attribute type 1 has an invalid length. [ 777.625510][T14768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 777.655590][T14768] bond1: (slave gretap1): making interface the new active one [ 777.669262][ T5886] usb 8-1: device descriptor read/64, error -71 [ 777.725965][T14768] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 777.778348][T14769] qnx6: unable to read the first superblock [ 777.785267][T14769] qnx6: unable to read the first superblock [ 777.792548][T14769] qnx6: unable to read the first superblock [ 777.864372][ T5886] usb usb8-port1: attempt power cycle [ 778.057089][T14774] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 778.409041][ T5886] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 778.454278][ T5886] usb 8-1: device descriptor read/8, error -71 [ 778.468195][ T30] audit: type=1400 audit(2000000495.037:1098): avc: denied { append } for pid=14779 comm="syz.1.2311" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 778.739134][ T5886] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 778.779136][ T5886] usb 8-1: device descriptor read/8, error -71 [ 778.900648][ T5886] usb usb8-port1: unable to enumerate USB device [ 779.523350][T14800] FAULT_INJECTION: forcing a failure. [ 779.523350][T14800] name failslab, interval 1, probability 0, space 0, times 0 [ 779.536040][T14800] CPU: 0 UID: 0 PID: 14800 Comm: syz.0.2316 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.536067][T14800] Tainted: [L]=SOFTLOCKUP [ 779.536074][T14800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 779.536085][T14800] Call Trace: [ 779.536091][T14800] [ 779.536099][T14800] dump_stack_lvl+0x100/0x190 [ 779.536128][T14800] should_fail_ex.cold+0x5/0xa [ 779.536147][T14800] should_failslab+0xc2/0x120 [ 779.536171][T14800] ? tomoyo_realpath_from_path+0xb6/0x690 [ 779.536192][T14800] __kmalloc_noprof+0xf6/0x9c0 [ 779.536217][T14800] ? tomoyo_realpath_from_path+0xb6/0x690 [ 779.536237][T14800] tomoyo_realpath_from_path+0xb6/0x690 [ 779.536263][T14800] tomoyo_path_number_perm+0x23c/0x580 [ 779.536290][T14800] ? tomoyo_path_number_perm+0x22e/0x580 [ 779.536319][T14800] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 779.536348][T14800] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 779.536403][T14800] ? find_held_lock+0x2b/0x80 [ 779.536426][T14800] ? hook_file_ioctl_common+0x146/0x410 [ 779.536448][T14800] ? __fget_files+0x215/0x3d0 [ 779.536474][T14800] ? __fget_files+0x21f/0x3d0 [ 779.536499][T14800] security_file_ioctl+0xd3/0x230 [ 779.536520][T14800] __x64_sys_ioctl+0xb7/0x210 [ 779.536540][T14800] do_syscall_64+0xc9/0xf80 [ 779.536563][T14800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.536581][T14800] RIP: 0033:0x7f99e479aeb9 [ 779.536595][T14800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.536612][T14800] RSP: 002b:00007f99e56e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.536630][T14800] RAX: ffffffffffffffda RBX: 00007f99e4a16180 RCX: 00007f99e479aeb9 [ 779.536642][T14800] RDX: 0000200000000540 RSI: 00000000c0306201 RDI: 0000000000000008 [ 779.536653][T14800] RBP: 00007f99e56e4090 R08: 0000000000000000 R09: 0000000000000000 [ 779.536664][T14800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.536674][T14800] R13: 00007f99e4a16218 R14: 00007f99e4a16180 R15: 00007ffd1ab37368 [ 779.536699][T14800] [ 779.536720][T14800] ERROR: Out of memory at tomoyo_realpath_from_path. [ 779.750974][T14800] binder: 14797:14800 ioctl c0306201 200000000540 returned -14 [ 779.869785][T14801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.717886][ T5811] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 781.172679][ T5811] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 781.217128][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.245994][ T5811] usb 7-1: Product: syz [ 781.262933][ T5811] usb 7-1: Manufacturer: syz [ 781.355924][ T5811] usb 7-1: SerialNumber: syz [ 781.369682][ T5811] usb 7-1: config 0 descriptor?? [ 781.689877][ T44] usb 7-1: USB disconnect, device number 6 [ 781.903172][T14816] netlink: 'syz.6.2321': attribute type 1 has an invalid length. [ 782.271663][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2321'. [ 782.472555][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2321'. [ 782.621524][T14850] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.2330'. [ 782.631201][T14816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 782.687149][T14850] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.2330'. [ 782.713421][T14817] bond2: (slave veth3): Enslaving as an active interface with a down link [ 782.781603][T14845] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 782.850180][T14849] bond2: (slave dummy0): making interface the new active one [ 782.874756][T14849] dummy0: entered promiscuous mode [ 783.000992][T14849] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 783.877551][T14816] bond2 (unregistering): (slave veth3): Releasing active interface [ 783.888427][T14816] bond2 (unregistering): (slave dummy0): Releasing active interface [ 783.899115][T14816] bond2 (unregistering): Released all slaves [ 785.036961][ T30] audit: type=1400 audit(2000000501.610:1099): avc: denied { watch } for pid=14879 comm="syz.1.2342" path="/479" dev="tmpfs" ino=2499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 785.497018][T14891] input: syz1 as /devices/virtual/input/input72 [ 785.598464][ T4540] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 785.992064][ T30] audit: type=1400 audit(2000000502.571:1100): avc: denied { map } for pid=14901 comm="syz.6.2346" path="socket:[54560]" dev="sockfs" ino=54560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 786.384960][ T5865] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 786.894675][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 786.902388][ T5865] usb 7-1: config 0 has an invalid interface number: 129 but max is 0 [ 786.919562][ T5865] usb 7-1: config 0 has no interface number 0 [ 786.957678][ T5865] usb 7-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=11.ab [ 786.966756][ T5886] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 787.085519][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.093653][ T5865] usb 7-1: Product: syz [ 787.129612][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 787.139994][ T5886] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 787.151426][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 787.173905][T14920] binder: 14917:14920 ioctl c0306201 200000000540 returned -14 [ 787.207575][ T5886] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 787.228589][ T5886] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 787.237834][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.247552][ T5886] usb 8-1: Product: syz [ 787.251845][ T5886] usb 8-1: Manufacturer: syz [ 787.258463][ T5886] usb 8-1: SerialNumber: syz [ 787.311769][ T5886] usb 8-1: config 0 descriptor?? [ 787.359516][ T5886] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 787.414355][ T5865] usb 7-1: Manufacturer: syz [ 787.419052][ T5865] usb 7-1: SerialNumber: syz [ 787.475775][ T5865] usb 7-1: config 0 descriptor?? [ 787.754778][ T30] audit: type=1400 audit(2000000504.332:1101): avc: denied { getopt } for pid=14906 comm="syz.6.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 787.759930][ T5811] usb 7-1: USB disconnect, device number 7 [ 787.964530][ T5916] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 787.987357][T14928] fuse: Bad value for 'fd' [ 788.125786][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 788.145677][ T5916] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 788.164337][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 788.184521][ T5916] usb 4-1: Product: syz [ 788.188702][ T5916] usb 4-1: Manufacturer: syz [ 788.203523][ T5916] usb 4-1: SerialNumber: syz [ 788.217029][ T5916] usb 4-1: config 0 descriptor?? [ 788.249779][ T5916] gspca_main: sq905-2.14.0 probing 2770:9120 [ 788.481068][T14933] bridge_slave_0: left allmulticast mode [ 788.527803][T14933] bridge_slave_0: left promiscuous mode [ 788.533610][T14933] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.584574][T14936] netlink: 'syz.6.2354': attribute type 10 has an invalid length. [ 788.621291][T14933] bridge_slave_1: left allmulticast mode [ 788.635144][ T5916] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 788.642779][T14936] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2354'. [ 788.681269][ T5916] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 788.694073][T14933] bridge_slave_1: left promiscuous mode [ 788.714271][ T5916] usb 4-1: USB disconnect, device number 52 [ 788.720706][T14933] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.751638][T14933] bond0: (slave bond_slave_0): Releasing backup interface [ 788.769267][T14933] bond0: (slave bond_slave_1): Releasing backup interface [ 788.802243][T14933] team0: Port device team_slave_0 removed [ 788.813290][T14933] team0: Port device team_slave_1 removed [ 788.820459][T14933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.832123][T14933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.841915][T14933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.860653][T14933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.871731][T14933] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 788.890955][T14936] team0: entered promiscuous mode [ 789.001370][T14936] bridge0: port 1(team0) entered blocking state [ 789.227967][T14936] bridge0: port 1(team0) entered disabled state [ 789.475876][ T5886] scsi host1: usb-storage 8-1:0.0 [ 789.503522][T14936] team0: entered allmulticast mode [ 789.518052][ T5886] usb 8-1: USB disconnect, device number 11 [ 789.609236][T14948] Cannot find del_set index 0 as target [ 789.822116][T14956] xt_l2tp: missing protocol rule (udp|l2tpip) [ 790.013079][T14959] xt_l2tp: wrong L2TP version: 0 [ 790.363682][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2363'. [ 791.327353][T14967] FAULT_INJECTION: forcing a failure. [ 791.327353][T14967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.340393][T14967] CPU: 0 UID: 0 PID: 14967 Comm: syz.7.2364 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.340410][T14967] Tainted: [L]=SOFTLOCKUP [ 791.340413][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 791.340420][T14967] Call Trace: [ 791.340425][T14967] [ 791.340429][T14967] dump_stack_lvl+0x100/0x190 [ 791.340446][T14967] should_fail_ex.cold+0x5/0xa [ 791.340458][T14967] _copy_from_user+0x2e/0xd0 [ 791.340474][T14967] binder_thread_write+0x16f0/0x4d70 [ 791.340490][T14967] ? __lock_acquire+0x4a5/0x2630 [ 791.340501][T14967] ? __pfx_binder_thread_write+0x10/0x10 [ 791.340512][T14967] ? binder_debug+0xe0/0x190 [ 791.340527][T14967] ? __pfx_binder_debug+0x10/0x10 [ 791.340543][T14967] ? binder_debug+0xe0/0x190 [ 791.340557][T14967] ? __pfx_binder_debug+0x10/0x10 [ 791.340574][T14967] ? __might_fault+0xc5/0x140 [ 791.340591][T14967] binder_ioctl+0x28b8/0x7450 [ 791.340605][T14967] ? tomoyo_path_number_perm+0x188/0x580 [ 791.340626][T14967] ? __pfx_binder_ioctl+0x10/0x10 [ 791.340638][T14967] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 791.340655][T14967] ? do_vfs_ioctl+0x226/0x13e0 [ 791.340666][T14967] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 791.340675][T14967] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 791.340688][T14967] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 791.340708][T14967] ? selinux_file_ioctl+0x139/0x290 [ 791.340718][T14967] ? selinux_file_ioctl+0xb4/0x290 [ 791.340730][T14967] ? __pfx_binder_ioctl+0x10/0x10 [ 791.340741][T14967] __x64_sys_ioctl+0x18e/0x210 [ 791.340752][T14967] do_syscall_64+0xc9/0xf80 [ 791.340765][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.340776][T14967] RIP: 0033:0x7f0074f9aeb9 [ 791.340785][T14967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.340796][T14967] RSP: 002b:00007f00731f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.340806][T14967] RAX: ffffffffffffffda RBX: 00007f0075216090 RCX: 00007f0074f9aeb9 [ 791.340813][T14967] RDX: 0000200000000540 RSI: 00000000c0306201 RDI: 0000000000000008 [ 791.340819][T14967] RBP: 00007f00731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 791.340826][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.340832][T14967] R13: 00007f0075216128 R14: 00007f0075216090 R15: 00007ffd84ed9e18 [ 791.340845][T14967] [ 791.340851][T14967] binder: 14964:14967 ioctl c0306201 200000000540 returned -14 [ 793.112151][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2371'. [ 793.121076][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 793.130061][T14993] netlink: 'syz.3.2371': attribute type 13 has an invalid length. [ 793.137931][T14993] netlink: 'syz.3.2371': attribute type 12 has an invalid length. [ 793.517048][T14994] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 793.606978][T14994] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 793.702767][T14994] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 793.710433][T14994] UDF-fs: Scanning with blocksize 512 failed [ 793.764713][T14994] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 793.872672][T14994] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 793.911411][T14994] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 793.919079][T14994] UDF-fs: Scanning with blocksize 1024 failed [ 793.991925][T14994] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 794.023820][T14994] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 794.046343][T14994] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 794.111860][T14994] UDF-fs: Scanning with blocksize 2048 failed [ 794.138751][T14994] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 794.614736][T14994] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 794.651182][T14994] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 794.678412][T14994] UDF-fs: Scanning with blocksize 4096 failed [ 794.704039][T14994] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 794.796679][ T30] audit: type=1400 audit(2000000511.375:1102): avc: denied { create } for pid=15006 comm="syz.6.2376" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 795.001879][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2378'. [ 795.103163][T15018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15018 comm=syz.3.2378 [ 795.347999][T15027] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.2381'. [ 795.375904][T15027] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.2381'. [ 796.112299][T15040] Cannot find del_set index 0 as target [ 796.270224][ T44] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 796.455002][ T44] usb 4-1: too many configurations: 39, using maximum allowed: 8 [ 796.522748][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 796.579419][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.619950][ T44] usb 4-1: Product: syz [ 796.624156][ T44] usb 4-1: Manufacturer: syz [ 796.628760][ T44] usb 4-1: SerialNumber: syz [ 796.639400][T15053] batman_adv: batadv0: Adding interface: vlan2 [ 796.659318][T15053] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.711870][ T44] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 796.729916][ T5866] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 796.750122][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.779745][ T5886] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 796.863268][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.924351][T15053] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 796.970139][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 797.026621][ T5886] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 797.044531][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 797.084338][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 797.113074][ T5886] usb 7-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 797.171193][ T30] audit: type=1400 audit(2000000513.746:1103): avc: denied { map } for pid=15034 comm="syz.1.2384" path="socket:[55948]" dev="sockfs" ino=55948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 797.206386][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.285941][ T5886] usb 7-1: config 0 descriptor?? [ 797.839427][ T5866] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 798.286181][ T30] audit: type=1400 audit(2000000513.746:1104): avc: denied { read } for pid=15034 comm="syz.1.2384" path="socket:[55948]" dev="sockfs" ino=55948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 798.354411][ T5866] ath9k_htc: Failed to initialize the device [ 798.745251][ T5866] usb 4-1: ath9k_htc: USB layer deinitialized [ 799.159570][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.229735][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.337417][ T5886] hid (null): bogus close delimiter [ 799.392300][ T5886] lg-g15 0003:046D:C22E.0008: bogus close delimiter [ 799.427605][ T5886] lg-g15 0003:046D:C22E.0008: item 0 4 2 10 parsing failed [ 799.459545][ T5886] lg-g15 0003:046D:C22E.0008: probe with driver lg-g15 failed with error -22 [ 799.639328][ T10] usb 7-1: USB disconnect, device number 8 [ 799.678713][ T5886] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 799.860420][ T5886] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x41, changing to 0x1 [ 799.895604][ T5886] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 799.933442][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 799.948852][T15087] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 799.974667][ T5886] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 799.992141][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 800.012700][ T5886] usb 8-1: Product: syz [ 800.018106][ T30] audit: type=1400 audit(2000000516.598:1105): avc: denied { read write } for pid=15085 comm="syz.1.2395" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 800.048110][ T5886] usb 8-1: Manufacturer: syz [ 800.059309][ T5886] usb 8-1: SerialNumber: syz [ 800.071036][T15087] 9p: Bad value for 'rfdno' [ 800.082982][ T5886] usb 8-1: config 0 descriptor?? [ 800.099177][ T5886] usb 8-1: selecting invalid altsetting 0 [ 800.118484][ T30] audit: type=1400 audit(2000000516.658:1106): avc: denied { mounton } for pid=15085 comm="syz.1.2395" path="/488/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 800.242022][ T5916] usb 4-1: USB disconnect, device number 53 [ 800.329401][T15073] Bluetooth: hci5: command 0x0406 tx timeout [ 800.366313][ T44] usb 8-1: USB disconnect, device number 12 [ 800.432589][T14758] udevd[14758]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.458806][T15093] Cannot find del_set index 0 as target [ 800.817930][ T5886] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 800.977666][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 801.008827][ T5886] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 801.020515][ T5886] usb 4-1: config 0 has no interface number 0 [ 801.026806][ T5886] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 801.040748][ T5886] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 801.052672][ T5815] Bluetooth: hci6: command 0x0405 tx timeout [ 801.067032][ T5886] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 801.078829][ T5886] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.099632][ T5886] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 801.109622][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.119006][ T5886] usb 4-1: Product: syz [ 801.159604][ T5886] usb 4-1: Manufacturer: syz [ 801.164242][ T5886] usb 4-1: SerialNumber: syz [ 801.186849][ T5886] usb 4-1: config 0 descriptor?? [ 801.202998][T15096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 801.222872][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input73 [ 801.237165][T15104] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 801.243701][T15104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 801.261883][T15104] vhci_hcd vhci_hcd.0: Device attached [ 801.270414][T15104] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 801.277046][T15104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 801.286929][T15104] vhci_hcd vhci_hcd.0: Device attached [ 801.294321][T15104] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 801.300940][T15104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 801.309360][T15104] vhci_hcd vhci_hcd.0: Device attached [ 801.316637][T15104] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 801.323249][T15104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 801.331580][T15104] vhci_hcd vhci_hcd.0: Device attached [ 801.353040][T15104] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 801.359663][T15104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 801.391657][T15104] vhci_hcd vhci_hcd.0: Device attached [ 801.552911][ T5886] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 801.640123][T15120] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2396'. [ 801.674017][T15107] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2400'. [ 801.777957][ T30] audit: type=1400 audit(2000000518.359:1107): avc: denied { connect } for pid=15122 comm="syz.6.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 801.984815][T15128] netlink: 1216 bytes leftover after parsing attributes in process `syz.7.2404'. [ 801.996359][T15128] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.2404'. [ 802.076151][T15108] vhci_hcd: connection closed [ 802.076447][ T6342] vhci_hcd vhci_hcd.1: stop threads [ 802.090185][T15105] vhci_hcd: connection reset by peer [ 802.095549][T15110] vhci_hcd: connection closed [ 802.096325][T15112] vhci_hcd: connection closed [ 802.101227][T15116] vhci_hcd: connection closed [ 802.114662][ T6342] vhci_hcd vhci_hcd.1: release socket [ 802.138985][ T6342] vhci_hcd vhci_hcd.1: disconnect device [ 802.165230][ T6342] vhci_hcd vhci_hcd.1: stop threads [ 802.178727][ T6342] vhci_hcd vhci_hcd.1: release socket [ 802.184512][ T6342] vhci_hcd vhci_hcd.1: disconnect device [ 802.192571][ T6342] vhci_hcd vhci_hcd.1: stop threads [ 802.232608][ T6342] vhci_hcd vhci_hcd.1: release socket [ 802.340877][ T6342] vhci_hcd vhci_hcd.1: disconnect device [ 802.350094][ T6342] vhci_hcd vhci_hcd.1: stop threads [ 802.355481][ T6342] vhci_hcd vhci_hcd.1: release socket [ 802.361218][ T6342] vhci_hcd vhci_hcd.1: disconnect device [ 802.794870][ T6342] vhci_hcd vhci_hcd.1: stop threads [ 802.806891][ T6342] vhci_hcd vhci_hcd.1: release socket [ 802.812457][ T6342] vhci_hcd vhci_hcd.1: disconnect device [ 803.678477][T15147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.716275][T15147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.789503][T15148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.858455][T15147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.294539][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2411'. [ 804.303493][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2411'. [ 804.312592][T15156] netlink: 'syz.7.2411': attribute type 13 has an invalid length. [ 804.320841][T15156] netlink: 'syz.7.2411': attribute type 12 has an invalid length. [ 805.165600][ T44] usb 4-1: USB disconnect, device number 54 [ 806.857370][ T5886] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 807.868790][T15184] Cannot find del_set index 0 as target [ 807.990902][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.000933][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.883676][ T44] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 809.517155][ T44] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 809.558661][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.729825][ T44] usb 2-1: Product: syz [ 809.746346][ T44] usb 2-1: Manufacturer: syz [ 809.753195][ T44] usb 2-1: SerialNumber: syz [ 809.822552][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 809.831522][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 809.840810][T15203] netlink: 'syz.3.2424': attribute type 13 has an invalid length. [ 809.848983][T15203] netlink: 'syz.3.2424': attribute type 12 has an invalid length. [ 810.267754][ T44] usb 2-1: config 0 descriptor?? [ 810.943564][ T44] usb 2-1: Firmware version (0.0) predates our first public release. [ 810.951665][ T44] usb 2-1: Please update to version 0.2 or newer [ 811.089233][ T44] usb 2-1: USB disconnect, device number 61 [ 811.814160][ T5816] Bluetooth: hci2: unexpected subevent 0x1a length: 10 > 6 [ 811.833639][T15217] netlink: 'syz.7.2429': attribute type 10 has an invalid length. [ 811.868134][T15217] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2429'. [ 811.920815][T15217] batadv0: entered promiscuous mode [ 811.929388][T15217] batadv0: entered allmulticast mode [ 811.998563][T15217] bridge0: port 3(batadv0) entered blocking state [ 812.059703][T15217] bridge0: port 3(batadv0) entered disabled state [ 812.142124][ T5886] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 812.255565][T15230] wg1: entered promiscuous mode [ 812.276182][T15230] wg1: entered allmulticast mode [ 812.333683][T15237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2434'. [ 812.346984][ T5886] usb 4-1: too many configurations: 212, using maximum allowed: 8 [ 812.355633][ T9703] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 812.364840][ T9703] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 812.387082][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 812.402050][ T5886] usb 4-1: can't read configurations, error -61 [ 812.412495][T15237] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2434'. [ 812.460578][T15237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2434'. [ 812.494576][T15237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2434'. [ 812.544239][T15222] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 812.561823][ T5886] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 812.772541][ T5886] usb 4-1: too many configurations: 212, using maximum allowed: 8 [ 812.867096][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 812.962053][ T5886] usb 4-1: can't read configurations, error -61 [ 813.124030][ T5886] usb usb4-port1: attempt power cycle [ 813.315839][T15248] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 813.512564][ T5886] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 813.531418][ T30] audit: type=1400 audit(2000000530.114:1108): avc: denied { map } for pid=15249 comm="syz.7.2438" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 813.856587][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 813.867550][ T30] audit: type=1400 audit(2000000530.194:1109): avc: denied { setopt } for pid=15249 comm="syz.7.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 813.957533][ T5815] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 814.007421][ T5886] usb 4-1: too many configurations: 212, using maximum allowed: 8 [ 814.035783][ T30] audit: type=1400 audit(2000000530.204:1110): avc: denied { setopt } for pid=15249 comm="syz.7.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 814.125921][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 814.152354][ T5886] usb 4-1: can't read configurations, error -61 [ 814.581117][ T5886] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 814.671112][ T5886] usb 4-1: device descriptor read/8, error -71 [ 815.456443][ T5886] usb usb4-port1: unable to enumerate USB device [ 815.725098][T15279] serio: Serial port ttyS3 [ 816.227117][ T44] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 816.450357][ T44] usb 8-1: Using ep0 maxpacket: 32 [ 816.480517][ T44] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 816.488787][ T44] usb 8-1: config 0 has no interface number 0 [ 816.515531][T15285] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 816.740783][ T44] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.769780][ T44] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 816.842679][ T44] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 816.885889][ T44] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.967834][T15289] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 817.017687][ T44] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 817.063914][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.196341][ T44] usb 8-1: Product: syz [ 817.228598][ T44] usb 8-1: Manufacturer: syz [ 817.358605][ T44] usb 8-1: SerialNumber: syz [ 817.497225][ T44] usb 8-1: config 0 descriptor?? [ 817.560769][T15268] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 817.586456][ T9703] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 817.672754][ T44] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.119/input/input74 [ 819.759553][ T44] usb 8-1: USB disconnect, device number 13 [ 821.127544][ T10] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 821.348271][ T10] usb 2-1: no configurations [ 821.352889][ T10] usb 2-1: can't read configurations, error -22 [ 821.677247][ T10] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 821.770803][T15321] netlink: 1216 bytes leftover after parsing attributes in process `syz.7.2461'. [ 821.816675][T15321] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.2461'. [ 821.874244][ T10] usb 2-1: no configurations [ 821.898232][ T10] usb 2-1: can't read configurations, error -22 [ 821.927487][ T10] usb usb2-port1: attempt power cycle [ 822.289940][ T10] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 822.450522][ T10] usb 2-1: no configurations [ 822.455189][ T10] usb 2-1: can't read configurations, error -22 [ 822.605926][ T10] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 822.667086][ T10] usb 2-1: no configurations [ 822.675187][ T10] usb 2-1: can't read configurations, error -22 [ 822.678107][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2465'. [ 822.683728][ T10] usb usb2-port1: unable to enumerate USB device [ 822.690491][T15334] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2465'. [ 822.723194][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2465'. [ 822.758275][T15334] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2465'. [ 824.443029][T15350] syzkaller0: entered allmulticast mode [ 824.452501][T15350] tipc: Started in network mode [ 824.458403][T15350] tipc: Node identity 6ac8cb41d0e1, cluster identity 4711 [ 824.468290][T15350] tipc: Enabled bearer , priority 0 [ 824.658319][T15350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 825.075335][T15348] tipc: Disabling bearer [ 825.677219][T15383] overlayfs: overlapping lowerdir path [ 825.947013][ T10] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 825.960677][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2478'. [ 825.969543][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2478'. [ 825.978423][T15374] netlink: 'syz.7.2478': attribute type 13 has an invalid length. [ 825.986212][T15374] netlink: 'syz.7.2478': attribute type 12 has an invalid length. [ 826.168323][ T10] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 826.185776][ T10] usb 7-1: config 0 has no interface number 0 [ 826.202039][ T10] usb 7-1: config 0 interface 29 has no altsetting 0 [ 826.223190][ T10] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 826.300810][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.322528][ T10] usb 7-1: Product: syz [ 826.337704][ T10] usb 7-1: Manufacturer: syz [ 826.342315][ T10] usb 7-1: SerialNumber: syz [ 826.392215][ T10] usb 7-1: config 0 descriptor?? [ 826.579022][T15397] kAFS: unable to lookup cell 'ÿ' [ 826.585474][T15397] kAFS: unable to lookup cell '(,c¾Ì' [ 826.605829][T15397] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2483'. [ 826.622260][ T10] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v84 fw v198.0.0 (2 channels) [ 826.823092][ T10] peak_usb 7-1:0.29 can0: sending command failure: -8 [ 826.832781][ T10] peak_usb 7-1:0.29 can0: sending command failure: -8 [ 826.841531][ T10] peak_usb 7-1:0.29 can0: sending command failure: -8 [ 826.925965][ T10] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -8 [ 827.028356][ T10] usb 7-1: USB disconnect, device number 9 [ 828.903614][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 829.075034][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.110833][T15423] netlink: 'syz.7.2494': attribute type 23 has an invalid length. [ 829.121166][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.132954][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 829.144599][T15423] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2494'. [ 829.154557][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.173073][ T10] usb 4-1: config 0 descriptor?? [ 829.284076][ T5886] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 829.940257][ T10] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 830.026258][ T5886] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 830.039880][ T10] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 830.048520][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.060346][ T5886] usb 7-1: Product: syz [ 830.066453][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0009/input/input76 [ 830.080069][ T5886] usb 7-1: Manufacturer: syz [ 830.085306][ T5886] usb 7-1: SerialNumber: syz [ 830.212106][ T30] audit: type=1400 audit(2000000546.803:1111): avc: denied { add_name } for pid=15439 comm="syz.0.2499" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 830.220468][ T30] audit: type=1400 audit(2000000546.803:1112): avc: denied { create } for pid=15439 comm="syz.0.2499" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 830.335127][ T10] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 830.463241][ T30] audit: type=1400 audit(2000000546.813:1113): avc: denied { associate } for pid=15439 comm="syz.0.2499" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 830.708336][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 830.724239][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 830.735536][T15448] binder: 15445:15448 ioctl c02064b6 200000000440 returned -22 [ 830.743690][T15448] binder: 15445:15448 ioctl c01864b0 200000000480 returned -22 [ 831.792918][ T10] usb 4-1: reset high-speed USB device number 59 using dummy_hcd [ 831.999000][T15457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.008083][T15457] batadv_slave_0: entered promiscuous mode [ 832.074679][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 832.169014][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 832.184713][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 832.197047][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 832.206920][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 832.218861][ T5886] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 832.247541][ T5886] usb 7-1: USB disconnect, device number 10 [ 832.505206][T15465] FAULT_INJECTION: forcing a failure. [ 832.505206][T15465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.527568][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.7.2507 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.527594][T15465] Tainted: [L]=SOFTLOCKUP [ 832.527601][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 832.527617][T15465] Call Trace: [ 832.527623][T15465] [ 832.527629][T15465] dump_stack_lvl+0x100/0x190 [ 832.527656][T15465] should_fail_ex.cold+0x5/0xa [ 832.527676][T15465] _copy_from_user+0x2e/0xd0 [ 832.527701][T15465] copy_msghdr_from_user+0x9f/0x4f0 [ 832.527721][T15465] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 832.527751][T15465] ___sys_sendmsg+0x106/0x1e0 [ 832.527770][T15465] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.527799][T15465] ? find_held_lock+0x2b/0x80 [ 832.527837][T15465] __sys_sendmsg+0x170/0x220 [ 832.527860][T15465] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.527897][T15465] do_syscall_64+0xc9/0xf80 [ 832.527917][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.527934][T15465] RIP: 0033:0x7f0074f9aeb9 [ 832.527948][T15465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.527963][T15465] RSP: 002b:00007f0075d83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.527979][T15465] RAX: ffffffffffffffda RBX: 00007f0075215fa0 RCX: 00007f0074f9aeb9 [ 832.527991][T15465] RDX: 0000000020044000 RSI: 0000200000000040 RDI: 0000000000000003 [ 832.528001][T15465] RBP: 00007f0075d83090 R08: 0000000000000000 R09: 0000000000000000 [ 832.528010][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.528019][T15465] R13: 00007f0075216038 R14: 00007f0075215fa0 R15: 00007ffd84ed9e18 [ 832.528042][T15465] [ 833.335239][T15467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2508'. [ 833.825665][T15489] bridge0: port 4(netdevsim0) entered blocking state [ 833.834507][T15489] bridge0: port 4(netdevsim0) entered disabled state [ 834.042580][T11197] usb 4-1: USB disconnect, device number 59 [ 834.068586][T15489] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 834.981433][T15489] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 835.618554][T12191] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 835.810226][T12191] usb 2-1: Using ep0 maxpacket: 32 [ 835.826247][T12191] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 836.144927][T12191] usb 2-1: config 0 has no interface number 0 [ 836.170432][T12191] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 836.206260][T12191] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 836.272978][T12191] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 836.302859][T12191] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 836.501659][T12191] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 836.540277][T12191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.557431][ T30] audit: type=1400 audit(2000000553.156:1114): avc: denied { name_bind } for pid=15513 comm="syz.0.2519" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 836.575938][T12191] usb 2-1: Product: syz [ 836.642145][T12191] usb 2-1: Manufacturer: syz [ 836.671400][T12191] usb 2-1: SerialNumber: syz [ 836.760641][ T30] audit: type=1400 audit(2000000553.356:1115): avc: denied { write } for pid=15518 comm="syz.0.2520" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 836.784132][T15519] random: crng reseeded on system resumption [ 836.855265][ T30] audit: type=1400 audit(2000000553.356:1116): avc: denied { open } for pid=15518 comm="syz.0.2520" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 836.858149][T12191] usb 2-1: config 0 descriptor?? [ 836.962506][T15506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 837.068637][T12191] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input77 [ 837.133357][ C1] bcm5974 2-1:0.119: trackpad urb failed: -1 [ 837.295984][T15506] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2517'. [ 837.346057][T12191] usb 2-1: USB disconnect, device number 66 [ 837.352045][ C1] bcm5974 2-1:0.119: trackpad urb failed: -19 [ 838.027745][T15535] xt_l2tp: wrong L2TP version: 0 [ 838.365993][ T30] audit: type=1400 audit(2000000554.967:1117): avc: denied { bind } for pid=15542 comm="syz.7.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 838.932969][ T30] audit: type=1400 audit(2000000555.537:1118): avc: denied { listen } for pid=15542 comm="syz.7.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 838.983412][ T30] audit: type=1400 audit(2000000555.557:1119): avc: denied { accept } for pid=15542 comm="syz.7.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 839.140089][ T30] audit: type=1400 audit(2000000555.557:1120): avc: denied { map } for pid=15542 comm="syz.7.2529" path="socket:[58817]" dev="sockfs" ino=58817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 839.360320][T15554] tmpfs: Unknown parameter 'ná—„ixÈ Y:Vi Õr_blocks' [ 839.664871][ T30] audit: type=1400 audit(2000000555.557:1121): avc: denied { read } for pid=15542 comm="syz.7.2529" path="socket:[58817]" dev="sockfs" ino=58817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 839.747751][ T30] audit: type=1400 audit(2000000556.348:1122): avc: denied { watch_sb watch_reads } for pid=15557 comm="syz.7.2532" path="/67/file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 839.808025][T15559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.158636][T11197] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 840.241966][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 840.250901][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 840.259904][T15571] netlink: 'syz.1.2535': attribute type 13 has an invalid length. [ 840.267721][T15571] netlink: 'syz.1.2535': attribute type 12 has an invalid length. [ 840.623355][T15573] netlink: 'syz.6.2537': attribute type 178 has an invalid length. [ 840.639257][T11197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 840.660552][T11197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 840.688904][T11197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 840.716694][T11197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 840.744540][T11197] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 840.754421][T11197] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.780543][T11197] usb 8-1: Product: syz [ 840.790259][T11197] usb 8-1: Manufacturer: syz [ 840.799730][T11197] usb 8-1: SerialNumber: syz [ 840.822462][T11197] usb 8-1: config 0 descriptor?? [ 840.967706][ T5916] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 841.055118][T11197] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 841.119556][ T5916] usb 7-1: not running at top speed; connect to a high speed hub [ 841.135983][ T5916] usb 7-1: config 3 has an invalid interface number: 170 but max is 0 [ 841.152895][ T5916] usb 7-1: config 3 has no interface number 0 [ 841.160390][ T5916] usb 7-1: config 3 interface 170 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 841.176160][ T5916] usb 7-1: config 3 interface 170 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 841.198941][ T5916] usb 7-1: config 3 interface 170 has no altsetting 0 [ 841.209813][ T5916] usb 7-1: New USB device found, idVendor=05cc, idProduct=3362, bcdDevice=a3.27 [ 841.227331][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.246197][ T5916] usb 7-1: Product: syz [ 841.252757][ T5916] usb 7-1: Manufacturer: ┒㻤쿮犦 [ 841.259716][ T5916] usb 7-1: SerialNumber: syz [ 841.273016][T11197] usb 8-1: USB disconnect, device number 14 [ 841.537556][T15559] adutux: No device or device unplugged -19 [ 841.579999][T15587] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 841.963446][ T5916] usb 7-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3362) Rev (0XA327): ADI930 [ 842.149645][ T5916] usb 7-1: reset full-speed USB device number 11 using dummy_hcd [ 843.412609][ T5916] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 843.461421][ T5916] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 843.471487][ T5886] usb 7-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2 [ 843.509386][ T5886] usb 7-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw [ 843.518530][ T30] audit: type=1400 audit(2000000560.119:1123): avc: denied { firmware_load } for pid=5886 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 843.593372][ T5916] usb 7-1: USB disconnect, device number 11 [ 843.758267][T15610] sg_write: data in/out 65489/38 bytes for SCSI command 0x8-- guessing data in; [ 843.758267][T15610] program syz.0.2549 not setting count and/or reply_len properly [ 844.495879][ T5865] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 844.715707][ T5865] usb 7-1: Using ep0 maxpacket: 32 [ 844.753462][ T5865] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 844.800710][ T5865] usb 7-1: config 0 has no interface number 0 [ 844.845483][ T5865] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 844.897647][ T5865] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 844.970826][ T5865] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 845.017156][ T5865] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.065681][T12191] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 845.187341][T15640] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 845.258375][ T5865] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 845.459584][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.467657][T12191] usb 2-1: Using ep0 maxpacket: 16 [ 845.568477][T15630] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 845.588904][T12191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.602312][ T5865] usb 7-1: Product: syz [ 845.638743][ T5865] usb 7-1: Manufacturer: syz [ 845.659954][ T5865] usb 7-1: SerialNumber: syz [ 845.675545][T12191] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 845.748096][T12191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.774665][ T5865] usb 7-1: config 0 descriptor?? [ 845.818164][T15611] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 845.941294][T12191] usb 2-1: config 0 descriptor?? [ 845.988348][ T5865] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input78 [ 846.166318][ T30] audit: type=1400 audit(2000000562.771:1124): avc: denied { write } for pid=15641 comm="syz.7.2557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 846.624042][T12191] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 847.021812][T15634] i2c i2c-1: unsupported multi-msg i2c transaction [ 847.205219][T15655] tap0: tun_chr_ioctl cmd 1074025675 [ 847.224563][T15655] tap0: persist disabled [ 847.231711][T15655] netlink: 'syz.3.2559': attribute type 2 has an invalid length. [ 847.503068][T15658] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2561'. [ 847.547521][T15646] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2548'. [ 847.625979][ T30] audit: type=1400 audit(2000000564.231:1125): avc: denied { name_connect } for pid=15659 comm="syz.3.2562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 847.658034][ T30] audit: type=1400 audit(2000000564.261:1126): avc: denied { write } for pid=15659 comm="syz.3.2562" lport=52333 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 847.774221][ T5916] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 847.885593][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 847.920988][ T30] audit: type=1400 audit(2000000564.522:1127): avc: denied { accept } for pid=15663 comm="syz.0.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 847.947987][ T5916] usb 8-1: Using ep0 maxpacket: 8 [ 847.969636][ T5916] usb 8-1: unable to get BOS descriptor or descriptor too short [ 847.983065][ T5916] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 848.011212][ T5916] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 848.045393][ T5916] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 848.064210][ T5916] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 848.074853][ T5916] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 848.085709][ T5916] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 848.212117][ T5811] usb 2-1: USB disconnect, device number 67 [ 848.228645][ T5916] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 848.306013][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2564'. [ 848.314914][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'. [ 848.324244][T15670] netlink: 'syz.0.2564': attribute type 13 has an invalid length. [ 848.332060][T15670] netlink: 'syz.0.2564': attribute type 12 has an invalid length. [ 848.640049][ T5916] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 848.649879][ T5916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.685787][ T5916] usb 8-1: Product: syz [ 848.711403][ T5916] usb 8-1: Manufacturer: syz [ 848.743407][ T5916] usb 8-1: SerialNumber: syz [ 848.773023][ T5916] usb 8-1: config 0 descriptor?? [ 848.783450][T15658] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 848.790823][T15658] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 848.811664][ T5916] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 849.172627][ T5865] usb 8-1: USB disconnect, device number 15 [ 849.530500][T15678] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 851.580551][T15701] 9pnet_fd: Insufficient options for proto=fd [ 851.590244][T12191] usb 7-1: USB disconnect, device number 12 [ 852.891645][ T5865] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 853.240018][ T5865] usb 8-1: not running at top speed; connect to a high speed hub [ 853.412742][ T5865] usb 8-1: config index 0 descriptor too short (expected 8192, got 18) [ 853.420985][ T5865] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.511405][ T5865] usb 8-1: config 0 has no interfaces? [ 853.547336][ T5865] usb 8-1: string descriptor 0 read error: -22 [ 853.553710][ T5865] usb 8-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c [ 853.583054][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.614451][ T5865] usb 8-1: config 0 descriptor?? [ 853.792499][T15719] vivid-007: ================= START STATUS ================= [ 853.828198][T15719] vivid-007: Enable Output Cropping: true [ 853.853427][T15719] vivid-007: Enable Output Composing: true [ 854.141166][T15719] vivid-007: Enable Output Scaler: true [ 854.146881][T15719] vivid-007: Tx RGB Quantization Range: Automatic [ 854.173499][T15701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.181004][T15719] vivid-007: Transmit Mode: HDMI [ 854.186810][T15719] vivid-007: Hotplug Present: 0x00000000 [ 854.229600][T15701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.296160][ T5811] usb 8-1: USB disconnect, device number 16 [ 854.311098][T15719] vivid-007: RxSense Present: 0x00000000 [ 854.371107][T15719] vivid-007: EDID Present: 0x00000000 [ 854.420817][T15719] vivid-007: ================== END STATUS ================== [ 854.660350][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2576'. [ 854.669631][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2576'. [ 854.678901][T15728] netlink: 'syz.6.2576': attribute type 13 has an invalid length. [ 854.686772][T15728] netlink: 'syz.6.2576': attribute type 12 has an invalid length. [ 854.745216][ T31] INFO: task syz.4.2064:13714 blocked for more than 143 seconds. [ 854.988095][ T31] Tainted: G L syzkaller #0 [ 855.016063][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 855.073777][ T31] task:syz.4.2064 state:D stack:26392 pid:13714 tgid:13712 ppid:5807 task_flags:0x400140 flags:0x00080002 [ 855.156868][ T31] Call Trace: [ 855.186696][ T31] [ 855.189750][ T31] ? __schedule+0xf65/0x5e10 [ 855.220248][ T31] __schedule+0xfe4/0x5e10 [ 855.224967][ T31] ? __lock_acquire+0x4a5/0x2630 [ 855.263554][ T31] ? __pfx___schedule+0x10/0x10 [ 855.307979][ T31] ? find_held_lock+0x2b/0x80 [ 855.402650][ T31] ? schedule+0x2bf/0x390 [ 855.456810][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'. [ 855.466145][T15734] bridge_slave_1: left allmulticast mode [ 855.471904][T15734] bridge_slave_1: left promiscuous mode [ 855.478179][T15734] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.709824][ T31] schedule+0xdd/0x390 [ 855.718810][ T31] schedule_preempt_disabled+0x13/0x30 [ 855.732679][ T31] __mutex_lock+0xc9a/0x1b90 [ 855.737370][ T31] ? do_raw_spin_lock+0x128/0x260 [ 855.742533][ T31] ? usbdev_open+0x1b6/0x870 [ 855.747164][ T31] ? klist_put+0xcb/0x1d0 [ 855.757070][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 855.762433][ T31] ? _raw_spin_unlock+0x28/0x50 [ 855.767361][ T31] ? kobject_put+0xb9/0x640 [ 855.772548][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 855.778088][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 855.784482][ T31] ? usbdev_open+0x1b6/0x870 [ 855.789163][ T31] usbdev_open+0x1b6/0x870 [ 855.794542][ T31] ? kobject_get_unless_zero+0x156/0x200 [ 855.801364][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 855.806410][ T31] ? chrdev_open+0x10b/0x6a0 [ 855.815365][ T31] ? chrdev_open+0x10b/0x6a0 [ 855.820068][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 855.825377][ T31] chrdev_open+0x234/0x6a0 [ 855.829838][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 855.836690][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 855.843272][ T31] do_dentry_open+0x73e/0x1570 [ 855.848134][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 855.853932][ T31] ? security_inode_permission+0xbf/0x250 [ 855.859754][ T31] vfs_open+0x82/0x3f0 [ 855.865580][ T31] path_openat+0x21dc/0x3120 [ 855.870464][ T31] ? __pfx_path_openat+0x10/0x10 [ 855.875452][ T31] do_filp_open+0x1f7/0x420 [ 855.879998][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 855.886310][ T31] ? _raw_spin_unlock+0x28/0x50 [ 855.891374][ T31] ? alloc_fd+0x476/0x790 [ 855.895810][ T31] do_sys_openat2+0x12e/0x220 [ 855.901767][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 855.907065][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 855.914292][ T31] __x64_sys_openat+0x12d/0x210 [ 855.919256][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 855.928599][ T31] ? do_user_addr_fault+0x8d6/0x12f0 [ 855.934228][ T31] do_syscall_64+0xc9/0xf80 [ 855.938790][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.945653][ T31] RIP: 0033:0x7f2b6895b78e [ 855.950265][ T31] RSP: 002b:00007f2b69770b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 855.958779][ T31] RAX: ffffffffffffffda RBX: 00007f2b697716c0 RCX: 00007f2b6895b78e [ 855.969223][ T31] RDX: 000000000000a401 RSI: 00007f2b69770c00 RDI: ffffffffffffff9c [ 855.977479][ T31] RBP: 00007f2b69770c00 R08: 0000000000000000 R09: 0000000000000000 [ 855.985876][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 855.994681][ T31] R13: 00007f2b68c16128 R14: 00007f2b68c16090 R15: 00007fff1013fa08 [ 856.003859][ T31] [ 856.006996][ T31] [ 856.006996][ T31] Showing all locks held in the system: [ 856.104310][T15734] bridge_slave_0: left allmulticast mode [ 856.118476][T15734] bridge_slave_0: left promiscuous mode [ 856.133248][T15734] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.137512][ T31] 1 lock held by khungtaskd/31: [ 856.165222][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 856.179108][ T31] 2 locks held by getty/5570: [ 856.187111][ T31] #0: ffff88814df970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 856.197160][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 856.229294][ T31] 5 locks held by kworker/1:6/5873: [ 856.239934][ T31] 3 locks held by kworker/0:4/5886: [ 856.250591][ T31] #0: ffff88813fe51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 856.278618][ T31] #1: ffffc900040c7c98 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 856.304129][ T31] #2: ffffffff8e48dbf0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0xc6/0x1a0 [ 856.316290][ T31] 3 locks held by kworker/0:6/5916: [ 856.322212][ T31] #0: ffff88813fe51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 856.333857][ T31] #1: ffffc900041d7c98 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 856.345057][ T31] #2: ffffffff903f3168 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 856.356614][ T31] 1 lock held by syz.4.2064/13714: [ 856.361999][ T31] #0: ffff888144b27198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 856.371998][ T31] 1 lock held by syz.5.2144/14150: [ 856.377142][ T31] #0: ffff888144b27198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 856.387864][ T31] 2 locks held by syz.1.2582/15734: [ 856.393309][ T31] #0: ffffffff903f3168 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x307/0xb40 [ 856.403486][ T31] #1: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 856.416051][ T31] [ 856.543497][ T31] ============================================= [ 856.543497][ T31] [ 856.552582][ T31] NMI backtrace for cpu 0 [ 856.552597][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 856.552621][ T31] Tainted: [L]=SOFTLOCKUP [ 856.552627][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 856.552637][ T31] Call Trace: [ 856.552642][ T31] [ 856.552649][ T31] dump_stack_lvl+0x100/0x190 [ 856.552681][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 856.552706][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 856.552726][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 856.552752][ T31] sys_info+0x141/0x190 [ 856.552772][ T31] watchdog+0xcc3/0xfe0 [ 856.552801][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.552826][ T31] ? __kthread_parkme+0x18c/0x230 [ 856.552850][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.552871][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.552892][ T31] kthread+0x3b3/0x730 [ 856.552910][ T31] ? __pfx_kthread+0x10/0x10 [ 856.552926][ T31] ? ret_from_fork+0x79/0xaf0 [ 856.552945][ T31] ? ret_from_fork+0x79/0xaf0 [ 856.552963][ T31] ? rcu_is_watching+0x12/0xc0 [ 856.552984][ T31] ? __pfx_kthread+0x10/0x10 [ 856.553000][ T31] ret_from_fork+0x754/0xaf0 [ 856.553016][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 856.553037][ T31] ? __switch_to+0x7b9/0x10c0 [ 856.553059][ T31] ? __pfx_kthread+0x10/0x10 [ 856.553078][ T31] ret_from_fork_asm+0x1a/0x30 [ 856.553105][ T31] [ 856.553112][ T31] Sending NMI from CPU 0 to CPUs 1: [ 856.700925][ C1] NMI backtrace for cpu 1 [ 856.700942][ C1] CPU: 1 UID: 0 PID: 5873 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.700969][ C1] Tainted: [L]=SOFTLOCKUP [ 856.700975][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 856.700985][ C1] Workqueue: usb_hub_wq hub_event [ 856.701007][ C1] RIP: 0010:__rcu_read_unlock+0xad/0x550 [ 856.701027][ C1] Code: 88 04 00 00 85 c0 75 51 48 8d bb 84 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 <83> c0 03 38 d0 7c 08 84 d2 0f 85 59 01 00 00 8b 83 84 04 00 00 3d [ 856.701043][ C1] RSP: 0018:ffffc90003fe6890 EFLAGS: 00000202 [ 856.701056][ C1] RAX: 0000000000000004 RBX: ffff88802963a4c0 RCX: ffffc90003fe688c [ 856.701067][ C1] RDX: 0000000000000000 RSI: ffffffff8dc1f692 RDI: ffff88802963a944 [ 856.701078][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 856.701087][ C1] R10: 0000000000000200 R11: 0000000000051f63 R12: ffffc90003fe6988 [ 856.701098][ C1] R13: ffffc90003fe6938 R14: ffffc90003fe77b8 R15: ffffc90003fe696c [ 856.701109][ C1] FS: 0000000000000000(0000) GS:ffff8881246d9000(0000) knlGS:0000000000000000 [ 856.701125][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.701135][ C1] CR2: 00007f00751e1198 CR3: 000000000e392000 CR4: 00000000003526f0 [ 856.701146][ C1] Call Trace: [ 856.701151][ C1] [ 856.701160][ C1] unwind_next_frame+0x3c8/0x1ea0 [ 856.701180][ C1] ? bus_probe_device+0x64/0x160 [ 856.701201][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 856.701222][ C1] arch_stack_walk+0x94/0xf0 [ 856.701241][ C1] ? device_add+0x11d9/0x1950 [ 856.701257][ C1] stack_trace_save+0x8e/0xc0 [ 856.701276][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 856.701296][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 856.701309][ C1] kasan_save_stack+0x30/0x50 [ 856.701324][ C1] ? kasan_save_stack+0x30/0x50 [ 856.701338][ C1] ? kasan_save_track+0x14/0x30 [ 856.701352][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 856.701366][ C1] ? dummy_urb_enqueue+0xa3/0x880 [ 856.701384][ C1] ? usb_hcd_submit_urb+0x26c/0x2150 [ 856.701402][ C1] ? usb_submit_urb+0x8aa/0x1910 [ 856.701420][ C1] ? ath6kl_usb_post_recv_transfers.constprop.0+0x204/0x3d0 [ 856.701440][ C1] ? ath6kl_usb_power_on+0x8e/0x160 [ 856.701457][ C1] ? ath6kl_core_init+0x173/0x11b0 [ 856.701472][ C1] ? ath6kl_usb_probe+0xcd0/0x13e0 [ 856.701490][ C1] ? usb_probe_interface+0x303/0x8f0 [ 856.701507][ C1] ? really_probe+0x241/0xa60 [ 856.701519][ C1] ? __driver_probe_device+0x1de/0x400 [ 856.701532][ C1] ? driver_probe_device+0x4c/0x1b0 [ 856.701545][ C1] ? __device_attach_driver+0x1df/0x340 [ 856.701558][ C1] ? bus_for_each_drv+0x159/0x1e0 [ 856.701575][ C1] ? __device_attach+0x1e4/0x4d0 [ 856.701587][ C1] ? device_initial_probe+0xaf/0xd0 [ 856.701601][ C1] ? bus_probe_device+0x64/0x160 [ 856.701618][ C1] ? device_add+0x11d9/0x1950 [ 856.701633][ C1] ? usb_set_configuration+0xd97/0x1c60 [ 856.701647][ C1] ? usb_generic_driver_probe+0xa1/0xe0 [ 856.701660][ C1] ? usb_probe_device+0xef/0x400 [ 856.701674][ C1] ? really_probe+0x241/0xa60 [ 856.701686][ C1] ? __driver_probe_device+0x1de/0x400 [ 856.701699][ C1] ? driver_probe_device+0x4c/0x1b0 [ 856.701711][ C1] ? __device_attach_driver+0x1df/0x340 [ 856.701724][ C1] ? bus_for_each_drv+0x159/0x1e0 [ 856.701740][ C1] ? __device_attach+0x1e4/0x4d0 [ 856.701752][ C1] ? device_initial_probe+0xaf/0xd0 [ 856.701765][ C1] ? bus_probe_device+0x64/0x160 [ 856.701791][ C1] kasan_save_track+0x14/0x30 [ 856.701805][ C1] __kasan_kmalloc+0xaa/0xb0 [ 856.701820][ C1] dummy_urb_enqueue+0xa3/0x880 [ 856.701837][ C1] ? usb_hcd_map_urb_for_dma+0x28a/0x1170 [ 856.701857][ C1] usb_hcd_submit_urb+0x26c/0x2150 [ 856.701876][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 856.701892][ C1] ? usb_alloc_urb+0x66/0xa0 [ 856.701911][ C1] usb_submit_urb+0x8aa/0x1910 [ 856.701925][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 856.701940][ C1] ath6kl_usb_post_recv_transfers.constprop.0+0x204/0x3d0 [ 856.701962][ C1] ath6kl_usb_power_on+0x8e/0x160 [ 856.701981][ C1] ath6kl_core_init+0x173/0x11b0 [ 856.701998][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 856.702012][ C1] ? __pfx_ath6kl_core_init+0x10/0x10 [ 856.702029][ C1] ? ath6kl_core_create+0x84f/0xad0 [ 856.702047][ C1] ath6kl_usb_probe+0xcd0/0x13e0 [ 856.702068][ C1] usb_probe_interface+0x303/0x8f0 [ 856.702086][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 856.702104][ C1] really_probe+0x241/0xa60 [ 856.702118][ C1] __driver_probe_device+0x1de/0x400 [ 856.702132][ C1] driver_probe_device+0x4c/0x1b0 [ 856.702146][ C1] __device_attach_driver+0x1df/0x340 [ 856.702160][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 856.702174][ C1] bus_for_each_drv+0x159/0x1e0 [ 856.702192][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 856.702210][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 856.702224][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 856.702239][ C1] __device_attach+0x1e4/0x4d0 [ 856.702252][ C1] ? __pfx___device_attach+0x10/0x10 [ 856.702266][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 856.702283][ C1] device_initial_probe+0xaf/0xd0 [ 856.702297][ C1] bus_probe_device+0x64/0x160 [ 856.702317][ C1] device_add+0x11d9/0x1950 [ 856.702333][ C1] ? __pfx_device_add+0x10/0x10 [ 856.702347][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 856.702366][ C1] usb_set_configuration+0xd97/0x1c60 [ 856.702387][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 856.702400][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 856.702417][ C1] usb_probe_device+0xef/0x400 [ 856.702432][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 856.702449][ C1] really_probe+0x241/0xa60 [ 856.702463][ C1] __driver_probe_device+0x1de/0x400 [ 856.702476][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 856.702493][ C1] driver_probe_device+0x4c/0x1b0 [ 856.702507][ C1] __device_attach_driver+0x1df/0x340 [ 856.702522][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 856.702535][ C1] bus_for_each_drv+0x159/0x1e0 [ 856.702554][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 856.702572][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 856.702586][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 856.702600][ C1] __device_attach+0x1e4/0x4d0 [ 856.702614][ C1] ? __pfx___device_attach+0x10/0x10 [ 856.702627][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 856.702644][ C1] device_initial_probe+0xaf/0xd0 [ 856.702659][ C1] bus_probe_device+0x64/0x160 [ 856.702678][ C1] device_add+0x11d9/0x1950 [ 856.702694][ C1] ? __pfx_device_add+0x10/0x10 [ 856.702709][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 856.702726][ C1] usb_new_device.cold+0x685/0x115c [ 856.702741][ C1] ? do_raw_spin_lock+0x128/0x260 [ 856.702756][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 856.702771][ C1] ? mark_held_locks+0x40/0x70 [ 856.702785][ C1] hub_event+0x314d/0x4af0 [ 856.702809][ C1] ? __pfx_hub_event+0x10/0x10 [ 856.702827][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 856.702844][ C1] process_one_work+0x9c2/0x1840 [ 856.702863][ C1] ? __pfx_process_one_work+0x10/0x10 [ 856.702881][ C1] ? assign_work+0x19c/0x250 [ 856.702896][ C1] worker_thread+0x5da/0xe40 [ 856.702915][ C1] ? kthread+0x17d/0x730 [ 856.702928][ C1] ? __pfx_worker_thread+0x10/0x10 [ 856.702942][ C1] kthread+0x3b3/0x730 [ 856.702956][ C1] ? __pfx_kthread+0x10/0x10 [ 856.702968][ C1] ? ret_from_fork+0x79/0xaf0 [ 856.702983][ C1] ? ret_from_fork+0x79/0xaf0 [ 856.702998][ C1] ? rcu_is_watching+0x12/0xc0 [ 856.703014][ C1] ? __pfx_kthread+0x10/0x10 [ 856.703028][ C1] ret_from_fork+0x754/0xaf0 [ 856.703043][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 856.703057][ C1] ? rcu_is_watching+0x12/0xc0 [ 856.703074][ C1] ? __switch_to+0x7b9/0x10c0 [ 856.703091][ C1] ? __pfx_kthread+0x10/0x10 [ 856.703106][ C1] ret_from_fork_asm+0x1a/0x30 [ 856.703123][ C1] [ 857.510200][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 857.517058][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 857.527724][ T31] Tainted: [L]=SOFTLOCKUP [ 857.532032][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 857.542076][ T31] Call Trace: [ 857.545342][ T31] [ 857.548260][ T31] dump_stack_lvl+0x100/0x190 [ 857.552939][ T31] vpanic+0x20d/0x630 [ 857.556915][ T31] panic+0xd1/0xd1 [ 857.560625][ T31] ? __pfx_panic+0x10/0x10 [ 857.565035][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 857.571184][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 857.577339][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 857.583490][ T31] ? watchdog.cold+0x198/0x1ca [ 857.588244][ T31] ? watchdog+0xcd3/0xfe0 [ 857.592572][ T31] watchdog.cold+0x1a9/0x1ca [ 857.597166][ T31] ? __pfx_watchdog+0x10/0x10 [ 857.601843][ T31] ? __kthread_parkme+0x18c/0x230 [ 857.606867][ T31] ? __pfx_watchdog+0x10/0x10 [ 857.611543][ T31] ? __pfx_watchdog+0x10/0x10 [ 857.616218][ T31] kthread+0x3b3/0x730 [ 857.620284][ T31] ? __pfx_kthread+0x10/0x10 [ 857.624865][ T31] ? ret_from_fork+0x79/0xaf0 [ 857.629535][ T31] ? ret_from_fork+0x79/0xaf0 [ 857.634208][ T31] ? rcu_is_watching+0x12/0xc0 [ 857.638967][ T31] ? __pfx_kthread+0x10/0x10 [ 857.643554][ T31] ret_from_fork+0x754/0xaf0 [ 857.648143][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 857.653254][ T31] ? __switch_to+0x7b9/0x10c0 [ 857.657929][ T31] ? __pfx_kthread+0x10/0x10 [ 857.662517][ T31] ret_from_fork_asm+0x1a/0x30 [ 857.667284][ T31] [ 857.670562][ T31] Kernel Offset: disabled [ 857.674858][ T31] Rebooting in 86400 seconds..