last executing test programs: 8m30.270046531s ago: executing program 0 (id=383): syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100898a02a6900b67b8c463ed8170bf2cbd7000fc5cbe66931c76eb09000200521bbaee5f430dd179c726c41e4ef963cfe050a83332d38f780e9e0d6bcaa238f704f3edece57c34a74709388316317000364d3e44c9444a582ea7f950c79cd184cda1ea4fd20d568680b96796a3e37929b9a9bbd8dcb5e8a2b6d392", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40111}, 0x20000004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r9, 0x0, 0x2) read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m29.187601851s ago: executing program 0 (id=385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x2000000000000163, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) 8m28.912796276s ago: executing program 0 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x6668, 0x10101, 0x1, 0x4008b}, &(0x7f0000000040), &(0x7f0000000200)) io_uring_enter(r5, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r6) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000050) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x85, 0xa) 8m27.91585349s ago: executing program 0 (id=393): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) getgroups(0x449a065a, 0xfffffffffffffffe) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f0000002580)={0x1e0, 0x0, r5, [{0x1400000000000007, 0x1000000, 0x1b7, 0x0, '\x7f\xb4\xe4\xa3\xe8$I\x88\x8c\n}\xac\xa9\x0e\x92\x04\xbc\xd4\xba\xdb\xc6\xf9K\x0eS\x00\xbdu\xb9;\xcd\xeb\x1aL\xec?\x7f\\N\xe1E\x89\xc9f\xd1\x8ax\xf3\x81\x04KJ\v\xe9\x19H+\xdf\xe3\xdb\xa42Lh\xb8\xe4nL\xfe1\xd5`\x86Cc\xdd\xf2n\x0e\xa7\xf5\x86\x03\xee\xec8\xad\x06\xa8\xd70\xba\xa9\xae(\xc0\x063\xd5\xb6i\xeb\xae\xe2>f\xa1\xc7\xe8_\xd9\xae,\x8d\xb0\x01\xf0<\xd6_e\xa4F\x10\xc0\xc6\x10=\x17\x16\x1a\xd9\x8b\xafq\x1e_\xee \xbb\x92\x9f\x89\n\x1b\xaf\xa2DDi\xe4\x9begcv\xa1\xe4E\x8fs\x8e\xc6[.\x98\x0f;\xc3H5\xfb\x0e\xe8\xb2<>\r\xeb\x9b\f\xf6\x15\xf2\xc0&L\xec;\xca\xc0\xa3\xb6\x84\xc7h\x9c\x9d\xfdUY-o3\xce\x00\x003\x90\xdc\x9f\x95,\xb2\xa5\r\xcc\x98\xf5\x00\x00\x00\x00\x00\x00\x00\x00J\xf4\xa9\xd02S\fZ\xfb\xfc !e\x0e/\xeb\xc5\xfa\xe3\xf5\x9e\x91\xadJ\xbd+-n\xb4\xb8a4\xbc\xdf\x1d\xd8\xc1D\xff|G$\xf6\r\xf3\xad5O~\xa9q\t\xb4\x83\n\x06f\xf0\xb3\xa6\x04\xa7\xec\xfdz\xf3\xdaX\xc1SA\xe4x\xa1\xd9j\xaa\xbdT\xbe\xc7\x94\xa8\xe5w\x97\x11\b\f\xfc\xe6\x9ax\x11\x03R\x81\xc9\x90\x1fQ\xf7\xae(h\xd2\x8fj\tp\xf8VdY0\xa8\xc6|M?2J\x03\xff\xfaI\x9av\xf6^\x01R\xce@\xb4\xe5\b\x00!To\xdb}\xdd\x9d&|L+U\xb2\x10\xaeo\xe6\xf5\xcf\xb2\xb1\x10\x84\xd0\"\x96\xa8FstV\xb5:\xd7\x8cE\x95\x0e\fgJ\xba\xee\x17\x8b\xc2\xc1<@c\xc1\a\x17\b\x94\xb2\x06\xfb\x8e4\x0f\xcaT\xe1M\x98\x06M|\xa9\xb7\x9a\x82\xf4'}]}, 0x1e0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 8m26.297988942s ago: executing program 0 (id=397): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f00000004c0)=ANY=[@ANYBLOB="05"], 0x93, 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c00028004001f"], 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 8m22.289038739s ago: executing program 0 (id=411): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = getuid() mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe1}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x98}}, './file0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb88aaaaaaaaaa88a8600081"], 0x6e) read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020) 8m22.098855894s ago: executing program 32 (id=411): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = getuid() mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe1}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x98}}, './file0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb88aaaaaaaaaa88a8600081"], 0x6e) read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020) 3m49.310362375s ago: executing program 1 (id=1914): socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x0, 0x5001) close(r2) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x1f}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 3m48.615222099s ago: executing program 1 (id=1916): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2408c000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="050000000300000000000000000000000000003a0000000000000000"], 0x50) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000200000000008001e8040000000", 0x24) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001a00), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYBLOB="339177360a89791b22f0f6805457a066becbea08b874fa0d0f50d756c9cd8496e05d6ae67183c56305571c5304402c4141e769591bbfb6c85d5fc29f0378f3d04801c8be361b53765c73b77703574b89e07819d402f81a17ca84911a6201be928137811fc33e803f48fbd754b2bdfcaa1926fa569d6c793e574ef1c1fc2a2f74fa5b91d40ce6cac09acab41464ed7c2f2336d5456c705b2ccf34c0fc7b23bcb64dd59915729d675d85", @ANYRES16=r0, @ANYRES32=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000528babe1b11d200000018110000", @ANYRESDEC=r1, @ANYRES64=0x0], 0x0, 0x0, 0x47}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3m47.343879398s ago: executing program 1 (id=1924): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='%*{*\x00', &(0x7f0000000040)='hfs\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x8, "f8e482fb"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 3m43.539642959s ago: executing program 1 (id=1936): socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x0, 0x5001) close(r2) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x1f}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 3m43.005356719s ago: executing program 1 (id=1939): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) 3m42.267291956s ago: executing program 1 (id=1941): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=0x0) prlimit64(r1, 0x9, &(0x7f00000003c0)={0x7ff, 0xffffffff}, &(0x7f0000000400)) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x4fb, 0xfd2, {0xffffffffffffffff}, {0xee01}, 0x7, 0x2}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb", 0x6e}], 0x1}}], 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="64892d851ae984e1a44cda18000000000000000000790000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x26) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 3m27.02713988s ago: executing program 33 (id=1941): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=0x0) prlimit64(r1, 0x9, &(0x7f00000003c0)={0x7ff, 0xffffffff}, &(0x7f0000000400)) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x4fb, 0xfd2, {0xffffffffffffffff}, {0xee01}, 0x7, 0x2}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb", 0x6e}], 0x1}}], 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="64892d851ae984e1a44cda18000000000000000000790000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x26) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 2m38.714525033s ago: executing program 2 (id=2147): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = semget$private(0x0, 0x1, 0x4) semctl$GETPID(r3, 0x0, 0xb, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r4 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) unshare(0x20400) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, 0x0, &(0x7f0000000100)) syz_usb_control_io(r4, &(0x7f00000004c0)={0x18, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r7, 0x4b33, &(0x7f0000000200)) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @remote, 0x1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) getpid() ioctl$FS_IOC_FSGETXATTR(r0, 0x400455cb, 0x0) 2m36.838253651s ago: executing program 2 (id=2152): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = fcntl$getown(r2, 0x9) sched_getscheduler(r3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x18) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x40, 0xfffff02c}, {0x6}]}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r7, &(0x7f0000000600), 0x0, 0x0, 0x0) 2m34.412050894s ago: executing program 2 (id=2157): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x202) mmap(&(0x7f00008f1000/0x1000)=nil, 0x1000, 0xb, 0x13, r0, 0x0) io_setup(0x407, &(0x7f0000000b80)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) semget$private(0x0, 0x4, 0x72e) r1 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x48) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0xc04c6100, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf25140000000c0007800800020000000001"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x10) socket(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000180)={&(0x7f0000000040)=[{0x2, 0x1001, 0x1, &(0x7f00000001c0)='W'}], 0x1}) 2m30.530751429s ago: executing program 2 (id=2171): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x1, 0x4000005) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4001441) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000180)={0x9, 0x4f, 0xffffffffffffffff, 0x9, 0x1, 0x8}) r5 = getpid() syz_open_procfs$pagemap(r5, &(0x7f00000001c0)) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2m30.393651396s ago: executing program 2 (id=2173): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4001, 0x0, 0x100000, 0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9}, @from_mac=@device_b, @broadcast, @device_a, {0x3, 0x8}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x23, "daed2829c6aad81dd3b3a85731d5dbcb419d39a0931e7a599986dd1db94a6b6d32fafc"}]}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x0, 'syz1\x00'}) 2m29.692317515s ago: executing program 2 (id=2176): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xfffd, 0xa, 0x1ff, 0x1}) syz_clone(0x1000000, &(0x7f0000000080)="d7baabbf", 0x4, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000569a33e27f2a130c78324986f1a5008500000013000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008006c00b7030000feffffff850000009b00000095000000000000006e42793a8283ab21084b22ef5256fde04fcb39361c60a400ab4f5e152456419e11be42d5171c0254ff296859a863a1f7da0698dbcbc8e4e0b469b2b37db4187b9a284e0531f4a34488cc930e9de1b2bdb7ce0c1e56387a053a4f510c2a3a62b24ab173f3908e3dadee1c009243d4a31ab9ddac1aff367a8c55a16bfb96be283afd51783283e928179601ac4acd1c2e84a0e474843cbdcaafbfb23d6cf2bc11"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r9, 0x112, 0x13, 0x0, &(0x7f0000001300)) lseek(0xffffffffffffffff, 0x1000004, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) sync() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r5, &(0x7f000001a3c0)=""/102381, 0x18fed, 0x200000000000000, 0x0) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r2, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 2m14.604881164s ago: executing program 34 (id=2176): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xfffd, 0xa, 0x1ff, 0x1}) syz_clone(0x1000000, &(0x7f0000000080)="d7baabbf", 0x4, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r9, 0x112, 0x13, 0x0, &(0x7f0000001300)) lseek(0xffffffffffffffff, 0x1000004, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) sync() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r5, &(0x7f000001a3c0)=""/102381, 0x18fed, 0x200000000000000, 0x0) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r2, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 34.934114276s ago: executing program 6 (id=2765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x200448c0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x6) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0x100, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000080)=0x53) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) creat(&(0x7f0000000200)='./file0\x00', 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0x1, &(0x7f0000000080)="7fc28b98229ec566fe6f051181763ecb5669f8e89711522b36c30fc70ad9b865655144c9fb50e7edb4fcb243c152effb624181f45d3f0565bfcb2b6f91babc64684b2be932abf7e532b524b7aa7cd70bd6a6f78c2dddaf635ab52fba5947e8ede994c9919fcc8b1e86eae55a9e63bc3c615a30e56fb4b86bc515002aef034e07473447c2c516", &(0x7f0000000140)=""/108}, 0x20) 34.853479554s ago: executing program 6 (id=2766): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xb0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) bind$inet6(r4, 0xfffffffffffffffe, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r3, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x884) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100003e000701feffffff00000000047c00000800428004000800b80009"], 0x180}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 34.548998534s ago: executing program 6 (id=2769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) 33.689891251s ago: executing program 6 (id=2771): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000eeff13", @ANYBLOB], 0x30}}, 0x0) 33.57777877s ago: executing program 6 (id=2772): clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd9100fedbdf2525000000789f0010", @ANYRES32=r5, @ANYBLOB="08003500000000000a00060050505050505000000a0034000202020202020000080026006c09000010005080050002000500000004000500"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="220027bd7000fcdbdf25550000000800010044000000080003008a590da8f340c4871d3acdb6adb7d86e59fdc0b8742f65ad667ab953e94fc277d49c56bb253b6417a75a06e76b845d2149aad3634874eebee3b9c7faf98ca9a1e37d2ac399a9b9e3e1c70aff29024dcff7e52b15536315fe495b5611dab5022acd16fdeffb9ca6", @ANYRES32=r5, @ANYBLOB="0c009900400000003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59cf00000000000000000800000014000180060001000200000008000500030000006c866c4bf9bdee1a0df7a66a92d11de89f0ccb0d0696ec165232e374fb8d616fa4ac3be1b1ec8abeb639afff7b1c16fb2ccd8cded5a013ccd086167dbd9c7d8d1c8bf953a9d89d0158f9348eda7304ef3b9c93a78090908af9212b6120248fe6d4e8857acc89943ae67e158d24622eaeda39e47dcca54cfd89ffc341dbb14a9083358adcee21d3f28c35a52f148a9607027fd62ef1d1973c2314ff82556ee0997bcb859b9be8a6c2e15f2657ea178f33e566aa9b8baed291f2a8301085c0bad627312856fa4f79fe6c5424dbd87b1b724ad267e3a1576f8fd5071adaf2b55a5c6bb4dee7adea9daf369a5570adb090e578f758bd891c4025d7152803dae327da3cf2f708a079b678be829d61bd0b5610ebf12f25db33199f"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x7fffffe, 0x8000, 0x200, 0x8000, 0xfffffffd, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r8, 0x400c620e, &(0x7f0000000140)={0x0, 0x1, 0x4}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000006c0)={'filter\x00', 0x4}, 0x68) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="200000003efffcffffff017c1000080042800400080004000180"], 0x20}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x12) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=Always,\x00']) chdir(&(0x7f0000000040)='./file0\x00') r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x800}}}, 0x118) fallocate(r10, 0x51, 0x0, 0x63b47ab6) 33.456810792s ago: executing program 6 (id=2774): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f00000002c0)={0x18, 0x2a, 0x800, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x8, 0x75, 0x0, 0x1, [@generic="6a448287"]}]}, 0x18}], 0x1}, 0x20040051) prlimit64(r2, 0xf, &(0x7f0000000440)={0x6, 0x100e2}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000340)=0x7) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x200000e, 0xc0a4fcf179256e7f, r0, 0x2000) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) socket$inet_udp(0x2, 0x2, 0x0) 17.96419423s ago: executing program 35 (id=2774): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f00000002c0)={0x18, 0x2a, 0x800, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x8, 0x75, 0x0, 0x1, [@generic="6a448287"]}]}, 0x18}], 0x1}, 0x20040051) prlimit64(r2, 0xf, &(0x7f0000000440)={0x6, 0x100e2}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000340)=0x7) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x200000e, 0xc0a4fcf179256e7f, r0, 0x2000) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) socket$inet_udp(0x2, 0x2, 0x0) 16.362628484s ago: executing program 4 (id=2838): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd06020254920000000109021b1901000000d40904150001da40df00090561"], 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/crash_elfcorehdr_size', 0x149a82, 0x240) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x800) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000a0101010100000004000000e070a091f16ac01987b1d4700000017f"], 0x20) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x20001, 0x0, [0x20007, 0x4e6a, 0x7, 0x2d5, 0x9, 0x400, 0x3, 0x7]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x55}], 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0xb78, 0x80000000}) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.503384813s ago: executing program 4 (id=2842): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0xee00, 0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0xffffffff, 0x240009, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x0, r6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d0600000000000000c254974d88d9c9f80000000500000000000000000000000b03000000000000006100"], 0x0, 0x52}, 0x28) 13.273192167s ago: executing program 4 (id=2849): syz_open_dev$media(&(0x7f00000001c0), 0x2c26, 0x82543) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) 13.17908242s ago: executing program 4 (id=2850): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000402505a3a44000010203010902620002010020000904000001020d00000b24"], 0x0) 11.186975738s ago: executing program 4 (id=2854): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000000)={0x2c, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000055c0)={0x0, 0x0, &(0x7f0000005580)={&(0x7f00000051c0)=@polexpire={0xc8, 0x1b, 0x1, 0x70bd2b, 0x25dfdbfc, {{{@in6=@remote, @in=@remote, 0x4e23, 0x51, 0x4e22, 0x1, 0x3, 0x20, 0x20, 0x29}, {0x4, 0x7, 0x5, 0x1, 0x7, 0x91, 0x5, 0xff}, {0x7, 0x2, 0x7ff, 0x40}, 0xf, 0x0, 0x1, 0x1, 0x1, 0x3}, 0x5a}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x49, 0x0, &(0x7f00000003c0)) (async, rerun: 32) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nofsc']) (async, rerun: 32) syz_clone(0x4200011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x3e00, 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r5, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000440)="57445d134d4ba26469caa8a2fe6b69217555a3a4721f449a9c1908a15c1f550ac2cf8ab5901cc58a899746d190aaad9d75be54bd44a133580d230a05823c91944388ef34c464540bbeaea9a10b81336206c04904349c409e268c5ea3fe58465e65edb09b9ada2301c4e90f6428366aaca4449fa2459c41b77b9d7e9f7eeaa86a9fcbdf1c7aa78c67972c8004b6143559c3d20427622b2187de686399afd412466419449697b7ce30e03f361f398e8cd08d425f6be5787ce90277be230c13c3a4b340e61c9308147045d4e0437e1adb2807c293fe3caf4d405cc3f842", &(0x7f0000000040)=""/150}, 0x20) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120101021066fb20fa0747082fb90102030109021b0001050543dcd82889e6eb8c9a79320905010210004e08d9"], &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0}) 8.356798204s ago: executing program 5 (id=2857): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r3 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = getpid() syz_pidfd_open(r5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 7.807601391s ago: executing program 5 (id=2858): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000400)={{}, {0x1, 0x1}, [{}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x7e29e87eb0574fe3}, {}], {}, [{}, {0x8, 0x6}], {0x10, 0x6}}, 0x64, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xe4, 0x15, 0xb, 0x10, 0x1164, 0x1e8c, 0xc910, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa0, 0x0, 0x0, 0xae, 0x54, 0x2e}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r6, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) syz_fuse_handle_req(r2, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x28, 0x0, 0xffffffffffff6260, {{0x5, 0x2000000000006c2, 0x1, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r4, 0x3, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x6, 0x0) write$tcp_mem(r0, 0x0, 0x0) 7.616978368s ago: executing program 4 (id=2861): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) setgroups(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7050000080000008500000069000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1005, &(0x7f000001b180)=""/4101}, 0x94) mkdir(&(0x7f0000000140)='./file1\x00', 0x89) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r0, 0x0, 0x0, 0x180800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r7) memfd_secret(0x0) 6.334656173s ago: executing program 7 (id=2863): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x20, 0x1, 0x0, 0xa, "0062ba7d82000000000000000000f7ffffff00"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0), 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='so3rce', &(0x7f0000000100)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102396, 0x18ffc) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000090a000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e5b663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe036c005ec77ffd00fb243c31163d233352650cc00", 0x0, 0x48) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x2000}) tkill(r3, 0xb) getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r7 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1a) 6.113101564s ago: executing program 7 (id=2864): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x9, {0xffffffffffffffff, 0x20, 0x0, {0x0, 0xffffffffffffffff, 0x1000000000001, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffd, 0x0, 0xa000, 0xfff, r3, 0x0, 0x4, 0x259}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x22000, 0x40) 6.094849706s ago: executing program 3 (id=2865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0xf000}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 5.950311033s ago: executing program 7 (id=2866): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) r3 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800009c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000808dd4992861ac10000000000000000000000b00", "90be6c09306003d8006000", [0x1, 0x10000]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) 4.58169731s ago: executing program 8 (id=2868): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x6, 0x12) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) fchdir(r0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000040)=0x6, 0x12) (async) 4.49518874s ago: executing program 7 (id=2870): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x10000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r7, @ANYBLOB="00e900000243010024001a8009000100766c616e0000000004"], 0x44}, 0x1, 0x0, 0x0, 0x60008084}, 0x0) 4.470170462s ago: executing program 8 (id=2871): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/uevent_seqnum', 0x2000, 0x1) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff7850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = syz_io_uring_setup(0x19f2, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x0, 0x34e}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r7, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.245760768s ago: executing program 3 (id=2872): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000380)='c\xd5\xf6T\xff\xaf\xa4\x00gr\x05\x00\x00\x00'}, 0x30) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x644, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2acfb6eeb4d0b56b17245a1cc3edf31622d201da1aa7f8323703e803a29da56", @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000700)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000040)="ffff957cb4dc2246a85712e61f47721d612bbc0e5337d5d758ecb5ad9f2e8bf0dd46caa786cee8a656b11cc882ea6f7780fb0ee641cf32b82ea5cc3eb26633b2", 0x40}, {&(0x7f0000000540)="2d45ab0f3dbea7284ce58547845d139a7abc6f0b29ca25947e20300b1e7306dfd2cf6d24fb2757eedac661f3022fcb820978dd06365f3a221c21add61cf15dd7ef975413377fd3cb9672546c187d0ddecb861a2b1f39e05646a0c31959c1b07c54cb3449056d4557cb064f6444ef5f262319b7c5ec4a6f8e8d7e7a10b856bbc01b256938b7bf4bebedd3ec7623dd2dfc39d46809790c3ae46f4061da42190ed6a9efee93921008614c0d664d9ab82da13df46cda42df094067aba433c98cc5969ef30f5f82", 0xc5}, {&(0x7f0000000640)="2413bc2545c1c12a04ea1be06ad314b7afe122606737f6efd3e0efef9a6a1f5481b30e825f976af1706820c354606806dcb74dc6ceb97c4323645ee48ef3e3df0cb25894c4bbacd45b0867db2756254d2680487b6bdc", 0x56}, {&(0x7f0000000340)="f6e563eb4920a66a75752fbb5e7720e6", 0x10}], 0x4}}], 0x1, 0x10) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x1c) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(r2, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) recvmmsg$unix(r3, &(0x7f00000015c0), 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[], 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000100)="29000000140005b7ff00000004eabdeb0101b6ff021994c316d29bb7c492c6159f7e552075631933b4c099f56cb91255c0eecadb5f42fb4815", 0x39) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) socket$netlink(0x10, 0x3, 0x4) 4.191345006s ago: executing program 7 (id=2873): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000280)=""/70, &(0x7f0000000040)=0x46) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_open_procfs(0x0, &(0x7f0000000500)='smaps_rollup\x00') mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x48, &(0x7f0000000140)=ANY=[@ANYBLOB="3d04"], 0x28) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r6, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r6, 0x0, 0x1) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000002ff7120c40911001cb00102030109022400010004100009047e100226d5180809050602ff0300000009058202"], 0x0) syz_usb_control_io(r7, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r7, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='@!\f\x00\x00\x00\f!'], 0x0}, 0x0) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_wakeup_irq', 0x6c08c0, 0xab) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) 4.093044706s ago: executing program 5 (id=2874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x8000000}) write(r2, &(0x7f0000000000)="fc", 0x1) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000640)="af", 0x1}], 0x1, 0x4) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x8101, 0x2) write$P9_RWALK(r7, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x30) fchdir(r6) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f0000000f00)=""/4104, 0x1008) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0xd, 0x12) syz_open_dev$sg(0x0, 0x0, 0x8002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000bd7001fcdbff2500f0ffff352800", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b0001006272696467"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.95575573s ago: executing program 8 (id=2875): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x59032, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000280)={0x7, 0x82}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0xa, &(0x7f0000000100)={0x2, 0x2}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)="d5f37cd19422378361bf375fd974f908a1aac814340dca5f3c094cd1ab4d30278eee510ffe3f04556440564265ebcdd8714123ede4648e9983b39d4272a3b864a446ab1f8942804c00d116ce0aa1c88f4ca9af8c8da109d0745feb46288775c463286571a5eb378740237151d9", 0x6d}, {&(0x7f00000003c0)="dda4625fbff0de3a63f94c7c8a59f2685a0cff20467f198fd2ba87220bd429d7d1c913310f3c21c1769947ef34f3414b5560c224e689c32f364c84c1ae35738a33e9f0ec9334b1b83c7a10dda15342858055040988202dac2acba07cc44a10936e5bd0f436d0728bbab989557c851d44eb97c4c48917f0767dc7fbb350e76972c5f7e6cac89dc483763e7dd2572543adefcc1c", 0x93}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000600)="3ed93ad74a24c97521fd38ec5444623099546ccd8a96b0c8d040459970db878fbd28c3aab771d5385c042694f07e85050740509dddedc6d9fc772eacb803082a72fa062ad36213ee9fa7253e0774903c940fecab3ab5f35e6547068a29484734f1c807af3ec7d5b60f03a03c8abb1f4c74fd4f764c2873b68391d02251097662987c5a84c969e4d58cb04ccade64bfeca98a98068b4ef1a25b000f7000cab063c911cfa8b1abcf2aa6cb46ffd2d9c43233c379c6bd48c39db14957422dc661308460a2430c3b63a24b6448acb516774741c7689704ecc79dbec7d0b070b77128c3b8b064e4c581aea31503", 0xeb}], 0x4) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace(0x10, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x379) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) wait4(0x0, 0x0, 0x40000001, 0x0) r5 = socket$inet6(0xa, 0x8000f, 0xfffff062) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x7f, 0x4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 2.955261829s ago: executing program 3 (id=2876): r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) unshare(0x2c020400) syz_clone(0x6080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r2 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000000c0)='syz1\x00', 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xb}, {0x2, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x4000810) r10 = syz_open_procfs(0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000580)="f47f8122fdb41df45b83279ad9ff2856dc95681c38fe5324763df394c0e3b1a5b84b3a777a696dc7997dd4da6f42f895d06199d77d11a4bb76ef0321b83e30a5640c7a9821dcc85d53c4c9cb3888a0cca1d6c363e6e06cc1409185a3abfbfc59edeb6cac51358ed0a125b92e973286bd3b79d3fe3d134f1b2f8812d7228582ab1b4b186f9d1b2287c1a15891aa59d2ec77e43bc3612696e6349ea874f32416ba54314a84ed05e4b8056b8f6f1efe2b4071328041369d1cd66149f32e0405d9e6b479ef546fdb2f380f0a549909832a73c292f56c692df99c676d5ac157a5c9bd3e3b13ed66", 0xe5}, {&(0x7f0000000500)="7a891e848c726b2396b16abc8632f9e9d6a12b78f62c2567f72222a37afbdcb4e5fa615ff630f8", 0x27}, {&(0x7f0000001240)="c3b497a6f13a6d4b1703ebc42808a19cfb7b276f900bf3f5b3b6705236762c6cc2e56d39fad0286f8ef7087ed4149c604304d616d60a079fc41520ca06d31ad9f72afb2c5f4ab455209980c93309bc38ad1492b29904733c1ac8c961c0f76fa560e69acfe63e67ec0fceb0aa935ed26f9a26bf185a33b7b72c188f34f1a6f7a9f72819e33554dedc740c7ad9a0608273a718befcd5f8f4bcf0d92802eff96a8053bd556ec532ba558b99f74c6725d5ec7cabb4dfa14e2cddfda03f7d45f5f56a4b2d4e9d23dbe8f218b3c4f1daab510efd2684a701062ab28e601f26764c73c88a94b4a2d40fe4a273b7745f8ec857baa301211f5d6727bc167e9746125dca761d60d56e06c49964af9f8cb1f8e51f27de865f1dfcebecbe82d27d7b610f6716d26a2e6ac0c6f53170cd2719f5ef8d8420a1b2a41f76569716a2ba0709b1afb6fa8b94407a6722f93a64969daffa539bfbf5df1921bacedcf0fa98a920109e2554e513e5d7104167d1daac7b067842aa1cda4f07967fbc3cc77e10a83f63bf6c47183863d4d023bad9e556c0da55b372411905e2408918a8a7ad951ba5423745d68ef92bbe168a79609bd5245bdce5d62da5f3e33e6657748322cc7d09a29fa9eababf04fad1d63fb41f26c12860410edae9487024e47d4183c30d97dd52908dd25f4c1a8d35a5d327828435e1ca7ebe4c789a995ada7a741292b6a09ffffad7fcda9e3df5bfb11aeb1b84712cc6d7b9cb8d3b04a615cfeefeb823b625ba78159347b458b963594780da7847389f4b7b04390543923a5013b6fd3f933d8ca1f840a6d4ab8ef518820f0dcee06e00d4d15a758671f55f61835930958f071136164f929bd1548e06e6dfdcbec0b1c2ac99a07b54a4f1ca05f51d422de3f132e5058f891349d7bfef4b33cffce4bcdbc303701d2e0f6edb6fe8d0f9af5c94f42eaa9c3d46642cf4df39422876c824627be45a6940932f3152a44229fc961ccb8145bcc774d922a653674234cd5fdbdc123ad0a9d31938b18903574454186720093836f4cc7dc403c1f24efe9daef75fc538a6915b221381f295ad5084732f4b4bd27ca2e65fcb142f060d09df1ec675eb7783b1b9408b229caebb2a98c966213023e7192a5ee08f07e7a1c3a9fd6276c9753c18efb55fe416e8a79f00ee94ac68d610b8dbda5276ddc3cb2a5cce5b944644f962c63113b6b22f01a653e03d3976f2312fe38d358ec41123e6e28e742738149dafaf97bc404d88b95d5820d019d87e04cee6146ae6fc76c2455b23d27fb605a6412e32c02e5705edeed605966c92be8e045ea97690d5a94d67975f57e78f2a9f7b56671ffad1cf33dad196d8c387cfc96d4e17a47199247feea4030e5f759e200ccf0b58dfe31ae652dd0dc39b485952090ca7e95c6c62e9ae052e6d1a924b513bd60d07ddac699fe31943f02ea59bc69fbc19389efb52308275e050152178776f8624c62389b329da86e9c1651fd63142b5b411626150cee1ebc029a72f0a0d2f894f425ed08babaf5a874ff3039bd489337cea04b73d6a2cd5e2b9126bb54eaa5235b4cdeaef5682cbfcce566c431f98a0bbf0c5d09d4a851780a615f3417f6c3489a2047cc3c9469d0749ec3dcc5c510769fa1688cd6231a490c01c94dcb70a11784fbbfab27302d899af7477f7ac7bedbd28d9b16612bcce45066a3ded3315755309d8132fd9e3f69f708dfedfbc3a4caaf625e0b0abf29b8358845d274b1e113fe2a966b766add19635f46405273356a7ca482a17eae2379ae9869eb87781187b8258443d5c980a99239cc52e8897a00202e617ee9216ab3ea56b1300050633ec4b8b433d7c2d1891abd25bde40eb49a8cb1a8acbe7f63962c5d39ff07f045bee669a66b89523f953e033df66ffd9ad4e5304501e89495d52e6152ba92c30ab47fedd99648defa0042d04e4e757340a1d4ae4d3f8f835a19171b9cdf0f4d8d82cdd8d748bc7e24e7ea1d738da5baacb1518aaec1e867344007e126279e44b07674d10fe2f6c6320383d28f2a59593e563ef2d7fc5ddd0d0342ef6b9715a72ac0173db08b20d669c0c7f7d5c6f1d16a2abe1cee93715bc716ac7a9a29b8e6cd209eb43ae990e03126c9c310361f632337c26de2029fcc2d1a415ecf90b46566617d6214d1805c1e8cd067b452cbdd52a8f0b580191a4f3f76281b3c665aadeffc0fdd3b64bc964ad84012d3bdd6d531ed75de4afc22c203027f121717beb0ff6a287ae34701dc504fcfd0d2df2f98cab444ad2fc4f679a51676e727e31a2d5e7b42b006df002a38c4d818cb0f149e94ae3e5f92fcae702cff0194f7d5c57dd59d140d397fdd27f1e62f69190fe32aa8de98f3fde426db3a37825d1e24509e4f90d73e93697cde1fa94f381ae360218c7f26b054e695b4145d94ba8de404fe7c99931da1cd548a8cc9e8a9a3ad80afa2e9dc64379523825e6432172bfdcdc51a045af5e91b37eb3c3ba560475feed96d5cd20731010cbb294d288310ebb6c07aa83382090932bd55b80188de4a68634138ff0878860d4d307ee3744697941332833671f87db749a9368ef7f9283a0f789f5e5de84623d65e706085e5587fb7f930081c49b166ffdb7661b552698af41b7c1eab1c51f53545fed839bc6a47311072e9d8f0f58e87134740434a106c942d8e99b43ee0007ade132b9948cb6f87cd6956e2837abf800947bc3742ebd48a18624ebcb9f7ff40ce1e33596810f038e99f384f5f87365660783ab0538e11fb7324d12c408c0e12a33e1a91e2bdb67ad5fc6cf056adc59fc4673de309035745a05137d04d2150be9393e58578a2fb1e3270c2a3ace413487a3881a5a4c1a86a767b9f09b7c1826c2b341cdb87d5a49f5fd23dd1ea27d74ebebd2fb7ad6a44e516b9ab0b7e66e64fc098977d1fe3e183335866af83a96c671e0866c94b48690e4de0a0151569d97e6055a11921b21ef720174389478926550d183370cc04bb92ffcbadea1ee98d840a2cd5215616def15588de338c9cae13b226669c9c884799da012869f20b44ce0d4b528ca994ce5c802d6bd518eb864b432e25ff572fa091754337a1eeb63cc2828859c34f019cd3e430dd2203bbd44f809def162887a9bafd3e4c580455f0db7ce75f62a37dab6076b5d4d80b40a636d78b46d5a1075c5b19145c0ffd052df28ec5fc35b8ce813cd2b45e71502a594294b30cfe856bdd93ecdb64b097d3cf4d7ffc95afca056fe80b5daa326334af92156a6c37cef807311e769282c88febfb9c5367bd9bb268c17eb9c74cd8d2f16309b9424b1aa083946d1fbcae34b73bbadb402f82b7090d8302a8d689305d4505ba05b5f879009b8c43f21e748a54345fa2359b545c72c5364b334da6f35196d33c1bb5a37bce8a102a549156c999e9ee82a5aabd2420ab7a1d108310e7a954ee048c435ba4e3a446ebde8b441b3cc1d4bba3a41b47d6e799d17d5f816345b61838e44dbc2cd9f5a85002ebf973f8f12a3e58c79b806fc8ca3dd7073d5d92dd1422cd2a99831001d8ef107a13c80bbb844a03249fa1009f19b46006ef7aac85273a4b0d4f119d48999f216118794f6b2750d81c650f85a4b723151ac437ce2a2fb5babce92ddc00d30cdc79eabe614742d0200c5ee57572dd2d8b76f9308e1fa052da3660c0f3080912b69a147e29818506ef3ebaee05bec6052fc36992480fa5f35cf5d4545f6383fea1a29e5ab2c97049c6e14dde2dafeb6e81d408ac6192f30cd1ed48bea157ebefe63ebc1dd991677bd398d5875d41bd6890f425002600f7e6f96ee5f58d2ee96abd35a88ab127b543a5a5650dc3dac45e2f67d2cd4191cefcff2470100379d7557f676e6ae0d9c0350e15a3d2fbcb5b312e366896220cb340a4e55423c809a2db5640f948a260ea5f7549d43e416c92064ae582ff4e470ea27ff27bbf41a2046cfc11e595b77f17af940e4c40ae713cca6c4364d44d8eebb54ffe44fcb94091e56f7d1f1a38a9a717152d5056d94c7798e1a4853b54982ede1705ad6641d08bf1798b63fe5e70ae764f0fef3f422feabd7137ea3ec77c164803edc426cba9ab9169d05b3d51957fa288fcbfd9b4476ed198d415c30a54deeab5fea045d55ebe620114ac98885d3f46748f88fb1762d695b733178f0f4c9b10be1eb3761ae1aecd254f38dc3be0dc38167c15ff03003182414665f5cfc6d1cb09ae1e65a9502ec67ca3f227019143f4984380e2e539b50aa3266ac001c405dbeab181625d1bf5afc285000270009f58eb520984cf4216c35e7728a29d80657692c0feb7d2885870919f00cfb12302a2568b4a4296eb7371bc7d753b4bcfa80bfd503b163656c13fb665c76dc567cd347ceb7ea4c5737e78ecacdab1f74ccc6441beb06068a23b8802f56c80e6e8e221f2b6b6bdf55b84fbf85906008385bae9739e118c87dbbf0c2e89a129a9eeccfe5478fd49db72dcb0ac2e181967815b3a5f622a9bea87443b5b8382771a5d250ee704e425b8a27c39d8fa452aa838a0098cd5507bf310758d2fcba1410094438a4f790cc934d0f6de809ed180dbe1d4292dead0755286fee334dfa128bf3010a8ac477c4c0594bea0aa754053ba04ae15e1d0f2223ac129ab495f444451694fd974b038eea40a8486a3e785260377f788c7d14786b3b8acd3f90701e9da52c41b1c07dec282a6e687d8646c4251801ff1d6c6ab5dbc7e40f2e92ae856051c04b611913336e18197ff762f0be97a78b87229d10f36ae685ed4b9e5e57d12d1ac41be15ecf1dcfaa8867d95f4bac7f58b62246e75f85ff9c8710dedfebd7f9b255ef7cfdecffdb4a62b4f835deeb885a41cec9975a68a6d684c3dcb4850c30e986057afc8f3d8522035efd0bee71f392b4c14846b25f644a3f5c54ce893ab56beff097c14929beddde6b50a0a78bd26dc476813afc862d07250beebcc23165b845d25edb484bcc16897b74a92ab7d9e1ac6a74c9d419ac3f6bfb5470dd8a0e95b12a56adc19851156d0de50ee4380fc7a0df8283653d052d7b9c5dcb3c106dfa00e04edc05a96f53aee2a5efcd1b0bc1dcdb93a6d7812b16d532bca8b7dd39574a84557a980877178e42943eafa2a1af7ef67a2f38042d7215a7476218bfa09c193c42365ce88c52bbd5be288730d88584f02bcddcf8a256b3a157e55b5ddda97d1ed6eb10cd3d37b74fe73294a8d279712bf22d61526cef46c8116f1135685ca20f86b4e3b2a08d644e9087d4fad8f72da2f0810219613ea233b5c61a5c0015b1df2cb3260817b309c5ecb5d6c296640228d2af89c7e4ae9fc706633a4578a2530c0556d7b4b3f911e8ed6f533b47185e3bf4079af1c010cc42b49c1bcf8929d01cb8b7255f4170ddfba0a71b61150f2d7e7f5d6df3a0a9e769c7f91fed7d476c976f4e16b34c7316848a76d9fa2db08dde8d55322d185d87fbdcb77bc11c154ba152576730cd15217d87c1e457271bb66894779e441a11cc2336d883c6369f46cafa081a79ac76dc53209ac24f3f19299751bba197725a924b45ddc62d5d1936446d17f606670bd43ae81b0a735fdcc7ea888bc7d7b14c6549fe6d92e5681eda8b3e259b796bece7a8b9d006b9c0ef7e3f1f7a1fca378dd903ace75902149c130f00c09ed2c4e9a57b93007399b5b637f8c68c3925a49fc4e7a4d88dd074ec537e26beaf6511466398fce54fc3a0b9711da360be7e8a38bced9d727c8425ce1ed83884452013c46fca4da20e0e623dea19636b1689a980cc31c92ae2d0cc04ffc440c9862bd07e15380a6e85f15b41beeed26bd544ba", 0x1000}, {&(0x7f0000000680)="414da83e", 0x4}, {&(0x7f00000006c0)="ebbad6a1fe44a2d8fca5076f54a3c97fc06b26711370391175ee654cf2ecd8450c155510ef5a871fb2321a11928dd67ec84e60451fa627123a1f5daa304a40fa7773566410eb213c373b12f8d1ee3af4caeb4598211d3c3e90e29ff944cba9601c6421943eef3f8ffa88ad0f3494e71555ba762ac9ec80942f0ad190a756da2bc1767b", 0x83}], 0x5) sendto$phonet(r10, &(0x7f0000000340)="d6502ecbb997b1fc884326b5c4fb16b77479ed7db0b0974be914811361d814342152c0db46e49b88a305b8126b234b8eab0fa9451a32571bd2b3e92e468e96fbc2ddfb9aaf620e885130b30ecbe3af2c2273d180bf4d024f1f0a872d68fa957a4a2b73a80332567bb3ad10783f1b0eb6d13df92e47acafe30e5e2ae85681de4c6a31173ed30d8d4b21065eced082b68a4e80c63b3af9", 0x96, 0x800, &(0x7f0000000400)={0x23, 0xfa, 0x7, 0x5}, 0x10) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a6970000500040000000000000000000000073a0000000005000500020000000500010006000000"], 0x44}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007c00c00018008000140e00000020c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2.687632149s ago: executing program 5 (id=2877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.389104461s ago: executing program 5 (id=2878): syz_emit_ethernet(0xc2, &(0x7f00000008c0)=ANY=[], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x200000a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdec}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x17) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYRES16=r6, @ANYRES16, @ANYRES32=0x41424344, @ANYRESOCT=r1], 0x0) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) 2.300645872s ago: executing program 8 (id=2879): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x5}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x3, &(0x7f0000000280)=0x0) r3 = gettid() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = getpgrp(r3) setpgid(r6, r3) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) write$binfmt_script(r1, 0x0, 0x0) r7 = socket$inet(0xa, 0x33b643d982fe4660, 0x86) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x4}, 0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) 1.800868795s ago: executing program 3 (id=2880): r0 = syz_io_uring_setup(0x43eb, &(0x7f0000000000)={0x0, 0xa1a4, 0x1, 0x1, 0xd0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x12, 0xffffffffffffffff, 0x10000000) (async) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x420200, 0x110) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000140)={0x80003, 0x80, 0x1}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x12345}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004800)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/148, 0x94}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000500)=""/21, 0x15}], 0x4, &(0x7f0000000580)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001580)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001600)=""/121, 0x79}], 0x1, &(0x7f00000016c0)}, 0x1}, {{&(0x7f0000001700)=@qipcrtr, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001780)=""/4, 0x4}, {&(0x7f00000017c0)=""/232, 0xe8}, {&(0x7f00000018c0)=""/168, 0xa8}, {&(0x7f0000001980)=""/19, 0x13}, {&(0x7f00000019c0)=""/83, 0x53}, {&(0x7f0000001a40)=""/175, 0xaf}, {&(0x7f0000001b00)=""/46, 0x2e}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/230, 0xe6}], 0x9, &(0x7f0000002d00)=""/15, 0xf}, 0x2}, {{&(0x7f0000002d40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002dc0)=""/13, 0xd}, {&(0x7f0000002e00)=""/234, 0xea}, {&(0x7f0000002f00)=""/19, 0x13}, {&(0x7f0000002f40)=""/76, 0x4c}, {&(0x7f0000002fc0)=""/232, 0xe8}], 0x5, &(0x7f0000003140)=""/119, 0x77}, 0x9}, {{&(0x7f00000031c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000004480)=[{&(0x7f0000003240)=""/5, 0x5}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/115, 0x73}, {&(0x7f0000004300)=""/246, 0xf6}, {&(0x7f0000004400)=""/124, 0x7c}], 0x5}, 0x6}, {{&(0x7f0000004500)=@nfc_llcp, 0x80, &(0x7f0000004740)=[{&(0x7f0000004580)=""/154, 0x9a}, {&(0x7f0000004640)=""/242, 0xf2}], 0x2, &(0x7f0000004780)=""/84, 0x54}, 0x1}], 0x6, 0x122, &(0x7f0000004980)) (async) r5 = open(&(0x7f00000049c0)='./file0\x00', 0x101000, 0x40) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000004a00)={{0x0, 0x0, 0x80}}) (async) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000006a80)=0x3000) getdents64(r3, &(0x7f0000006ac0)=""/127, 0x7f) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000007f80)=[{&(0x7f0000006b40)=""/4096, 0x1000}, {&(0x7f0000007b40)=""/196, 0xc4}, {&(0x7f0000007c40)=""/8, 0x8}, {&(0x7f0000007c80)=""/192, 0xc0}, {&(0x7f0000007d40)=""/249, 0xf9}, {&(0x7f0000007e40)=""/43, 0x2b}, {&(0x7f0000007e80)=""/239, 0xef}], 0x7) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000008000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000080c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000008100)={0x12, 0x10, 0xfa00, {&(0x7f0000008040), r7, r5}}, 0x18) (async) r8 = syz_open_procfs(0x0, &(0x7f0000008140)='totmaps\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000008180)={0x2, 0x6, 0x81d7, 0x4, 0x40, "160c6d24918cffccf85cd62954e109ad868c2e", 0x6, 0x2}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000081c0)={{0x1, 0x1, 0x18, r9, {0x9}}, './file0/file0\x00'}) fstatfs(r5, &(0x7f0000008200)=""/180) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x80000, 0x42) (async) fsconfig$FSCONFIG_SET_BINARY(r10, 0x2, &(0x7f00000082c0)='\x00', &(0x7f0000008300)="020db9873078b261187ae4bdaceb97c613790f0f8c3fb838ddb2f88d937996ac1085c8e7d008e2e95191eeed029bfee7a9ca7c3ffd35894cad298a043b5e994f38623745a7fb50a42df1ee7c0bf7667eefab3f04b14d54b3fe4def272d073fffb472e39849709f0feacf251e06a7a91a12a1b3f3fca32ca562741fe1cb06121a2f1b9d0bae0597f9874d49c5b13c1bfeb4dccc23fc814bbeb8346653e85c6495054bee681cc00b47292f623a2b2cc99016a2469399611c427ff393092ae047", 0xbf) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r9, 0xf507, 0x0) r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) copy_file_range(r6, &(0x7f00000083c0), r12, 0x0, 0x1, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000008440), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000008640)={&(0x7f0000008400), 0xc, &(0x7f0000008600)={&(0x7f0000008480)={0x15c, r13, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x400c1) (async) r14 = syz_io_uring_setup(0x603b, &(0x7f0000008680)={0x0, 0x4915, 0x8000, 0x0, 0x30b, 0x0, r8}, &(0x7f0000008700), &(0x7f0000008740)) io_uring_register$IORING_REGISTER_PERSONALITY(r14, 0x9, 0x0, 0x0) (async) sendfile(r10, r11, 0x0, 0x8000000000000000) 1.608784765s ago: executing program 3 (id=2881): landlock_restrict_self(0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000033420000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600000084d40000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(r0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x34, 0x15, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x11, 0x8, "ef538a07feab0d0d7233ab95e1"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000820000004000000000eaff000b00000000000000030000000000000007000000"], 0x8082) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000480)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000004c0)=0xf7) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.212778886s ago: executing program 8 (id=2882): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x10000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r7, @ANYBLOB="00e900000243010024001a8009000100766c616e0000000004"], 0x44}, 0x1, 0x0, 0x0, 0x60008084}, 0x0) 1.009064215s ago: executing program 8 (id=2883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x1, 0x7, 0x2}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') unshare(0x6a040000) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x4, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)="4ba72c", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/246, 0xf6}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100003052cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 893.679543ms ago: executing program 5 (id=2884): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/uevent_seqnum', 0x2000, 0x1) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff7850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 125.0343ms ago: executing program 7 (id=2885): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003}, 0x38) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 0s ago: executing program 3 (id=2886): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) r1 = mq_open(&(0x7f0000000040)='bond\x00', 0x800, 0x86, &(0x7f0000000080)={0x9, 0xff, 0x80, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_getres(0x0, &(0x7f00000003c0)) mq_timedsend(r1, &(0x7f00000000c0)="182505a535a0d07c2f9e6b8297977c1b1cd096c9df92577540c1cf5c23998f90e0b85770e9c6ea441fdae90bdc735b01f39b99b2c02b370301d85709f9efeef71098858233984a24fe868b5e484b5c90649361807088e96fccd7be0db0a6efdd6ac43f04a01e038cb46e38381aba22ea2dd2e13c6e79c6e51af101f27d189c504f8c957e574dbc4f", 0x88, 0xbaa, &(0x7f0000000280)={r2, r3+60000000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x437}, 0x20}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x2, '*m'}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xf8}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x2}, 0x0, 0x0}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000340)={0x3, 0x101, 0x5, {0x2, 0x100, 0xaa89, 0x8}}) kernel console output (not intermixed with test programs): 548.951685][T13495] binder: 13494:13495 ioctl 40045408 0 returned -22 [ 549.018840][ T30] audit: type=1400 audit(2000000278.482:5448): avc: denied { getopt } for pid=13496 comm="syz.3.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 549.059491][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 549.068918][ T5860] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 549.077540][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.087993][ T5860] usb 6-1: config 0 has no interface number 0 [ 549.103369][ T5860] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 549.113234][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.127883][ T5860] usb 6-1: Product: syz [ 549.132210][ T5860] usb 6-1: Manufacturer: syz [ 549.136865][ T5860] usb 6-1: SerialNumber: syz [ 549.159854][ T5860] usb 6-1: config 0 descriptor?? [ 549.298032][T13501] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2224'. [ 549.308218][T13501] netlink: zone id is out of range [ 549.313597][T13501] netlink: zone id is out of range [ 549.318822][T13501] netlink: zone id is out of range [ 549.324165][T13501] netlink: zone id is out of range [ 549.329357][T13501] netlink: zone id is out of range [ 549.334608][T13501] netlink: zone id is out of range [ 549.340310][T13501] netlink: get zone limit has 8 unknown bytes [ 549.409087][ T5860] usb 6-1: Found UVC 0.00 device syz (046c:14e8) [ 549.423428][ T5860] usb 6-1: No valid video chain found. [ 549.760455][ T30] audit: type=1400 audit(2000000279.182:5449): avc: denied { ioctl } for pid=13482 comm="syz.5.2217" path="socket:[40114]" dev="sockfs" ino=40114 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 550.028464][T13509] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2225'. [ 550.047635][ T30] audit: type=1400 audit(2000000279.192:5450): avc: denied { setopt } for pid=13482 comm="syz.5.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 550.144899][ T30] audit: type=1400 audit(2000000279.482:5451): avc: denied { setopt } for pid=13505 comm="syz.4.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 550.682030][ T5892] dvb-usb: found a 'YUAN High-Tech DiBcom STK7700D' in cold state, will try to load a firmware [ 550.719789][ T5892] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 550.728608][ T5892] dib0700: firmware download failed at 7 with -22 [ 550.741001][ T5892] usb 7-1: USB disconnect, device number 7 [ 551.577164][ T30] audit: type=1400 audit(2000000281.042:5452): avc: denied { create } for pid=13524 comm="syz.4.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 551.653670][ T5892] usb 6-1: USB disconnect, device number 50 [ 551.942261][T13537] SELinux: security_context_str_to_sid (rooC£\Ø=U) failed with errno=-22 [ 551.958948][T13533] netlink: 'syz.3.2232': attribute type 19 has an invalid length. [ 551.967687][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'. [ 552.495055][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 553.160090][ T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 553.809633][ T54] usb 7-1: device descriptor read/64, error -71 [ 554.313952][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2242'. [ 554.409983][ T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 554.569764][ T54] usb 7-1: device descriptor read/64, error -71 [ 554.724764][ T54] usb usb7-port1: attempt power cycle [ 554.769257][ T30] audit: type=1400 audit(2000000284.232:5453): avc: denied { setopt } for pid=13570 comm="syz.3.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 555.079165][T13575] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 555.206683][ T54] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 555.263962][ T54] usb 7-1: device descriptor read/8, error -71 [ 555.609777][ T54] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 555.620548][T13589] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 555.632379][ T30] audit: type=1400 audit(2000000285.102:5454): avc: denied { watch } for pid=13588 comm="syz.4.2248" path="/446" dev="tmpfs" ino=2363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 555.659382][ T30] audit: type=1400 audit(2000000285.102:5455): avc: denied { watch_sb } for pid=13588 comm="syz.4.2248" path="/446" dev="tmpfs" ino=2363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 555.660166][ T54] usb 7-1: device descriptor read/8, error -71 [ 555.681683][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.810680][ T54] usb usb7-port1: unable to enumerate USB device [ 555.885912][T13598] program syz.6.2252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.004105][T13602] erspan0: entered promiscuous mode [ 556.009655][T13602] macsec1: entered promiscuous mode [ 556.029122][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 556.039937][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 556.048574][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 556.058069][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 556.065242][ T972] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 556.067026][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 556.089524][ T54] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 556.125582][T13608] netlink: 'syz.6.2256': attribute type 11 has an invalid length. [ 556.258327][T13603] chnl_net:caif_netlink_parms(): no params data found [ 556.283539][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 556.289831][ T972] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 556.305821][ T54] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.321287][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.343049][ T972] usb 4-1: Product: syz [ 556.347284][ T54] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 556.361595][ T972] usb 4-1: Manufacturer: syz [ 556.372360][ T972] usb 4-1: SerialNumber: syz [ 556.378650][ T972] usb 4-1: config 0 descriptor?? [ 556.383690][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 556.390613][ T54] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 556.402150][ T972] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 556.408410][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.420723][ T54] usb 6-1: config 0 descriptor?? [ 556.855458][T13603] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.877429][T13603] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.900036][T13603] bridge_slave_0: entered allmulticast mode [ 556.911123][T13603] bridge_slave_0: entered promiscuous mode [ 556.918955][T13603] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.926958][T13603] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.934206][T13603] bridge_slave_1: entered allmulticast mode [ 556.943434][T13603] bridge_slave_1: entered promiscuous mode [ 556.991147][T13603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.004968][T13603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.086053][T13603] team0: Port device team_slave_0 added [ 557.095200][T13603] team0: Port device team_slave_1 added [ 557.136792][T13603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.145464][ T54] hid (null): invalid report_size 1869505638 [ 557.164706][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.191434][T13603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.203997][T13603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.211454][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.237343][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.253067][T13603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.257120][ T3074] usb 6-1: USB disconnect, device number 51 [ 557.322022][T13603] hsr_slave_0: entered promiscuous mode [ 557.328529][T13603] hsr_slave_1: entered promiscuous mode [ 557.334846][T13603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.343188][T13603] Cannot create hsr debugfs directory [ 557.451491][ T5893] usb 4-1: USB disconnect, device number 52 [ 558.024311][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2259'. [ 558.199231][ T5823] Bluetooth: hci6: command tx timeout [ 558.351832][T13603] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 558.521152][T13603] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 558.555544][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2263'. [ 558.565223][T13603] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 559.174370][ T30] audit: type=1400 audit(2000000288.612:5456): avc: denied { view } for pid=13642 comm="syz.3.2263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 559.418217][T13603] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 559.533636][T13660] tipc: Enabled bearer , priority 0 [ 559.548020][T13660] syzkaller0: entered promiscuous mode [ 559.553655][T13660] syzkaller0: entered allmulticast mode [ 559.578003][T13660] tipc: Resetting bearer [ 559.587798][T13658] tipc: Resetting bearer [ 559.607063][T13658] tipc: Disabling bearer [ 559.651701][T13603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.675948][T13603] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.688246][T12824] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.695372][T12824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.726778][T12824] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.733878][T12824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.746109][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.869696][ T54] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 559.897476][T13603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.999501][ T5892] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 560.012445][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.024624][ T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.038639][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.056291][ T54] usb 7-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 560.078811][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.086865][ T54] usb 7-1: Product: syz [ 560.091696][ T54] usb 7-1: Manufacturer: syz [ 560.096315][ T54] usb 7-1: SerialNumber: syz [ 560.103220][ T54] usb 7-1: config 0 descriptor?? [ 560.108672][T13603] veth0_vlan: entered promiscuous mode [ 560.117787][ T54] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 560.123692][T13603] veth1_vlan: entered promiscuous mode [ 560.126023][ T54] imon 7-1:0.0: unable to initialize intf0, err -19 [ 560.137526][ T54] imon:imon_probe: failed to initialize context! [ 560.144745][ T54] imon 7-1:0.0: unable to register, err -19 [ 560.156043][T13603] veth0_macvtap: entered promiscuous mode [ 560.165871][T13603] veth1_macvtap: entered promiscuous mode [ 560.173172][ T5892] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 560.183843][T13603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.191235][ T5892] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 560.197930][T13603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.219097][ T5892] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.223156][T13603] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.228652][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 560.237717][T13603] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.254786][ T5823] Bluetooth: hci6: command tx timeout [ 560.259080][ T5892] usb 6-1: SerialNumber: syz [ 560.261634][T13603] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.273590][T13603] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.338927][ T5892] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 560.354612][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.363498][ T972] usb 7-1: USB disconnect, device number 12 [ 560.403204][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.442960][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.458092][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.507423][ T5892] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 560.563560][ T5860] usb 6-1: USB disconnect, device number 52 [ 561.179982][ T972] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 561.280862][ T5892] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 561.308307][ T30] audit: type=1400 audit(2000000290.772:5457): avc: denied { read append } for pid=13697 comm="syz.5.2274" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 561.335279][T13698] SELinux: syz.5.2274 (13698) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 561.335878][ T30] audit: type=1400 audit(2000000290.802:5458): avc: denied { open } for pid=13697 comm="syz.5.2274" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 561.388190][ T30] audit: type=1400 audit(2000000290.802:5459): avc: denied { ioctl } for pid=13697 comm="syz.5.2274" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 561.440343][ T972] usb 8-1: device descriptor read/64, error -71 [ 561.459709][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 561.472512][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.484732][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 561.607346][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 561.639474][ T5892] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 561.651789][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.662007][ T5892] usb 7-1: config 0 descriptor?? [ 561.691536][ T5892] hub 7-1:0.0: USB hub found [ 561.849596][ T972] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 561.914549][ T5892] hub 7-1:0.0: 2 ports detected [ 561.956343][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 562.119583][ T972] usb 8-1: device descriptor read/64, error -71 [ 562.240625][ T972] usb usb8-port1: attempt power cycle [ 562.315290][ T5823] Bluetooth: hci6: command tx timeout [ 562.413246][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.729730][ T972] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 562.960438][ T972] usb 8-1: device descriptor read/8, error -71 [ 563.203927][ T30] audit: type=1400 audit(2000000292.672:5460): avc: denied { ioctl } for pid=13725 comm="syz.4.2283" path="socket:[41295]" dev="sockfs" ino=41295 ioctlcmd=0x5331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 563.249559][ T972] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 563.271257][T13727] Cannot find set identified by id 65534 to match [ 563.294141][ T972] usb 8-1: device descriptor read/8, error -71 [ 563.408101][ T5892] hub 7-1:0.0: activate --> -90 [ 563.642559][ T972] usb usb8-port1: unable to enumerate USB device [ 563.652589][T13623] usb 7-1: USB disconnect, device number 13 [ 563.738569][ T30] audit: type=1400 audit(2000000293.202:5461): avc: denied { setopt } for pid=13733 comm="syz.3.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 563.809452][ T30] audit: type=1400 audit(2000000293.272:5462): avc: denied { map } for pid=13735 comm="syz.3.2287" path="socket:[42069]" dev="sockfs" ino=42069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 564.105991][T13750] netlink: 'syz.7.2291': attribute type 1 has an invalid length. [ 564.399861][ T5823] Bluetooth: hci6: command tx timeout [ 564.732974][T13752] veth3: entered promiscuous mode [ 564.765647][T13750] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2291'. [ 565.213335][T13758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2293'. [ 565.334782][T13771] : renamed from bridge_slave_0 [ 565.368912][T13771] mkiss: ax0: crc mode is auto. [ 565.556284][ T3074] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 566.463169][ T3074] usb 6-1: Using ep0 maxpacket: 16 [ 566.485828][ T3074] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 566.524684][ T3074] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 566.559552][ T3074] usb 6-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 566.579893][ T5892] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 566.603225][T13794] netlink: 'syz.7.2302': attribute type 11 has an invalid length. [ 566.649835][ T3074] usb 6-1: config 1 interface 0 has no altsetting 0 [ 566.673970][ T3074] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.700940][T13796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.718213][ T3074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 566.899569][ T3074] usb 6-1: SerialNumber: syz [ 566.900021][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.021416][T13767] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 567.040936][T13767] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 567.058790][ T5892] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 567.157945][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.184572][ T5892] usb 4-1: config 0 descriptor?? [ 567.360482][T13767] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 567.367715][T13767] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 568.394702][ T3074] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 568.406900][T13818] x_tables: duplicate underflow at hook 1 [ 568.461054][ T3074] usb 6-1: USB disconnect, device number 53 [ 568.638656][T13823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2309'. [ 568.725941][ T30] audit: type=1400 audit(2000000298.192:5463): avc: denied { ioctl } for pid=13827 comm="syz.7.2311" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 568.823799][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 568.889608][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 568.912815][ T5892] usb 4-1: USB disconnect, device number 53 [ 569.009834][T13838] fuseblk: Unknown parameter 'mrokp_id' [ 569.631551][T13847] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 570.616261][T13871] No source specified [ 571.052299][T13623] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 571.104791][ T30] audit: type=1400 audit(2000000300.572:5464): avc: denied { write } for pid=13863 comm="syz.4.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 571.231135][T13623] usb 8-1: Using ep0 maxpacket: 16 [ 571.250344][T13623] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 571.338506][T13623] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 571.359753][T13623] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.367754][T13623] usb 8-1: Product: syz [ 571.374874][T13880] 9pnet_fd: Insufficient options for proto=fd [ 571.379471][T13623] usb 8-1: Manufacturer: syz [ 571.393025][T13623] usb 8-1: SerialNumber: syz [ 571.411307][T13623] usb 8-1: config 0 descriptor?? [ 571.417779][T13623] hub 8-1:0.0: bad descriptor, ignoring hub [ 571.423832][T13623] hub 8-1:0.0: probe with driver hub failed with error -5 [ 571.442085][T13623] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input31 [ 571.461588][ T5921] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 571.599939][ T5921] usb 6-1: device descriptor read/64, error -71 [ 571.879565][ T5921] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 572.039566][ T5921] usb 6-1: device descriptor read/64, error -71 [ 572.184791][ T5921] usb usb6-port1: attempt power cycle [ 572.928380][T13899] openvswitch: netlink: Flow key attr not present in new flow. [ 572.936402][T13900] netlink: 'syz.6.2335': attribute type 1 has an invalid length. [ 572.944287][T13900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2335'. [ 573.554113][ T5921] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 573.640734][ T30] audit: type=1400 audit(2000000302.622:5465): avc: denied { append } for pid=13898 comm="syz.6.2335" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 573.728081][ T5921] usb 6-1: device descriptor read/8, error -71 [ 573.753644][T13623] usb 8-1: USB disconnect, device number 6 [ 573.837448][ T30] audit: type=1400 audit(2000000303.262:5466): avc: denied { ioctl } for pid=13906 comm="syz.7.2337" path="socket:[41666]" dev="sockfs" ino=41666 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 573.969485][ T3074] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 574.012199][ T5921] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 574.039899][ T5921] usb 6-1: device descriptor read/8, error -71 [ 574.055277][ T30] audit: type=1400 audit(2000000303.522:5467): avc: denied { setopt } for pid=13911 comm="syz.7.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 574.151353][ T5921] usb usb6-port1: unable to enumerate USB device [ 575.007779][T13921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2341'. [ 575.024969][T13921] unsupported nlmsg_type 40 [ 575.051433][T13921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13921 comm=syz.4.2341 [ 575.159610][ T3074] usb 4-1: Using ep0 maxpacket: 8 [ 575.187969][ T3074] usb 4-1: config 0 interface 0 has no altsetting 0 [ 575.232258][ T3074] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 575.249422][ T3074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.267895][ T3074] usb 4-1: Product: syz [ 575.277511][ T3074] usb 4-1: Manufacturer: syz [ 575.287413][ T3074] usb 4-1: SerialNumber: syz [ 575.294471][ T3074] usb 4-1: config 0 descriptor?? [ 575.425636][ T3074] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 576.161022][T13939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13939 comm=syz.5.2345 [ 576.345234][ T3074] snd_usb_toneport 4-1:0.0: set_interface failed [ 576.361740][ T3074] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 576.506878][ T3074] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 576.596793][ T3074] usb 4-1: USB disconnect, device number 54 [ 576.758318][T13949] tipc: Enabling of bearer rejected, failed to enable media [ 576.779796][T13949] syzkaller0: entered promiscuous mode [ 576.785305][T13949] syzkaller0: entered allmulticast mode [ 576.969447][ T5860] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 578.001301][ T5860] usb 8-1: Using ep0 maxpacket: 32 [ 578.018281][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 578.034815][T13959] @: renamed from vlan0 [ 578.046831][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 578.070524][ T5860] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 578.102299][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 578.123976][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 578.144175][ T5860] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 578.169914][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.177938][ T5860] usb 8-1: Product: syz [ 578.190229][ T5860] usb 8-1: Manufacturer: syz [ 578.197885][ T5860] usb 8-1: SerialNumber: syz [ 578.206386][ T5860] usb 8-1: config 0 descriptor?? [ 578.216128][T13950] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 578.259187][ T5860] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input32 [ 578.303612][ T5169] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 578.344214][ T5169] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 578.387604][ T5169] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 578.431807][ T5169] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 578.503575][ T3074] usb 8-1: USB disconnect, device number 7 [ 578.525822][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 578.607701][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'. [ 578.646632][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'. [ 579.061274][ T3074] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 579.236644][ T30] audit: type=1400 audit(2000000308.702:5468): avc: denied { read } for pid=13991 comm="syz.7.2366" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 579.292128][ T3074] usb 4-1: device descriptor read/64, error -71 [ 579.323876][ T30] audit: type=1400 audit(2000000308.702:5469): avc: denied { open } for pid=13991 comm="syz.7.2366" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 579.529562][ T3074] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 579.669915][ T3074] usb 4-1: device descriptor read/64, error -71 [ 579.689480][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 579.834321][ T3074] usb usb4-port1: attempt power cycle [ 579.900826][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.915849][ T10] usb 8-1: config 0 has no interfaces? [ 579.922246][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.949871][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.973046][ T10] usb 8-1: config 0 descriptor?? [ 580.056040][T14015] SELinux: security_context_str_to_sid (rooC£\Ø=UNˆm) failed with errno=-22 [ 580.133858][T12997] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 580.143753][T12997] CPU: 1 UID: 0 PID: 12997 Comm: kworker/u9:0 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 580.143770][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.143779][T12997] Workqueue: hci1 hci_rx_work [ 580.143799][T12997] Call Trace: [ 580.143804][T12997] [ 580.143808][T12997] dump_stack_lvl+0x16c/0x1f0 [ 580.143825][T12997] sysfs_warn_dup+0x7f/0xa0 [ 580.143840][T12997] sysfs_create_dir_ns+0x24b/0x2b0 [ 580.143856][T12997] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 580.143870][T12997] ? find_held_lock+0x2b/0x80 [ 580.143885][T12997] ? do_raw_spin_unlock+0x172/0x230 [ 580.143897][T12997] kobject_add_internal+0x2c4/0x9b0 [ 580.143916][T12997] kobject_add+0x16e/0x240 [ 580.143926][T12997] ? __pfx_kobject_add+0x10/0x10 [ 580.143937][T12997] ? do_raw_spin_unlock+0x172/0x230 [ 580.143949][T12997] ? kobject_put+0xab/0x5a0 [ 580.143969][T12997] device_add+0x288/0x1a70 [ 580.143985][T12997] ? __pfx_dev_set_name+0x10/0x10 [ 580.143996][T12997] ? __pfx_device_add+0x10/0x10 [ 580.144012][T12997] ? mgmt_send_event_skb+0x2fb/0x460 [ 580.144031][T12997] hci_conn_add_sysfs+0x17e/0x230 [ 580.144048][T12997] le_conn_complete_evt+0x1075/0x1d70 [ 580.144067][T12997] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 580.144082][T12997] ? hci_event_packet+0x459/0x11c0 [ 580.144100][T12997] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 580.144115][T12997] ? skb_pull_data+0x166/0x210 [ 580.144131][T12997] hci_le_meta_evt+0x354/0x5e0 [ 580.144148][T12997] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 580.144165][T12997] hci_event_packet+0x685/0x11c0 [ 580.144180][T12997] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 580.144197][T12997] ? __pfx_hci_event_packet+0x10/0x10 [ 580.144212][T12997] ? kcov_remote_start+0x3c9/0x6d0 [ 580.144224][T12997] ? lockdep_hardirqs_on+0x7c/0x110 [ 580.144242][T12997] hci_rx_work+0x2c5/0x16b0 [ 580.144258][T12997] ? rcu_is_watching+0x12/0xc0 [ 580.144274][T12997] process_one_work+0x9cf/0x1b70 [ 580.144290][T12997] ? __pfx_process_one_work+0x10/0x10 [ 580.144305][T12997] ? assign_work+0x1a0/0x250 [ 580.144322][T12997] worker_thread+0x6c8/0xf10 [ 580.144337][T12997] ? __kthread_parkme+0x19e/0x250 [ 580.144352][T12997] ? __pfx_worker_thread+0x10/0x10 [ 580.144362][T12997] kthread+0x3c2/0x780 [ 580.144372][T12997] ? __pfx_kthread+0x10/0x10 [ 580.144382][T12997] ? rcu_is_watching+0x12/0xc0 [ 580.144403][T12997] ? __pfx_kthread+0x10/0x10 [ 580.144414][T12997] ret_from_fork+0x5d4/0x6f0 [ 580.144429][T12997] ? __pfx_kthread+0x10/0x10 [ 580.144441][T12997] ret_from_fork_asm+0x1a/0x30 [ 580.144460][T12997] [ 580.144474][T12997] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 580.179449][ T3074] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 580.183190][T12997] Bluetooth: hci1: failed to register connection device [ 580.426283][T13995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.450682][T13995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.462581][ T3074] usb 4-1: device descriptor read/8, error -71 [ 580.532195][ T5921] usb 8-1: USB disconnect, device number 8 [ 580.546284][T12997] Bluetooth: hci4: unexpected event for opcode 0x3060 [ 580.556988][ T30] audit: type=1400 audit(2000000310.022:5470): avc: denied { sqpoll } for pid=14019 comm="syz.4.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 580.631416][ T5860] IPVS: starting estimator thread 0... [ 580.719519][ T3074] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 580.730722][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 580.739455][T14023] IPVS: using max 42 ests per chain, 100800 per kthread [ 580.768618][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 580.778064][ T3074] usb 4-1: device descriptor read/8, error -71 [ 580.817737][T14027] bridge0: port 1(veth0_to_bond) entered blocking state [ 580.825470][T14027] bridge0: port 1(veth0_to_bond) entered disabled state [ 580.833386][T14027] veth0_to_bond: entered allmulticast mode [ 580.848592][T14027] veth0_to_bond: entered promiscuous mode [ 580.876790][T14026] vlan2: entered allmulticast mode [ 580.882000][T14026] veth1: entered allmulticast mode [ 580.889002][T14026] bridge0: port 2(vlan2) entered blocking state [ 580.889774][ T3074] usb usb4-port1: unable to enumerate USB device [ 580.902660][T14026] bridge0: port 2(vlan2) entered disabled state [ 580.922489][T14026] vlan2: entered promiscuous mode [ 580.927740][T14026] veth1: entered promiscuous mode [ 581.649984][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 582.302000][ T30] audit: type=1400 audit(2000000311.762:5471): avc: denied { mounton } for pid=14041 comm="syz.3.2385" path="/487/file0/bus" dev="ramfs" ino=42648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 582.330892][T14043] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 582.342356][T14043] overlayfs: failed to set xattr on upper [ 582.349295][T14043] overlayfs: ...falling back to redirect_dir=nofollow. [ 582.502516][T14043] overlayfs: ...falling back to index=off. [ 582.508434][ T30] audit: type=1400 audit(2000000311.972:5472): avc: denied { create } for pid=14041 comm="syz.3.2385" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 582.974369][T14043] overlayfs: ...falling back to uuid=null. [ 583.005494][ T30] audit: type=1400 audit(2000000312.432:5473): avc: denied { link } for pid=14041 comm="syz.3.2385" name="file1" dev="ramfs" ino=43099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 584.000089][ T30] audit: type=1400 audit(2000000312.582:5474): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="ramfs" ino=43099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 584.095616][ T30] audit: type=1400 audit(2000000313.552:5475): avc: denied { ioctl } for pid=14042 comm="syz.6.2384" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 584.429745][ T5921] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 584.438445][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2393'. [ 584.847512][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.858761][ T5921] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 584.867975][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.878257][ T5921] usb 7-1: config 0 descriptor?? [ 585.108740][T14094] netlink: 'syz.5.2399': attribute type 1 has an invalid length. [ 585.117704][ T30] audit: type=1400 audit(2000000314.582:5476): avc: denied { map } for pid=14093 comm="syz.5.2399" path="socket:[43162]" dev="sockfs" ino=43162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 585.149790][T14094] cgroup: Unknown subsys name 'fsuuid' [ 585.168371][ T30] audit: type=1400 audit(2000000314.612:5477): avc: denied { read } for pid=14093 comm="syz.5.2399" path="socket:[43162]" dev="sockfs" ino=43162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 585.356307][ T5921] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 585.382030][ T5921] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0014/input/input33 [ 585.491437][ T5921] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 585.549333][T14044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.563901][T14044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.942090][T14114] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 586.034706][ T5921] usb 7-1: USB disconnect, device number 14 [ 587.189288][T14133] 8021q: VLANs not supported on wg0 [ 590.664535][ T30] audit: type=1400 audit(2000000319.672:5478): avc: denied { mount } for pid=14166 comm="syz.4.2423" name="/" dev="hugetlbfs" ino=43294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 590.721726][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2422'. [ 590.856123][ T30] audit: type=1804 audit(2000000320.272:5479): pid=14169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2421" name="[fanotify]" dev="anon_inodefs" ino=36 res=1 errno=0 [ 590.877848][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.066439][ T30] audit: type=1400 audit(2000000320.532:5480): avc: denied { create } for pid=14182 comm="syz.6.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 591.455097][T14192] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.2428'. [ 591.474866][T14192] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 591.486890][T14192] openvswitch: netlink: Duplicate key (type 0). [ 591.518112][ T30] audit: type=1400 audit(2000000320.982:5481): avc: denied { mount } for pid=14195 comm="syz.5.2430" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 591.642187][ T30] audit: type=1800 audit(2000000321.102:5482): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2427" name="/" dev="fuse" ino=1 res=0 errno=0 [ 591.663990][ T30] audit: type=1400 audit(2000000321.112:5483): avc: denied { unmount } for pid=7484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 592.849651][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 592.995019][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2437'. [ 593.493077][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 593.518039][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.529728][T14222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2439'. [ 593.538901][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.549085][ T10] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 593.560979][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.564235][T14226] netlink: 'syz.5.2438': attribute type 27 has an invalid length. [ 593.575172][ T10] usb 7-1: config 0 descriptor?? [ 593.975463][ T30] audit: type=1400 audit(2000000323.442:5484): avc: denied { mount } for pid=14232 comm="syz.3.2443" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 593.997994][T14235] overlayfs: failed to resolve './file1': -2 [ 594.091731][ T10] aquacomputer_d5next 0003:0C70:F00A.0015: item fetching failed at offset 1/5 [ 594.114285][ T10] aquacomputer_d5next 0003:0C70:F00A.0015: probe with driver aquacomputer_d5next failed with error -22 [ 594.159688][ T5860] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 594.318953][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 594.327339][ T5860] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 594.336301][ T5860] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.339774][T13623] usb 7-1: USB disconnect, device number 15 [ 594.349519][ T5860] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.410072][ T5860] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.824174][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.832486][ T5860] usb 6-1: Product: syz [ 594.836896][ T5860] usb 6-1: Manufacturer: syz [ 594.841677][ T5860] usb 6-1: SerialNumber: syz [ 594.890770][ T30] audit: type=1400 audit(2000000324.352:5485): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 594.910680][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.361461][ T5893] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 595.369712][ T5860] usb 6-1: 0:2 : does not exist [ 595.378096][ T5860] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 595.400997][ T5860] usb 6-1: USB disconnect, device number 58 [ 595.959505][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 595.965855][ T5893] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 595.974341][ T5893] usb 4-1: config 0 has no interface number 0 [ 595.982629][ T5893] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 595.991819][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.999890][ T5893] usb 4-1: Product: syz [ 596.004215][ T5893] usb 4-1: Manufacturer: syz [ 596.009016][ T5893] usb 4-1: SerialNumber: syz [ 596.075755][ T5893] usb 4-1: config 0 descriptor?? [ 596.083400][ T5893] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 596.098573][ T5893] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 596.220606][ T3074] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 596.265977][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2454'. [ 596.291423][ T30] audit: type=1400 audit(2000000325.762:5486): avc: denied { write } for pid=14241 comm="syz.3.2445" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 596.385277][ T3074] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 596.418781][ T3074] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.457223][ T3074] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 596.473823][ T3074] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 596.484899][ T3074] usb 8-1: SerialNumber: syz [ 596.495169][ T3074] cdc_ether 8-1:1.0: skipping garbage [ 596.508246][ T3074] usb 8-1: bad CDC descriptors [ 596.519104][ T3074] usb-storage 8-1:1.0: USB Mass Storage device detected [ 596.540656][ T3074] usb-storage 8-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 596.579763][ T5893] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 596.697281][T14254] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2450'. [ 596.708778][T13623] usb 4-1: USB disconnect, device number 59 [ 596.718244][T13623] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 596.718464][ T3074] usb 8-1: USB disconnect, device number 9 [ 596.728221][T13623] kobil_sct 4-1:0.148: device disconnected [ 596.757682][ T5893] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 596.768530][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.783165][ T5893] usb 7-1: config 0 descriptor?? [ 596.792175][ T5893] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 597.278168][ T5893] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 597.319007][ T30] audit: type=1400 audit(2000000326.782:5487): avc: denied { name_bind } for pid=14301 comm="syz.5.2459" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 597.340243][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.077312][T14309] vlan2: entered allmulticast mode [ 598.096151][T14309] vlan1: entered allmulticast mode [ 598.108535][T14309] veth0_vlan: entered allmulticast mode [ 598.355559][ T5893] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 598.508362][ T30] audit: type=1326 audit(2000000327.972:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68458e929 code=0x7ffc0000 [ 598.542861][ T30] audit: type=1326 audit(2000000327.972:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa68458e929 code=0x7ffc0000 [ 598.601167][ T30] audit: type=1326 audit(2000000327.972:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68458e929 code=0x7ffc0000 [ 598.605188][T14323] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 598.624615][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.653671][ T30] audit: type=1326 audit(2000000328.002:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa68458e929 code=0x7ffc0000 [ 598.713738][T14324] vlan0: entered promiscuous mode [ 598.740191][ T30] audit: type=1326 audit(2000000328.002:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68458e929 code=0x7ffc0000 [ 598.768105][ T30] audit: type=1326 audit(2000000328.002:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa68458e929 code=0x7ffc0000 [ 598.791463][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.802845][ T30] audit: type=1326 audit(2000000328.002:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68458e929 code=0x7ffc0000 [ 598.826274][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.829539][ T5893] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 598.834475][ T30] audit: type=1326 audit(2000000328.002:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa68458e929 code=0x7ffc0000 [ 598.999451][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 599.005981][ T5893] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 599.014444][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.025239][ T5893] usb 4-1: config 0 has no interfaces? [ 599.030750][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 599.040216][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.050276][ T5893] usb 4-1: config 0 descriptor?? [ 599.139478][ T5921] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 599.263050][T14325] dummy0: entered promiscuous mode [ 599.279547][ T5921] usb 8-1: device descriptor read/64, error -71 [ 599.519568][ T5921] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 599.601067][ T5893] usb 7-1: USB disconnect, device number 16 [ 599.648324][T14340] syzkaller0: entered promiscuous mode [ 599.653968][ T5921] usb 8-1: device descriptor read/64, error -71 [ 599.665537][T14340] syzkaller0: entered allmulticast mode [ 599.772916][ T5921] usb usb8-port1: attempt power cycle [ 600.169839][ T5921] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 600.463595][ T5921] usb 8-1: device descriptor read/8, error -71 [ 601.309454][ T5921] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 601.319631][ T5892] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 601.329689][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 601.329747][ T30] audit: type=1326 audit(2000000330.792:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 601.359142][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.367324][ T5921] usb 8-1: device descriptor read/8, error -71 [ 601.380178][ T30] audit: type=1326 audit(2000000330.832:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 601.403533][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.415477][ T30] audit: type=1326 audit(2000000330.842:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 601.438843][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.499892][ T30] audit: type=1326 audit(2000000330.972:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 601.499914][ T5921] usb usb8-port1: unable to enumerate USB device [ 601.571577][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 601.572640][ T30] audit: type=1326 audit(2000000331.042:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 601.589464][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 601.607999][ T30] audit: type=1326 audit(2000000331.042:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 601.646565][T14319] dummy0: left promiscuous mode [ 601.653221][ T5860] usb 4-1: USB disconnect, device number 60 [ 601.668824][ T5892] usb 7-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 601.690438][ T30] audit: type=1326 audit(2000000331.042:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 601.698870][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.734717][ T30] audit: type=1326 audit(2000000331.042:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 601.772432][ T5892] usb 7-1: config 0 descriptor?? [ 601.775783][ T30] audit: type=1326 audit(2000000331.042:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 601.788578][T14359] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 601.821701][T14374] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 601.829636][T14374] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 601.853766][T14374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 601.893191][ T30] audit: type=1326 audit(2000000331.052:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.6.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd6d8e52b code=0x7ffc0000 [ 602.251550][T14378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2480'. [ 602.948902][ T5892] semitek 0003:1EA7:0907.0016: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.6-1/input0 [ 602.963987][ T5892] usb 7-1: USB disconnect, device number 17 [ 603.764252][T14410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2491'. [ 603.797345][T14410] veth3: entered promiscuous mode [ 604.084289][T14434] can0: slcan on ttyS3. [ 604.160532][T14433] can0 (unregistered): slcan off ttyS3. [ 604.588882][T14446] tmpfs: Bad value for 'mpol' [ 605.065375][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2507'. [ 605.175087][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2509'. [ 605.189209][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2509'. [ 605.200827][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2509'. [ 605.212626][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2509'. [ 605.372654][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2511'. [ 605.411315][T14478] overlayfs: failed to clone upperpath [ 605.419569][ T5921] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 605.577467][T14484] input: syz0 as /devices/virtual/input/input34 [ 605.584120][ T5892] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 605.591891][ T5921] usb 8-1: Using ep0 maxpacket: 8 [ 605.599631][ T5921] usb 8-1: unable to get BOS descriptor or descriptor too short [ 605.608714][ T5921] usb 8-1: config 248 has an invalid interface number: 3 but max is 1 [ 605.618815][ T5921] usb 8-1: config 248 has an invalid interface number: 111 but max is 1 [ 605.630599][ T5921] usb 8-1: config 248 has no interface number 0 [ 605.641994][ T5921] usb 8-1: config 248 has no interface number 1 [ 605.663328][ T5921] usb 8-1: config 248 interface 3 has no altsetting 0 [ 605.676612][ T5921] usb 8-1: config 248 interface 111 has no altsetting 0 [ 605.687587][ T5921] usb 8-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=91.28 [ 605.698883][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.711786][ T5921] usb 8-1: Product: syz [ 605.718460][ T5921] usb 8-1: Manufacturer: syz [ 605.723980][ T5921] usb 8-1: SerialNumber: syz [ 605.753907][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 605.761258][ T5892] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 605.772346][ T5892] usb 4-1: config 0 has no interface number 0 [ 605.787514][ T5892] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 605.797644][ T5892] usb 4-1: config 0 interface 85 has no altsetting 0 [ 605.808936][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 605.819760][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.828772][ T5892] usb 4-1: Product: syz [ 605.833821][ T5892] usb 4-1: Manufacturer: syz [ 605.838451][ T5892] usb 4-1: SerialNumber: syz [ 605.845795][ T5892] usb 4-1: config 0 descriptor?? [ 605.853700][ T5892] appletouch 4-1:0.85: Could not find int-in endpoint [ 605.860922][ T5892] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 605.870066][ T5892] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 605.936438][T14464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=14464 comm=syz.7.2508 [ 605.951398][T14464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.961885][T14464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.969555][ T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 605.994987][ T5921] usb 8-1: unknown number of interfaces: 2 [ 606.007120][ T5921] usb 8-1: USB disconnect, device number 14 [ 606.124608][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 606.131869][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.294077][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.313000][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 606.794221][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 606.804308][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.818224][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 606.827430][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 606.835531][ T10] usb 6-1: Manufacturer: syz [ 606.858075][ T10] usb 6-1: config 0 descriptor?? [ 607.225969][ T972] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 607.511709][ T972] usb 7-1: device descriptor read/64, error -71 [ 607.850921][ T972] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 608.119436][ T972] usb 7-1: device descriptor read/64, error -71 [ 608.177535][T14520] 9pnet_virtio: no channels available for device 127.0.0.1 [ 608.239632][ T972] usb usb7-port1: attempt power cycle [ 608.387652][ T5893] usb 4-1: USB disconnect, device number 61 [ 608.579482][ T972] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 608.621818][ T972] usb 7-1: device descriptor read/8, error -71 [ 608.686395][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 608.686412][ T30] audit: type=1800 audit(2000000338.142:5616): pid=14537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2531" name="dmabuf" dev="dmabuf" ino=13 res=0 errno=0 [ 609.570495][ T972] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 609.578252][T14542] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 609.612453][ T972] usb 7-1: device descriptor read/8, error -71 [ 609.619411][ T10] rc_core: IR keymap rc-hauppauge not found [ 609.645627][ T10] Registered IR keymap rc-empty [ 609.662734][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 609.690482][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 609.720558][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 609.737722][ T972] usb usb7-port1: unable to enumerate USB device [ 609.766030][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 609.817754][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 609.926073][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 609.952925][ T30] audit: type=1400 audit(2000000339.392:5617): avc: denied { write } for pid=14559 comm="syz.3.2539" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 609.976262][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.983309][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 609.998794][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2542'. [ 610.008710][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.032051][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.049549][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.079488][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.606015][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 610.695839][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.709599][T14572] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2541'. [ 610.720035][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.771666][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.810414][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 610.846529][T14579] tipc: Started in network mode [ 610.863544][ T10] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 610.871588][T14579] tipc: Node identity 0a908340bdd7, cluster identity 4711 [ 610.871713][T14579] tipc: Enabled bearer , priority 0 [ 610.897991][T14579] tipc: Resetting bearer [ 610.905242][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 611.106779][ T10] usb 6-1: USB disconnect, device number 59 [ 611.434155][T14578] tipc: Disabling bearer [ 611.966878][ T5892] tipc: Node number set to 3074917184 [ 612.198503][ T30] audit: type=1400 audit(2000000341.662:5618): avc: denied { write } for pid=14595 comm="syz.4.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 613.706072][T14625] overlayfs: failed to clone upperpath [ 613.769451][ T30] audit: type=1400 audit(2000000343.222:5619): avc: denied { watch_mount } for pid=14627 comm="syz.7.2561" path="/52" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 613.908698][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2557'. [ 615.644331][ T30] audit: type=1400 audit(2000000344.622:5620): avc: denied { map } for pid=14648 comm="syz.3.2567" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 616.181789][T14659] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 616.209430][ T3074] IPVS: starting estimator thread 0... [ 616.210400][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2570'. [ 616.234278][T14667] bridge_slave_1: left allmulticast mode [ 616.249623][T14667] bridge_slave_1: left promiscuous mode [ 616.257766][T14667] FAULT_INJECTION: forcing a failure. [ 616.257766][T14667] name failslab, interval 1, probability 0, space 0, times 0 [ 616.272466][T14667] CPU: 1 UID: 0 PID: 14667 Comm: syz.7.2570 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 616.272488][T14667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.272498][T14667] Call Trace: [ 616.272505][T14667] [ 616.272512][T14667] dump_stack_lvl+0x16c/0x1f0 [ 616.272540][T14667] should_fail_ex+0x512/0x640 [ 616.272564][T14667] should_failslab+0xc2/0x120 [ 616.272588][T14667] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 616.272609][T14667] ? __alloc_skb+0x2b2/0x380 [ 616.272634][T14667] __alloc_skb+0x2b2/0x380 [ 616.272655][T14667] ? __pfx___alloc_skb+0x10/0x10 [ 616.272679][T14667] ? if_nlmsg_size+0x475/0xaf0 [ 616.272705][T14667] rtmsg_ifinfo_build_skb+0x81/0x280 [ 616.272726][T14667] rtmsg_ifinfo+0x9f/0x1a0 [ 616.272745][T14667] __dev_notify_flags+0x24c/0x2e0 [ 616.272769][T14667] ? __pfx___dev_notify_flags+0x10/0x10 [ 616.272789][T14667] ? __dev_notify_flags+0x18e/0x2e0 [ 616.272810][T14667] ? __pfx___dev_notify_flags+0x10/0x10 [ 616.272831][T14667] ? lock_acquire+0x179/0x350 [ 616.272856][T14667] ? do_raw_spin_lock+0x12c/0x2b0 [ 616.272877][T14667] __dev_set_promiscuity+0x26b/0x590 [ 616.272903][T14667] netif_set_promiscuity+0x52/0x150 [ 616.272925][T14667] dev_set_promiscuity+0xb2/0x260 [ 616.272942][T14667] del_nbp+0x123/0xd40 [ 616.272969][T14667] br_dev_delete+0x99/0x1a0 [ 616.272995][T14667] rtnl_dellink+0x3ba/0xa80 [ 616.273015][T14667] ? __pfx_br_dev_delete+0x10/0x10 [ 616.273036][T14667] ? dev_hard_start_xmit+0x97/0x740 [ 616.273053][T14667] ? __dev_queue_xmit+0x7eb/0x43e0 [ 616.273077][T14667] ? netlink_deliver_tap+0xa87/0xd30 [ 616.273100][T14667] ? netlink_unicast+0x5df/0x7f0 [ 616.273116][T14667] ? __pfx_rtnl_dellink+0x10/0x10 [ 616.273136][T14667] ? ksys_write+0x1f8/0x250 [ 616.273198][T14667] ? __lock_acquire+0x622/0x1c90 [ 616.273234][T14667] ? find_held_lock+0x2b/0x80 [ 616.273252][T14667] ? __pfx_rtnl_dellink+0x10/0x10 [ 616.273273][T14667] ? __pfx_rtnl_dellink+0x10/0x10 [ 616.273292][T14667] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 616.273316][T14667] ? __pfx_rtnl_dellink+0x10/0x10 [ 616.273338][T14667] rtnetlink_rcv_msg+0x95e/0xe90 [ 616.273363][T14667] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 616.273393][T14667] ? ref_tracker_free+0x37c/0x830 [ 616.273418][T14667] netlink_rcv_skb+0x158/0x420 [ 616.273434][T14667] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 616.273458][T14667] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.273483][T14667] ? netlink_deliver_tap+0x1ae/0xd30 [ 616.273516][T14667] netlink_unicast+0x53d/0x7f0 [ 616.273535][T14667] ? __pfx_netlink_unicast+0x10/0x10 [ 616.273558][T14667] netlink_sendmsg+0x8d1/0xdd0 [ 616.273579][T14667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.273605][T14667] sock_write_iter+0x4ff/0x5b0 [ 616.273623][T14667] ? __pfx_sock_write_iter+0x10/0x10 [ 616.273648][T14667] ? bpf_lsm_file_permission+0x9/0x10 [ 616.273672][T14667] ? security_file_permission+0x71/0x210 [ 616.273696][T14667] ? rw_verify_area+0xcf/0x680 [ 616.273715][T14667] vfs_write+0x6c4/0x1150 [ 616.273735][T14667] ? __pfx_sock_write_iter+0x10/0x10 [ 616.273755][T14667] ? __pfx_vfs_write+0x10/0x10 [ 616.273772][T14667] ? find_held_lock+0x2b/0x80 [ 616.273806][T14667] ksys_write+0x1f8/0x250 [ 616.273825][T14667] ? __pfx_ksys_write+0x10/0x10 [ 616.273851][T14667] do_syscall_64+0xcd/0x4c0 [ 616.273876][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.273892][T14667] RIP: 0033:0x7fc01358e929 [ 616.273905][T14667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.273920][T14667] RSP: 002b:00007fc014477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 616.273936][T14667] RAX: ffffffffffffffda RBX: 00007fc0137b6080 RCX: 00007fc01358e929 [ 616.273947][T14667] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000009 [ 616.273957][T14667] RBP: 00007fc014477090 R08: 0000000000000000 R09: 0000000000000000 [ 616.273966][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.273976][T14667] R13: 0000000000000000 R14: 00007fc0137b6080 R15: 00007ffe5e37df28 [ 616.273998][T14667] [ 616.699868][T14667] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.707143][T14666] IPVS: using max 74 ests per chain, 177600 per kthread [ 616.722789][T14667] bridge_slave_0: left allmulticast mode [ 616.728449][T14667] bridge_slave_0: left promiscuous mode [ 616.734344][T14667] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.065230][T14677] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 617.661042][ T30] audit: type=1400 audit(2000000347.132:5621): avc: denied { shutdown } for pid=14686 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 619.094893][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2584'. [ 619.282770][T14708] bridge_slave_1: entered promiscuous mode [ 619.305015][T14710] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 619.315281][T14708] batadv0: entered promiscuous mode [ 619.321926][ T30] audit: type=1400 audit(2000000348.792:5622): avc: denied { setattr } for pid=14713 comm="syz.6.2588" name="RAWv6" dev="sockfs" ino=44698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 619.344803][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.624366][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2589'. [ 619.703583][T14720] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 619.714841][T14720] batman_adv: batadv0: Adding interface: gretap1 [ 619.721271][T14720] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.746522][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.753281][T14720] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 621.739817][ T972] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 621.903996][T14748] syzkaller0: entered promiscuous mode [ 621.909899][ T972] usb 7-1: Using ep0 maxpacket: 16 [ 621.926652][ T972] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 621.939552][ T972] usb 7-1: config 0 has no interface number 0 [ 621.947748][T14748] syzkaller0: entered allmulticast mode [ 621.968460][ T972] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 621.985789][ T972] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 622.015128][ T972] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 622.025563][ T972] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 622.035758][ T972] usb 7-1: Product: syz [ 622.047001][ T972] usb 7-1: SerialNumber: syz [ 622.059603][ T972] usb 7-1: config 0 descriptor?? [ 622.072415][ T972] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 622.079988][ T972] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input37 [ 622.179458][ T3074] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 622.375047][T14754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 622.392882][T14754] batman_adv: batadv0: Adding interface: gretap1 [ 622.399272][T14754] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.425502][T14754] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 622.640147][ T3074] usb 4-1: Using ep0 maxpacket: 32 [ 622.652242][ T3074] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 622.673091][ T3074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 622.711586][ T3074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 622.734534][ T30] audit: type=1400 audit(2000000352.202:5623): avc: denied { write } for pid=14742 comm="syz.5.2595" path="socket:[44784]" dev="sockfs" ino=44784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 622.782027][ T3074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 622.798697][ T3074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 622.817491][ T3074] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 622.827235][ T3074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.839077][ T3074] usb 4-1: Product: syz [ 622.843754][ T3074] usb 4-1: Manufacturer: syz [ 622.848753][ T3074] usb 4-1: SerialNumber: syz [ 622.863225][ T3074] usb 4-1: config 0 descriptor?? [ 623.475757][ T30] audit: type=1400 audit(2000000352.942:5624): avc: denied { bind } for pid=14764 comm="syz.7.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 623.495331][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.563022][ T30] audit: type=1400 audit(2000000353.012:5625): avc: denied { execute } for pid=14765 comm="syz.5.2602" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 623.824430][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.954333][ T30] audit: type=1400 audit(2000000353.392:5626): avc: denied { connect } for pid=14765 comm="syz.5.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 624.260151][ T5860] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 624.382327][ T3074] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 624.392515][ T3074] input input38: Device does not respond to id packet P [ 624.404479][ T3074] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 624.411877][ T5860] usb 8-1: Using ep0 maxpacket: 16 [ 624.434182][ T5860] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 624.451469][ T3074] input input38: Device does not respond to id packet B [ 624.458693][ T5860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.477821][ T3074] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 624.489122][ T5860] usb 8-1: config 0 descriptor?? [ 624.498287][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.498830][ T3074] input input38: Device does not respond to id packet N [ 624.507464][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.520259][ T3074] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 624.527739][ T5860] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 624.530145][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.541470][ T3074] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 624.548367][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.553377][ T3074] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 624.555453][ T972] usb 7-1: USB disconnect, device number 22 [ 624.561811][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.561832][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 624.565481][ T3074] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 624.617014][ T3074] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input38 [ 624.657928][ T972] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 624.991018][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2607'. [ 626.101094][ T5893] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 626.146140][ T972] usb 8-1: USB disconnect, device number 15 [ 626.291397][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 626.298630][ T5893] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 626.307567][ T5893] usb 7-1: config 0 has no interface number 0 [ 626.313896][ T5893] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.324901][ T5893] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 626.336307][ T5893] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 626.345611][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 626.353806][ T5893] usb 7-1: Product: syz [ 626.357972][ T5893] usb 7-1: SerialNumber: syz [ 626.365504][ T5893] usb 7-1: config 0 descriptor?? [ 626.373048][ T5893] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 626.381878][ T5893] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input39 [ 626.587612][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 626.587842][ T972] usb 7-1: USB disconnect, device number 23 [ 626.594575][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 626.618633][ T972] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 626.959523][ T5893] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 627.042413][T14804] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2613'. [ 627.044522][ T5860] usb 4-1: USB disconnect, device number 62 [ 627.139573][ T5893] usb 8-1: Using ep0 maxpacket: 16 [ 627.166159][ T5893] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.209526][ T5893] usb 8-1: config 0 has no interface number 0 [ 627.236866][ T5893] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 627.265099][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.536896][ T5893] usb 8-1: Product: syz [ 627.564960][ T5893] usb 8-1: Manufacturer: syz [ 627.919442][ T5893] usb 8-1: SerialNumber: syz [ 628.028303][ T5893] usb 8-1: config 0 descriptor?? [ 628.071981][ T5893] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 628.232877][T14827] tipc: Enabling of bearer rejected, failed to enable media [ 628.245383][T14825] ipt_REJECT: TCP_RESET invalid for non-tcp [ 628.452607][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2623'. [ 628.702342][ T5921] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 628.833199][ T30] audit: type=1400 audit(2000000358.282:5627): avc: denied { create } for pid=14838 comm="syz.4.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 629.260674][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 629.508240][ T5921] usb 7-1: config 5 has an invalid interface number: 196 but max is 0 [ 629.555962][ T5921] usb 7-1: config 5 has no interface number 0 [ 629.589465][ T5921] usb 7-1: config 5 interface 196 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 629.602057][ T5893] gspca_spca1528: reg_w err -71 [ 629.607002][ T5893] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 629.616229][ T5921] usb 7-1: config 5 interface 196 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 8 [ 629.627949][ T5893] usb 8-1: USB disconnect, device number 16 [ 629.649795][ T5921] usb 7-1: config 5 interface 196 has no altsetting 0 [ 629.667564][ T5921] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=f3.b3 [ 629.699390][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.719237][ T5921] usb 7-1: Product: syz [ 629.729411][ T5921] usb 7-1: Manufacturer: syz [ 629.734033][ T5921] usb 7-1: SerialNumber: syz [ 629.920914][T14833] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 629.985222][T14833] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 630.038353][ T5921] kvaser_usb 7-1:5.196: error -ENODEV: Cannot get usb endpoint(s) [ 630.282868][ T5921] usb 7-1: USB disconnect, device number 24 [ 631.092675][T14877] tipc: Enabled bearer , priority 0 [ 631.102948][T14877] syzkaller0: entered promiscuous mode [ 631.106012][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2636'. [ 631.108739][T14877] syzkaller0: entered allmulticast mode [ 631.130721][T14877] tipc: Resetting bearer [ 631.142062][T14876] tipc: Resetting bearer [ 631.201628][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2638'. [ 631.253076][T14876] tipc: Disabling bearer [ 631.306695][T14887] netlink: 'syz.7.2637': attribute type 4 has an invalid length. [ 631.366798][T14884] netlink: 'syz.7.2637': attribute type 4 has an invalid length. [ 631.426698][T14884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=14884 comm=syz.7.2637 [ 631.565724][T14893] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 631.759789][ T5921] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 632.439453][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 632.446035][ T5921] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 632.455580][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.470335][ T5921] usb 6-1: config 0 descriptor?? [ 632.613566][T14570] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 632.681091][ T5921] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 632.689800][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 632.706599][ T5921] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 632.727745][ T5921] usb 6-1: media controller created [ 632.792820][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.148471][ T5921] az6027: usb out operation failed. (-71) [ 633.176929][ T5921] az6027: usb out operation failed. (-71) [ 633.223288][ T5921] stb0899_attach: Driver disabled by Kconfig [ 634.121968][ T5921] az6027: no front-end attached [ 634.121968][ T5921] [ 634.239364][ T5921] az6027: usb out operation failed. (-71) [ 634.248445][ T5921] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 634.290334][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 634.314519][ T5921] dvb-usb: schedule remote query interval to 400 msecs. [ 634.325543][ T5921] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 634.335779][ T5921] usb 6-1: USB disconnect, device number 60 [ 634.363477][ T30] audit: type=1400 audit(2000000001.110:5628): avc: denied { write } for pid=14928 comm="syz.3.2650" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 634.386838][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.456698][T14932] netlink: 'syz.6.2653': attribute type 1 has an invalid length. [ 634.508801][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2653'. [ 634.528133][ T5921] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 634.553844][T14942] input: syz1 as /devices/virtual/input/input41 [ 634.593428][T14932] bond1: entered promiscuous mode [ 634.598485][T14932] bond1: entered allmulticast mode [ 634.605622][T14940] bond1: left promiscuous mode [ 634.614819][T14940] bond1: left allmulticast mode [ 634.620312][T14940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 634.693033][T14950] sp0: Synchronizing with TNC [ 634.769358][ T5860] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 635.410781][ T5860] usb 8-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 635.421332][ T5860] usb 8-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 635.442487][ T5860] usb 8-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 635.480965][T14953] [U] è [ 635.763341][ T5860] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.781432][ T5860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 635.796539][ T5860] usb 8-1: SerialNumber: syz [ 635.815041][ T5921] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 635.825050][ T30] audit: type=1400 audit(2000000002.570:5629): avc: denied { mount } for pid=14959 comm="syz.6.2659" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 635.847224][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.857094][T14962] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 635.908780][T14965] FAULT_INJECTION: forcing a failure. [ 635.908780][T14965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.929751][T14965] CPU: 1 UID: 0 PID: 14965 Comm: syz.3.2661 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 635.929776][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.929787][T14965] Call Trace: [ 635.929793][T14965] [ 635.929801][T14965] dump_stack_lvl+0x16c/0x1f0 [ 635.929830][T14965] should_fail_ex+0x512/0x640 [ 635.929855][T14965] _copy_from_iter+0x29f/0x16f0 [ 635.929882][T14965] ? __alloc_skb+0x200/0x380 [ 635.929906][T14965] ? __pfx__copy_from_iter+0x10/0x10 [ 635.929933][T14965] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 635.929958][T14965] netlink_sendmsg+0x829/0xdd0 [ 635.929979][T14965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.930006][T14965] ____sys_sendmsg+0xa95/0xc70 [ 635.930024][T14965] ? copy_msghdr_from_user+0x10a/0x160 [ 635.930048][T14965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.930078][T14965] ___sys_sendmsg+0x134/0x1d0 [ 635.930102][T14965] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.930123][T14965] ? __lock_acquire+0x622/0x1c90 [ 635.930186][T14965] __sys_sendmsg+0x16d/0x220 [ 635.930210][T14965] ? __pfx___sys_sendmsg+0x10/0x10 [ 635.930249][T14965] do_syscall_64+0xcd/0x4c0 [ 635.930276][T14965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.930294][T14965] RIP: 0033:0x7fa68458e929 [ 635.930309][T14965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.930325][T14965] RSP: 002b:00007fa6823d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.930341][T14965] RAX: ffffffffffffffda RBX: 00007fa6847b6080 RCX: 00007fa68458e929 [ 635.930352][T14965] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 635.930361][T14965] RBP: 00007fa6823d5090 R08: 0000000000000000 R09: 0000000000000000 [ 635.930370][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.930380][T14965] R13: 0000000000000000 R14: 00007fa6847b6080 R15: 00007fff634c8d68 [ 635.930403][T14965] [ 636.211354][T14962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 636.232874][ T30] audit: type=1400 audit(2000000002.890:5630): avc: denied { setattr } for pid=14935 comm="syz.7.2654" name="PPPOE" dev="sockfs" ino=45724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 636.270590][T14976] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2664'. [ 636.282241][ T5921] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 636.291347][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.300604][ T5921] usb 6-1: Product: syz [ 636.304767][ T5921] usb 6-1: Manufacturer: syz [ 636.310042][ T5921] usb 6-1: SerialNumber: syz [ 636.320924][ T5921] usb 6-1: config 0 descriptor?? [ 636.330472][ T5921] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 636.340896][ T5860] usb 8-1: bad CDC descriptors [ 636.348133][ T5860] usb 8-1: USB disconnect, device number 17 [ 636.415249][ T30] audit: type=1400 audit(2000000003.160:5631): avc: denied { accept } for pid=14974 comm="syz.6.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 637.246275][T14989] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2671'. [ 637.769247][ T5921] gspca_sunplus: reg_r err -110 [ 638.557880][T15009] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2674'. [ 638.629602][ T972] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 638.639147][ T3074] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 638.790927][ T3074] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 638.791518][ T972] usb 7-1: config 9 has an invalid interface number: 96 but max is 0 [ 638.801478][ T3074] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 638.820892][ T3074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 30768, setting to 64 [ 638.831864][ T972] usb 7-1: config 9 has no interface number 0 [ 638.831922][ T972] usb 7-1: config 9 interface 96 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 638.838020][ T3074] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 638.862447][ T972] usb 7-1: config 9 interface 96 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 638.866776][ T3074] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 638.874018][ T972] usb 7-1: config 9 interface 96 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 638.886264][ T3074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 638.895793][ T972] usb 7-1: config 9 interface 96 has no altsetting 0 [ 638.904623][ T3074] usb 4-1: Product: syz [ 638.911284][ T972] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000c, bcdDevice= 8.cf [ 638.912526][ T3074] usb 4-1: Manufacturer: syz [ 638.924453][ T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.926228][ T3074] usb 4-1: SerialNumber: syz [ 638.934494][ T972] usb 7-1: Product: syz [ 638.947923][ T972] usb 7-1: Manufacturer: syz [ 638.948541][ T3074] usb 4-1: config 0 descriptor?? [ 638.952555][ T972] usb 7-1: SerialNumber: syz [ 638.958276][ T972] kvaser_usb 7-1:9.96: error -ENODEV: Cannot get usb endpoint(s) [ 639.202791][ T972] usb 7-1: USB disconnect, device number 25 [ 639.208219][ T3074] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 639.237998][ T3074] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 639.484513][T15019] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2676'. [ 639.495653][ T3074] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 639.506274][ T3074] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 639.522629][ T3074] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 640.132122][ T3074] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 640.239251][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.245910][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.252464][ T3074] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 640.261254][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.267901][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.275827][ T3074] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 640.322973][T15034] netlink: 'syz.5.2681': attribute type 9 has an invalid length. [ 640.348506][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2683'. [ 640.387903][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2683'. [ 640.409253][T15036] netlink: 'syz.7.2683': attribute type 7 has an invalid length. [ 640.533298][T15036] syzkaller1: entered promiscuous mode [ 640.538801][T15036] syzkaller1: entered allmulticast mode [ 640.740841][ T3074] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 640.799051][ T30] audit: type=1804 audit(2000000007.530:5632): pid=15049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2688" name="file0" dev="tmpfs" ino=2990 res=1 errno=0 [ 640.800289][T15049] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 640.831536][T15049] ref_ctr increment failed for inode: 0xbae offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88804ab84080 [ 640.847855][T15049] netlink: 'syz.4.2688': attribute type 5 has an invalid length. [ 640.856125][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2688'. [ 640.952400][ T3074] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 640.963811][ T3074] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 640.975356][ T3074] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 640.984708][ T3074] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.996758][T15043] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 641.015484][ T3074] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.138972][ T24] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 641.260941][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 641.283985][ T972] usb 7-1: USB disconnect, device number 26 [ 641.294584][ T24] usb 8-1: config 0 has no interfaces? [ 641.306847][ T24] usb 8-1: New USB device found, idVendor=1a34, idProduct=6f05, bcdDevice=8e.7b [ 641.308521][ T3074] usb 4-1: USB disconnect, device number 63 [ 641.326271][ T24] usb 8-1: New USB device strings: Mfr=176, Product=0, SerialNumber=0 [ 641.335126][ T24] usb 8-1: Manufacturer: syz [ 641.343890][ T24] usb 8-1: config 0 descriptor?? [ 641.689002][ T3074] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 641.860376][ T3074] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.888965][ T3074] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.924559][ T3074] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice=12.00 [ 641.979136][ T3074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.019951][ T3074] usb 4-1: config 0 descriptor?? [ 642.025982][T15064] netlink: 1656 bytes leftover after parsing attributes in process `syz.4.2693'. [ 642.057264][T15064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2693'. [ 642.244780][ T30] audit: type=1400 audit(2000000008.980:5633): avc: denied { override_creds } for pid=15050 comm="syz.7.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 642.267816][T15065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.292053][T15065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.347467][ T3074] usb 4-1: string descriptor 0 read error: -71 [ 642.358182][ T3074] usb 4-1: USB disconnect, device number 64 [ 642.767150][T15077] SELinux: syz.3.2695 (15077) set checkreqprot to 1. This is no longer supported. [ 642.767986][ T30] audit: type=1400 audit(2000000009.500:5634): avc: denied { setcheckreqprot } for pid=15076 comm="syz.3.2695" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 642.953241][ T5921] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 642.971430][ T5921] usb 6-1: USB disconnect, device number 61 [ 643.329711][ T5921] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 643.699512][ T5921] usb 6-1: device not accepting address 62, error -71 [ 644.406268][ T5860] usb 8-1: USB disconnect, device number 18 [ 644.456860][T15102] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 644.463415][T15102] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 644.477142][T15102] vhci_hcd vhci_hcd.0: Device attached [ 644.505508][T15103] vhci_hcd: connection closed [ 644.526411][T12824] vhci_hcd: stop threads [ 644.549804][T12824] vhci_hcd: release socket [ 644.559313][T12824] vhci_hcd: disconnect device [ 645.474450][T15130] syzkaller1: entered promiscuous mode [ 645.495135][T15130] syzkaller1: entered allmulticast mode [ 646.590336][T15140] tipc: Started in network mode [ 646.595231][T15140] tipc: Node identity 9e2f0b5d9a29, cluster identity 4711 [ 646.652923][T15140] tipc: Enabled bearer , priority 0 [ 646.673643][T15134] syzkaller0: entered promiscuous mode [ 646.687292][T15134] syzkaller0: entered allmulticast mode [ 646.893782][T15140] netlink: 'syz.7.2704': attribute type 5 has an invalid length. [ 647.431688][T15140] tipc: Resetting bearer [ 647.652248][T15133] tipc: Resetting bearer [ 647.724661][T15133] tipc: Disabling bearer [ 647.736686][T15159] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (127) [ 648.599121][ T5921] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 648.781313][T15179] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 648.818583][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 648.840727][ T30] audit: type=1400 audit(2000000015.580:5635): avc: denied { getopt } for pid=15183 comm="syz.4.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 648.862519][ T5921] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 648.875895][ T5921] usb 6-1: config 0 has no interface number 0 [ 648.896144][ T5921] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 648.913311][ T5921] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 648.939842][ T5921] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 648.975903][ T5921] usb 6-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 649.035620][ T5921] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xF has invalid maxpacket 28271, setting to 1024 [ 649.140429][ T5921] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 649.153647][ T5921] usb 6-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 649.168742][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.177032][ T5921] usb 6-1: Product: syz [ 649.183698][ T5921] usb 6-1: Manufacturer: syz [ 649.329972][ T5921] usb 6-1: SerialNumber: syz [ 649.337528][ T5921] usb 6-1: config 0 descriptor?? [ 649.347727][T15162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 649.413383][T15195] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 649.536005][T15199] ubi31: detaching mtd0 [ 649.895963][T15199] ubi31: mtd0 is detached [ 650.710610][T15162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2722'. [ 650.814471][ T5921] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 650.866775][ T5921] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 650.889746][ T5921] usb 6-1: USB disconnect, device number 64 [ 651.053986][T15214] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2737'. [ 651.098585][ T24] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 651.333212][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 651.441840][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 651.572180][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 651.705012][ T24] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 651.810445][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.872612][ T24] usb 7-1: Product: syz [ 651.883271][ T24] usb 7-1: Manufacturer: syz [ 651.904464][ T24] usb 7-1: SerialNumber: syz [ 651.953428][ T24] usb 7-1: config 0 descriptor?? [ 652.004020][T15210] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 652.039524][ T24] usb 7-1: ucan: probing device on interface #0 [ 652.060289][ T24] usb 7-1: ucan: invalid in_ep MaxPacketSize [ 652.079081][ T24] usb 7-1: ucan: probe failed; try to update the device firmware [ 652.277203][T15224] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 652.423117][ T24] usb 7-1: USB disconnect, device number 27 [ 652.693036][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2738'. [ 652.703496][T15219] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2738'. [ 653.332721][T15247] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 653.385528][ T74] Bluetooth: hci7: Frame reassembly failed (-84) [ 653.514417][ T30] audit: type=1400 audit(2000000020.251:5636): avc: denied { read } for pid=15242 comm="syz.3.2743" path="socket:[47379]" dev="sockfs" ino=47379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 653.911939][ T30] audit: type=1400 audit(2000000020.651:5637): avc: denied { execheap } for pid=15255 comm="syz.4.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 653.974819][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2749'. [ 654.110318][T15268] tipc: Enabled bearer , priority 0 [ 654.122484][T15268] syzkaller0: entered promiscuous mode [ 654.130093][T15268] syzkaller0: entered allmulticast mode [ 654.142439][T15268] tipc: Resetting bearer [ 654.150032][T15266] tipc: Resetting bearer [ 654.182481][T15266] tipc: Disabling bearer [ 655.339941][T14570] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 655.486914][T15305] netlink: 'syz.6.2766': attribute type 3 has an invalid length. [ 655.536921][T15305] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2766'. [ 655.950477][T15319] overlayfs: failed to resolve './file1': -2 [ 656.378530][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 656.512525][T14570] Bluetooth: hci6: Unable to find connection for big 0x00 [ 656.528375][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 656.536042][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.551107][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 656.563566][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.647978][ T10] usb 4-1: Product: syz [ 656.658490][ T10] usb 4-1: Manufacturer: syz [ 656.664758][ T10] usb 4-1: SerialNumber: syz [ 656.673098][ T10] usb 4-1: config 0 descriptor?? [ 656.680471][ T10] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 656.720983][T15326] netlink: 'syz.7.2770': attribute type 30 has an invalid length. [ 656.766729][T15329] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2772'. [ 656.797445][T15329] binder: 15328:15329 ioctl 400c620e 200000000140 returned -22 [ 656.821241][T15329] tmpfs: Bad value for 'huge' [ 657.209747][ T30] audit: type=1400 audit(2000000023.941:5638): avc: denied { setopt } for pid=15341 comm="syz.4.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 657.288526][ T5860] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 657.668197][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 657.691638][ T5860] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 657.719274][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.775438][ T5860] pvrusb2: Hardware description: Terratec Grabster AV400 [ 657.786447][ T5860] pvrusb2: ********** [ 657.790709][ T5860] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 657.806293][ T5860] pvrusb2: Important functionality might not be entirely working. [ 657.814279][ T5860] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 657.830860][ T5860] pvrusb2: ********** [ 658.281195][ T2331] pvrusb2: Invalid write control endpoint [ 658.341797][ T2331] pvrusb2: Invalid write control endpoint [ 658.372586][ T2331] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 658.431714][ T2331] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 658.472259][ T2331] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 658.482486][ T2331] pvrusb2: Device being rendered inoperable [ 658.491201][ T2331] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 658.499794][ T2331] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 658.508771][ T2331] pvrusb2: Attached sub-driver cx25840 [ 658.515348][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 658.515695][T15340] pvrusb2: Attempted to execute control transfer when device not ok [ 658.526106][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 658.719482][T15356] pvrusb2: Attempted to execute control transfer when device not ok [ 658.724395][ T5860] usb 4-1: USB disconnect, device number 65 [ 658.746380][T15340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.829217][T15340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.857697][T15340] pvrusb2: Killing an I2C write to 4 that is too large (desired=254 limit=61) [ 659.167472][ T5860] usb 6-1: USB disconnect, device number 65 [ 659.923357][T13054] bridge_slave_1: left allmulticast mode [ 660.065028][T13054] bridge_slave_1: left promiscuous mode [ 660.093017][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.147524][T15380] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 660.149222][T13054] bridge_slave_0: left allmulticast mode [ 660.187920][T13054] bridge_slave_0: left promiscuous mode [ 660.218665][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.481237][T13054] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 660.519051][T13054] ip6gre1 (unregistering): left promiscuous mode [ 660.731277][T13054] bond3 (unregistering): (slave gretap1): Releasing active interface [ 660.922016][ T3074] IPVS: starting estimator thread 0... [ 661.018854][T15387] IPVS: using max 75 ests per chain, 180000 per kthread [ 661.516616][T13054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.005909][T13054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.025511][T13054] bond0 (unregistering): Released all slaves [ 662.337452][T15402] syz.3.2793 (15402): drop_caches: 2 [ 662.444807][T13054] bond1 (unregistering): Released all slaves [ 662.994510][T13054] bond2 (unregistering): Released all slaves [ 663.111584][T13054] bond3 (unregistering): Released all slaves [ 663.179307][T15398] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2792'. [ 663.196728][T15398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.487416][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2801'. [ 663.527501][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2801'. [ 663.715713][ T30] audit: type=1400 audit(2000000030.451:5639): avc: denied { write } for pid=15422 comm="syz.4.2801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 663.774929][T13054] hsr_slave_0: left promiscuous mode [ 663.829971][T13054] hsr_slave_1: left promiscuous mode [ 663.853677][T13054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.860930][ T30] audit: type=1400 audit(2000000030.491:5640): avc: denied { write } for pid=15428 comm="syz.7.2802" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 663.908492][T13054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.781329][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2811'. [ 667.034445][T13054] team0 (unregistering): Port device team_slave_1 removed [ 667.178958][T13054] team0 (unregistering): Port device team_slave_0 removed [ 667.897475][ T5921] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 668.047471][ T5921] usb 6-1: device descriptor read/64, error -71 [ 668.320821][ T5921] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 668.508538][ T5921] usb 6-1: device descriptor read/64, error -71 [ 668.570699][T15470] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2815'. [ 668.612962][T13054] IPVS: stop unused estimator thread 0... [ 668.658945][ T5921] usb usb6-port1: attempt power cycle [ 669.007553][ T5921] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 669.058327][ T5921] usb 6-1: device descriptor read/8, error -71 [ 669.787278][ T5921] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 670.028453][ T5921] usb 6-1: device descriptor read/8, error -71 [ 670.131082][T15484] lo speed is unknown, defaulting to 1000 [ 670.148202][T15486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2818'. [ 670.153323][T15484] lo speed is unknown, defaulting to 1000 [ 670.159137][ T30] audit: type=1400 audit(2000000036.882:5641): avc: denied { write } for pid=15481 comm="syz.7.2817" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 670.165694][T15484] lo speed is unknown, defaulting to 1000 [ 670.208574][ T5921] usb usb6-port1: unable to enumerate USB device [ 670.270280][T15484] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 670.271567][ T30] audit: type=1400 audit(2000000036.952:5642): avc: denied { ioctl } for pid=15482 comm="syz.3.2819" path="socket:[47691]" dev="sockfs" ino=47691 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 670.291925][T15484] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 670.362132][T15484] lo speed is unknown, defaulting to 1000 [ 670.373140][T15484] lo speed is unknown, defaulting to 1000 [ 670.485267][T15484] lo speed is unknown, defaulting to 1000 [ 671.066733][T15484] lo speed is unknown, defaulting to 1000 [ 671.098652][T15484] lo speed is unknown, defaulting to 1000 [ 671.114552][T15484] lo speed is unknown, defaulting to 1000 [ 671.158284][T15484] lo speed is unknown, defaulting to 1000 [ 671.423011][T15506] vivid-007: ================= START STATUS ================= [ 671.434731][T15506] vivid-007: Enable Output Cropping: true grabbed [ 671.441839][T15506] vivid-007: Enable Output Composing: true grabbed [ 671.452444][T15506] vivid-007: Enable Output Scaler: true grabbed [ 671.459717][T15506] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 671.467027][T15506] vivid-007: Transmit Mode: HDMI grabbed [ 671.489211][T15506] vivid-007: Hotplug Present: 0x00000000 [ 671.517077][T15506] vivid-007: RxSense Present: 0x00000000 [ 671.541372][T15506] vivid-007: EDID Present: 0x00000000 [ 671.562271][T15506] vivid-007: ================== END STATUS ================== [ 672.157272][ T3074] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 672.404452][T15515] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2829'. [ 672.430667][ T3074] usb 6-1: Using ep0 maxpacket: 16 [ 672.459993][ T3074] usb 6-1: config 5 has an invalid interface number: 239 but max is 0 [ 672.484168][ T3074] usb 6-1: config 5 has no interface number 0 [ 672.509892][ T3074] usb 6-1: config 5 interface 239 has no altsetting 0 [ 672.544975][ T3074] usb 6-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=7b.52 [ 672.575879][ T3074] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.608073][ T3074] usb 6-1: Product: syz [ 672.612252][ T3074] usb 6-1: Manufacturer: syz [ 672.650250][ T3074] usb 6-1: SerialNumber: syz [ 672.850552][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 672.861196][ T5826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 672.870946][ T5826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 672.882458][ T5826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 672.894237][ T30] audit: type=1400 audit(2000000039.632:5643): avc: denied { read } for pid=15504 comm="syz.5.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 672.915536][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 673.006194][T15519] lo speed is unknown, defaulting to 1000 [ 673.218413][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 673.387722][T15519] chnl_net:caif_netlink_parms(): no params data found [ 673.427800][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 673.454570][ T10] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 673.500034][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.665686][ T10] usb 4-1: Product: syz [ 673.776877][ T10] usb 4-1: Manufacturer: syz [ 673.781671][ T10] usb 4-1: SerialNumber: syz [ 673.792311][ T10] usb 4-1: config 0 descriptor?? [ 673.803261][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 673.992903][T15548] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2837'. [ 674.003853][T15548] netlink: zone id is out of range [ 674.009584][T15548] netlink: zone id is out of range [ 674.014682][T15548] netlink: get zone limit has 8 unknown bytes [ 674.116030][T15519] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.135507][T15519] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.154775][T15519] bridge_slave_0: entered allmulticast mode [ 674.183007][T15519] bridge_slave_0: entered promiscuous mode [ 674.223109][T15519] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.382037][T15519] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.402634][T15519] bridge_slave_1: entered allmulticast mode [ 674.422871][T15519] bridge_slave_1: entered promiscuous mode [ 674.456971][ T3074] gspca_main: spca501-2.14.0 probing 040a:0002 [ 674.500812][ T3074] gspca_spca501: reg write: error -71 [ 674.645866][ T3074] spca501 6-1:5.239: Reg write failed for 0x00,0xaa,0x00 [ 674.739759][ T10] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 674.757799][ T3074] spca501 6-1:5.239: probe with driver spca501 failed with error -22 [ 674.776633][ T10] sq905 4-1:0.0: probe with driver sq905 failed with error -32 [ 674.786901][ T3074] usb 6-1: USB disconnect, device number 70 [ 674.935532][T15519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.019642][T15519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.027827][T14570] Bluetooth: hci7: command tx timeout [ 675.209914][T15519] team0: Port device team_slave_0 added [ 675.247111][ T5892] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 675.256426][T15519] team0: Port device team_slave_1 added [ 675.307662][T15519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.329481][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.367851][T15519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.388045][T15519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.399168][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.431134][T15519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.454047][ T5892] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 675.526424][T15519] hsr_slave_0: entered promiscuous mode [ 675.541970][T15519] hsr_slave_1: entered promiscuous mode [ 675.556852][T15519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.572843][T15519] Cannot create hsr debugfs directory [ 675.582454][T15574] batadv0: entered allmulticast mode [ 675.691110][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.737303][ T5892] usb 8-1: config 0 descriptor?? [ 675.758970][ T5892] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 675.940741][T15519] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 675.978349][ T5892] gp8psk: usb in 128 operation failed. [ 675.995793][T15519] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 676.047381][T15519] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 676.067990][T15519] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 676.117118][ T3074] usb 4-1: USB disconnect, device number 66 [ 676.139206][ T5921] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 676.191731][ T5892] gp8psk: usb in 146 operation failed. [ 676.209634][ T5892] gp8psk: failed to get FW version [ 676.234948][T15519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.247777][ T5892] gp8psk: usb in 149 operation failed. [ 676.269596][ T5892] gp8psk: failed to get FPGA version [ 676.315512][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 676.325752][T15519] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.337219][ T5921] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 676.352617][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.359731][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.385628][ T5921] usb 6-1: config 0 has no interface number 0 [ 676.420323][ T5921] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 676.434053][T12824] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.441191][T12824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.448432][ T5921] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 676.487348][ T5921] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 676.627117][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 676.722994][ T5921] usb 6-1: Product: syz [ 676.817809][ T5921] usb 6-1: SerialNumber: syz [ 676.884241][ T5921] usb 6-1: config 0 descriptor?? [ 676.895589][ T5892] gp8psk: usb out operation failed. [ 676.923869][ T5892] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 676.949833][ T5921] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 676.979725][T15519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.997128][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 677.006671][ T5921] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input44 [ 677.023465][ T5892] usb 8-1: USB disconnect, device number 19 [ 677.097446][T14570] Bluetooth: hci7: command tx timeout [ 677.358030][T15605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.368423][T15605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.205618][T15519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.051243][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 679.058754][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 679.067047][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 679.074053][ T972] usb 6-1: USB disconnect, device number 71 [ 679.079946][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 679.079959][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 679.178023][T14570] Bluetooth: hci7: command tx timeout [ 681.307339][T14570] Bluetooth: hci7: command tx timeout [ 681.598012][ T972] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 682.265723][ T30] audit: type=1400 audit(2000000049.002:5644): avc: denied { block_suspend } for pid=15629 comm="syz.3.2855" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 682.572564][T15519] veth0_vlan: entered promiscuous mode [ 682.612424][T15519] veth1_vlan: entered promiscuous mode [ 682.728553][T15519] veth0_macvtap: entered promiscuous mode [ 682.757124][T15519] veth1_macvtap: entered promiscuous mode [ 682.811408][T15519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.871471][T15519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.985150][T15651] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2860'. [ 683.011892][T15519] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.036776][ T24] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 683.095985][T15519] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.125042][T15519] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.166601][T15519] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.266418][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 683.363389][ T24] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 683.377440][T15651] netlink: 11 bytes leftover after parsing attributes in process `syz.7.2860'. [ 683.402071][ T24] usb 6-1: config 0 has no interface number 0 [ 683.452318][ T24] usb 6-1: New USB device found, idVendor=1164, idProduct=1e8c, bcdDevice=c9.10 [ 683.486661][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.536250][ T24] usb 6-1: Product: syz [ 683.559195][ T24] usb 6-1: Manufacturer: syz [ 683.568008][ T24] usb 6-1: SerialNumber: syz [ 683.631392][ T24] usb 6-1: config 0 descriptor?? [ 683.721518][T12824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.751652][T12824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.864930][T13056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.913430][T13056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.088511][T15650] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 684.097440][ T30] audit: type=1400 audit(2000000050.833:5645): avc: denied { mounton } for pid=15646 comm="syz.5.2858" path="/471/file0" dev="tmpfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 684.197990][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2858'. [ 684.267202][T15661] fuse: Bad value for 'fd' [ 684.466000][T15650] bridge0 (unregistering): left allmulticast mode [ 685.310214][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.544793][T15675] [U]  [ 685.920774][T15665] netlink: 'syz.3.2865': attribute type 3 has an invalid length. [ 686.167657][ T24] dvb-usb: found a 'YUAN High-Tech DiBcom STK7700D' in cold state, will try to load a firmware [ 686.221640][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 686.355453][ T24] dib0700: firmware download failed at 7 with -22 [ 686.394248][ T24] usb 6-1: USB disconnect, device number 72 [ 686.829719][T15698] tmpfs: Unknown parameter 'grpquota 0 [ 686.829719][T15698] ' [ 687.034672][T15702] PM: Enabling pm_trace changes system date and time during resume. [ 687.034672][T15702] PM: Correct system time has to be restored manually after resume. [ 687.157821][ T972] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 687.387808][ T5826] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 687.405579][ T5826] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 687.417166][ T972] usb 8-1: Using ep0 maxpacket: 32 [ 687.431217][ T5826] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 687.456171][ T972] usb 8-1: config 0 has an invalid interface number: 126 but max is 0 [ 687.465794][ T972] usb 8-1: config 0 has no interface number 0 [ 687.473117][ T5826] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 687.480243][ T972] usb 8-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 687.492468][ T5826] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 687.499981][ T972] usb 8-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 687.510422][ T972] usb 8-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 687.520951][ T972] usb 8-1: config 0 interface 126 has no altsetting 0 [ 687.533325][ T972] usb 8-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 687.552683][ T972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.570759][ T972] usb 8-1: Product: syz [ 687.574926][ T972] usb 8-1: Manufacturer: syz [ 687.587716][ T972] usb 8-1: SerialNumber: syz [ 687.594586][ T972] usb 8-1: config 0 descriptor?? [ 687.600331][T15696] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 687.624255][ T30] audit: type=1400 audit(2000000054.363:5646): avc: denied { read } for pid=15706 comm="syz.3.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 687.732812][T15709] [U]  [ 687.804869][ T74] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.835173][T15714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2876'. [ 687.859395][T15703] lo speed is unknown, defaulting to 1000 [ 687.998258][ T74] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.028381][ T972] ir_usb 8-1:0.126: IR Dongle converter detected [ 688.271858][ T30] audit: type=1400 audit(2000000054.893:5647): avc: denied { ioctl } for pid=15716 comm="syz.8.2879" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 ioctlcmd=0x500a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 688.273365][ T972] usb 8-1: IR Dongle converter now attached to ttyUSB0 [ 688.547524][ T74] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.100790][ T74] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.566272][ T74] bridge_slave_1: left allmulticast mode [ 690.119963][ T5826] Bluetooth: hci8: command tx timeout [ 690.127929][ T5893] usb 8-1: USB disconnect, device number 20 [ 690.154891][ T74] bridge_slave_1: left promiscuous mode [ 690.160870][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.175320][ T5893] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 690.193611][ T74] bridge_slave_0: left allmulticast mode [ 690.193886][ T5893] ir_usb 8-1:0.126: device disconnected [ 690.234376][ T74] bridge_slave_0: left promiscuous mode [ 690.263565][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.379566][ T31] INFO: task syz.2.2176:13352 blocked for more than 143 seconds. [ 690.389908][ T31] Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 [ 690.418965][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 690.437255][ T31] task:syz.2.2176 state:D stack:24968 pid:13352 tgid:13351 ppid:12995 task_flags:0x400140 flags:0x00004004 [ 690.461067][ T30] audit: type=1400 audit(2000000057.193:5648): avc: denied { write } for pid=5797 comm="syz-executor" path="pipe:[3705]" dev="pipefs" ino=3705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 690.507583][ T31] Call Trace: [ 690.510898][ T31] [ 690.513836][ T31] __schedule+0x116a/0x5de0 [ 690.540813][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2885'. [ 690.567165][ T31] ? __lock_acquire+0x622/0x1c90 [ 690.572152][ T31] ? __pfx___schedule+0x10/0x10 [ 690.606657][ T972] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 690.616601][ T31] ? find_held_lock+0x2b/0x80 [ 690.621306][ T31] ? schedule+0x2d7/0x3a0 [ 690.625652][ T31] schedule+0xe7/0x3a0 [ 690.646742][ T31] super_lock+0x2c0/0x3f0 [ 690.653284][ T31] ? __pfx_super_lock+0x10/0x10 [ 690.663076][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 690.705144][ T31] ? __iterate_supers+0x1b6/0x330 [ 690.726598][ T31] __iterate_supers+0x1e0/0x330 [ 690.731479][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 690.747305][ T31] ksys_sync+0x89/0x150 [ 690.751483][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 690.756261][ T31] ? rcu_is_watching+0x12/0xc0 [ 690.777231][ T31] ? syscall_trace_enter+0xee/0x260 [ 690.782451][ T31] __do_sys_sync+0xe/0x20 [ 690.786923][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 690.807247][ T31] do_syscall_64+0xcd/0x4c0 [ 690.811805][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.821593][ T31] RIP: 0033:0x7f972578e929 [ 690.826036][ T31] RSP: 002b:00007f9726694038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 690.840833][ T31] RAX: ffffffffffffffda RBX: 00007f97259b5fa0 RCX: 00007f972578e929 [ 690.849335][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 690.861689][ T31] RBP: 00007f97259b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 690.871999][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.883115][ T31] R13: 0000000000000000 R14: 00007f97259b5fa0 R15: 00007fff8f3a56d8 [ 690.891631][ T31] [ 690.894695][ T31] [ 690.894695][ T31] Showing all locks held in the system: [ 690.917359][ T31] 1 lock held by khungtaskd/31: [ 690.922269][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 690.932847][ T31] 3 locks held by kworker/1:1/54: [ 690.938464][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 690.949074][ T31] #1: ffffc90000be7d10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 690.960104][ T31] #2: ffffffff9034c828 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 690.970568][ T31] 5 locks held by kworker/u8:4/74: [ 690.982796][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 690.994155][ T31] #1: ffffc9000211fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 691.006914][ T31] #2: ffffffff903367d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 691.016281][ T31] #3: ffffffff9034c828 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 691.028858][ T31] #4: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 691.042303][ T31] 5 locks held by kworker/1:2/972: [ 691.052997][ T31] #0: ffff888143ad3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 691.063954][ T31] #1: ffffc900037d7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 691.083734][ T31] #2: ffff888029b83198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 691.094553][ T31] #3: ffff888029b86510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 691.110257][ T31] #4: ffff888029a3f668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 691.121063][ T31] 3 locks held by kworker/0:2/3074: [ 691.126274][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 691.137540][ T31] #1: ffffc9000bc1fd10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 691.147376][ T31] #2: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 691.157545][ T31] 2 locks held by getty/5575: [ 691.162231][ T31] #0: ffff888032c4b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 691.172631][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 691.186455][ T31] 5 locks held by kworker/1:6/5921: [ 691.193044][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 691.203022][ T31] #1: ffff8880b8524088 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 691.215025][ T31] #2: ffffffff8e5c48e0 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_tx_worker+0x237/0x810 [ 691.225939][ T31] #3: ffff8880b8527c98 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xe5/0xfc0 [ 691.236414][ T31] #4: ffffffff9afbe170 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 691.247694][ T31] 2 locks held by kworker/u8:11/8153: [ 691.253055][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 691.263153][ T31] #1: ffffc90002fd7d10 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 691.277762][ T31] 1 lock held by syz.5.1835/11973: [ 691.283045][ T31] #0: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 691.293035][ T31] 1 lock held by syz.1.1941/12332: [ 691.298171][ T31] #0: ffff8880337f00e0 (&type->s_umount_key#67/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 691.309358][ T31] 3 locks held by kworker/u8:13/13052: [ 691.315089][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 691.326278][ T31] #1: ffffc9000419fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 691.338240][ T31] #2: ffffffff9034c828 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 691.347349][ T31] 1 lock held by syz.4.2213/13471: [ 691.352450][ T31] #0: ffffffff9034c828 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 691.361445][ T31] 2 locks held by syz-executor/15703: [ 691.367686][ T31] #0: ffffffff90aa25c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 691.377323][ T31] #1: ffffffff9034c828 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 691.386571][ T31] 2 locks held by syz.8.2883/15743: [ 691.391762][ T31] #0: ffffffff8f7269a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 691.402029][ T31] #1: ffffffff9034c828 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 691.411310][ T31] 2 locks held by syz.8.2883/15745: [ 691.416776][ T31] #0: ffffffff903367d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 691.426186][ T31] #1: ffffffff9034c828 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 691.437582][ T31] 1 lock held by syz.5.2884/15752: [ 691.442688][ T31] #0: ffffffff9034c828 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 691.452266][ T31] 1 lock held by syz.7.2885/15758: [ 691.457392][ T31] #0: ffffffff9034c828 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0x980/0x84e0 [ 691.467595][ T31] 4 locks held by syz.3.2886/15755: [ 691.472784][ T31] #0: ffff8880252e0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 691.482361][ T31] #1: ffff8880252e00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 691.492191][ T31] #2: ffffffff905bdf08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 691.502949][ T31] #3: ffff888032f6eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 691.512495][ T31] [ 691.514863][ T31] ============================================= [ 691.514863][ T31] [ 691.527834][ T31] NMI backtrace for cpu 0 [ 691.527849][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 691.527872][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.527882][ T31] Call Trace: [ 691.527888][ T31] [ 691.527895][ T31] dump_stack_lvl+0x116/0x1f0 [ 691.527924][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 691.527943][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 691.527966][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 691.527989][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 691.528011][ T31] watchdog+0xf70/0x12c0 [ 691.528035][ T31] ? __pfx_watchdog+0x10/0x10 [ 691.528052][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 691.528078][ T31] ? __kthread_parkme+0x19e/0x250 [ 691.528104][ T31] ? __pfx_watchdog+0x10/0x10 [ 691.528122][ T31] kthread+0x3c2/0x780 [ 691.528137][ T31] ? __pfx_kthread+0x10/0x10 [ 691.528155][ T31] ? rcu_is_watching+0x12/0xc0 [ 691.528177][ T31] ? __pfx_kthread+0x10/0x10 [ 691.528194][ T31] ret_from_fork+0x5d4/0x6f0 [ 691.528218][ T31] ? __pfx_kthread+0x10/0x10 [ 691.528234][ T31] ret_from_fork_asm+0x1a/0x30 [ 691.528263][ T31] [ 691.528270][ T31] Sending NMI from CPU 0 to CPUs 1: [ 691.656203][ C1] NMI backtrace for cpu 1 [ 691.656217][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 691.656236][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.656244][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 691.656268][ C1] Code: bb 71 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 30 29 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 691.656284][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 691.656296][ C1] RAX: 0000000002629367 RBX: 0000000000000001 RCX: ffffffff8b80dc69 [ 691.656305][ C1] RDX: 0000000000000000 RSI: ffffffff8de1a546 RDI: ffffffff8c157d60 [ 691.656315][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 691.656323][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 691.656332][ C1] R13: ffff88801e2b2440 R14: ffffffff90a81050 R15: 0000000000000000 [ 691.656341][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 691.656355][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.656364][ C1] CR2: 00002000000ee000 CR3: 000000000e382000 CR4: 00000000003526f0 [ 691.656373][ C1] Call Trace: [ 691.656378][ C1] [ 691.656383][ C1] default_idle+0x13/0x20 [ 691.656396][ C1] default_idle_call+0x6d/0xb0 [ 691.656408][ C1] do_idle+0x391/0x510 [ 691.656427][ C1] ? __pfx_do_idle+0x10/0x10 [ 691.656443][ C1] ? do_idle+0x13/0x510 [ 691.656459][ C1] cpu_startup_entry+0x4f/0x60 [ 691.656475][ C1] start_secondary+0x21d/0x2b0 [ 691.656492][ C1] ? __pfx_start_secondary+0x10/0x10 [ 691.656512][ C1] common_startup_64+0x13e/0x148 [ 691.656529][ C1] [ 691.657283][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 691.657296][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 691.657315][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.657324][ T31] Call Trace: [ 691.657330][ T31] [ 691.657337][ T31] dump_stack_lvl+0x3d/0x1f0 [ 691.657362][ T31] panic+0x71c/0x800 [ 691.657382][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 691.657402][ T31] ? __pfx_panic+0x10/0x10 [ 691.657423][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 691.657446][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 691.657466][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 691.657486][ T31] ? watchdog+0xdda/0x12c0 [ 691.657502][ T31] ? watchdog+0xdcd/0x12c0 [ 691.657522][ T31] watchdog+0xdeb/0x12c0 [ 691.657542][ T31] ? __pfx_watchdog+0x10/0x10 [ 691.657558][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 691.657579][ T31] ? __kthread_parkme+0x19e/0x250 [ 691.657602][ T31] ? __pfx_watchdog+0x10/0x10 [ 691.657619][ T31] kthread+0x3c2/0x780 [ 691.657639][ T31] ? __pfx_kthread+0x10/0x10 [ 691.657655][ T31] ? rcu_is_watching+0x12/0xc0 [ 691.657673][ T31] ? __pfx_kthread+0x10/0x10 [ 691.657688][ T31] ret_from_fork+0x5d4/0x6f0 [ 691.657709][ T31] ? __pfx_kthread+0x10/0x10 [ 691.657724][ T31] ret_from_fork_asm+0x1a/0x30 [ 691.657749][ T31] [ 691.964156][ T31] Kernel Offset: disabled [ 691.968455][ T31] Rebooting in 86400 seconds..