last executing test programs: 12m22.59562139s ago: executing program 2 (id=3994): sysinfo(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x151) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000100)) 12m22.397188619s ago: executing program 2 (id=3997): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x90, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0xfffffffffffffecc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r3, 0x5760, 0x0) read$FUSE(r2, &(0x7f0000006200)={0x2020}, 0x2020) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{0x20, ']-({$\x9e\xa4\xb1\xe5\xb9P`kQ\xb3\xdc\x1b\xcav\xaao\x1a\xd1\x10\x9b;8\xbb\x9e\xa7\xd3=\x06\xaa(\x89>c4k\xe8\xdf\xb2\xe4\xbdt2,\xeb:\xf8\x15\x04\x11\nL'}]}, 0x3d) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008094}], 0x1, 0x40800) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x149803, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000180)) pwritev(r7, &(0x7f0000000080), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008040) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x4000040) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r8, 0x104, 0x3, 0x0, &(0x7f00000003c0)) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) 12m21.182856267s ago: executing program 2 (id=4000): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="b1", 0x1, 0x8801, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x200}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 12m20.918169984s ago: executing program 2 (id=4002): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0x9, 0x5}]}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010000", 0x7) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) (async) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0x38, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x2}, @acquire, @dead_binder_done, @enter_looper], 0x1, 0x0, &(0x7f00000002c0)="95"}) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) (async, rerun: 32) setpgid(0x0, r3) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (rerun: 64) 12m20.806783166s ago: executing program 2 (id=4003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') read$watch_queue(r5, &(0x7f0000000000)=""/164, 0xa4) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') dup3(r3, r6, 0x80000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) clock_gettime(0x0, &(0x7f0000002cc0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/82, 0x52}, {&(0x7f0000000340)=""/208, 0xd0}], 0x2, &(0x7f0000000440)=""/61, 0x3d}, 0x7}, {{&(0x7f0000000480)=@alg, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000500)=""/146, 0x92}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/78, 0x4e}, {&(0x7f00000005c0)=""/24, 0x18}], 0x5, &(0x7f0000002940)=""/25, 0x19}, 0x100000}, {{&(0x7f0000002980)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a00)=""/86, 0x56}, {&(0x7f0000002a80)=""/225, 0xe1}], 0x2, &(0x7f0000002bc0)=""/51, 0x33}, 0x4}], 0x3, 0x123, &(0x7f0000002d00)={r7, r8+10000000}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x5000, 0x9fc, 0x0, 0x8000, 0x0, [{0x4, 0x8, 0xe7, '\x00', 0x81}, {0xc6, 0x4, 0x4, '\x00', 0xc}, {0x0, 0x8, 0x1, '\x00', 0xd}, {0x2, 0x6, 0x1, '\x00', 0x1f}, {0xf, 0x8, 0x2, '\x00', 0x1}, {0x0, 0x2, 0x7, '\x00', 0x78}, {0x7, 0x6, 0x7, '\x00', 0x4e}, {0x3, 0x6, 0x2, '\x00', 0x45}, {0x2, 0x8, 0x40, '\x00', 0x6}, {0x11, 0x1, 0x1, '\x00', 0x3}, {0x3, 0x9, 0x0, '\x00', 0x9d}, {0x6, 0x1, 0x26, '\x00', 0x7f}, {0x5, 0xe, 0x7, '\x00', 0x10}, {0x7, 0xe5, 0xc, '\x00', 0x80}, {0xfe, 0xb, 0x0, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x7, '\x00', 0x80}, {0x4, 0x4, 0x2, '\x00', 0x42}, {0xfa, 0x6, 0x4, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0xa}, {0x2, 0x0, 0x99, '\x00', 0x80}, {0x6, 0x46, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x7d, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) 12m20.450793744s ago: executing program 2 (id=4006): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x88400000}, 0xc, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtaction={0x1a78, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{0x2cc, 0x1, [@m_mpls={0x110, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe2601}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6a1c, 0x4, 0x6, 0x2}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0x90, 0x6, "4e51d0f0193e5c3d54175b491664b0e8fa8b82b67708e1b4281cddd0e8216997a3942427f90eebe1cba60453a96635e6e01b60cbfa17fd7d83ee15fd4639c0907a071d928713c69dea8acd0957a6db8ab1b1908c377d1abb5cc151eeb55c230e245110fd967a5b87126c969255ea5ab5f3377ea834f9cdbf8fc3508edea3c173bb60d4cb88076c488c82b625"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x1b8, 0x1d, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x80, 0xc, 0x1, 0xffffff80}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8001, 0x20000000, 0x3d, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x20000000, 0x3e4, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8a1, 0xffffffffffffffff, 0x1, 0x22a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0xffffffffffffffff, 0x7aca}, 0x0, r1}}]}, {0xec, 0x6, "2ea2593c49bd11b52dfe044b6ade798288d6940e0c6a4fc0bc033b166190de1099f508aed8e5b72488aedecfcf5a59520f669d71b5027d0a4b312af6dc621da972db66034b0b36626129f97af7e847404ff950eb25196936bd29a45077cd9b8412b629ad73657fb2542caa7318b286aac6cb64d169557081327202db0daf1d1cb3e5f6868f51bd2c5ed1c1cb5564b74145149a8be4f5963ad45e0df11ef60fed8af23db54c6c13d2dc7e18784d9034f24f7263cd8d8dc5d67f1e9f826036a4bae0c2a994b64be6d9592360d503f6b57b03eae97c5a31c070ed199350a08b04dbe285927344a18187"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x274, 0x1, [@m_skbedit={0x88, 0x15, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x230}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xb}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x3a, 0x6, "f8bcca4b3de34de9da1bfa76cc3e3e37788d83315a75417f18129ed304bb196c19a8265f463571d28f33ab0d298680d011d4e1355088"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xe4, 0x1a, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0xa0, 0x6, "5397138a3c5c6fc00117c7bf43b6ce6dd06e172fad96b4dd33f3cab7c0a2104cb5eeb74b83151481a5b89d48164f4c5248bb980974db3268cf6faebf8f96435087f31d386f1a8634970a4d13f9e9d3fd124e58469e2d805e07b1c55a315ea617eb6a34da99a1a0e67677714c41a6e27ef090d11478e66a8fae12335f5e60e8307d7266936144966ecde70de690eae8d0e601086fcebe56abf0ba5788"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x70, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xb32e, 0x10000000, 0x2, 0x8000}}, @TCA_DEF_DATA={0x8, 0x3, ',%+\x00'}]}, {0x22, 0x6, "be2ee517359c824df2a47820f408afbe4464626e634c30cb2fada9797637"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x94, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x7, 0x7, 0x5, 0x7}, 0x2}}]}, {0x48, 0x6, "324ae366e97c4aea287c2badd68eb3e88a578a0b858e75eac535a4bed7fc8c6f6b5436ccf888b85705b678b95d4b73016b7c5412b816140069c9ff0d3b9def230b6c571b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x52c, 0x1, [@m_mpls={0xc0, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4ae8}]}, {0x8a, 0x6, "b6e42ee0f1b18a30466486ff67d36aeef9d434d7ed5d1d4dc2053291ebeca230a8491c174ac4f1e36edf87b03495fa98cd0bdffba69f6f8316bedd7d617188a905591ba908d88b2e28724227b1b75cb3c139a3a183f4c63ea5a342f5962d0cb77f1d8125954b305111e807f68dd0a89adbf9711651e1ae430f2027ce4b0936dc50e6c809839a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0xdc, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0xb0, 0x6, "b133045b6f71113528b2c7e03366b34f8bbcbeac82201dda6a583d1a693c014d5c3e486bd3c7b6be57b9d03be6d61d25460fe782dcd53d0fa542c7db7853666df008ab8d757dc66c3c50499c87f0d3ed0c9a682ce929e70bd3bf8c0228c3fd51624e7e7c34886b943206181c45c8971198816030f50f7a0cabd115c07fb99998b6955c8fd38f5ff3d95efa3c6f2c2b72cf1c2c8f35140033315af21bd9dd1ac0bba17fbea627eed1fe280073"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x118, 0x17, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa02}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x87d, 0x10000000, 0xc, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0xab, 0x6, "b14ad6501cc8766ecdd0a4afd52a61e4ff0b8d482c58debbf5035b7f59268d2a835d05a8342484ada650f4cefb21116253a7f5f83bdf4936bb843ebd786796adc4a8c32ac65ba47e99cf5e63e49508644e9b7db71a2b4f27a30951be1b8857de66d8d20c241fc1d69542fd921a568e7081e8cc0b43b5b9e73e20fccb8fa5f1020605be0efa58c0f7fd344a349a8d59ac3fa500a86d4bc14797f39d8dd189350f30e0a8baac77b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x10c, 0x0, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xaf313}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_PROTO={0x6, 0x4, 0x886c}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x7, 0x5, 0x7}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0xbcd1, 0xfffffffffffffffc, 0x9, 0x6}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}]}, {0x78, 0x6, "729d12a47b631a5e9bb6ddb936146071838abdfc0e165b67eb2ff19289449e91624d925f4d31ca29255c61b39fb8184265548448abf9a872a6e1774e975c5659ebcfa6053fc0e059d4c8bf7d668569711094286e5c6bef274209e1713222f92b254a89fb947e255c9db9de04de852981c5cb3ff2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x168, 0x12, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8001, 0x5, 0x4, 0x9}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="df10b4bd41be"}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x200, 0x20000000, 0xb719, 0x98}, 0x1}}]}, {0xe5, 0x6, "1d03f33cc7c1374cbb072f8861e694489cf1130f09b6cf62971a67a435f3cae79e568b6831310792b85189bc4e7399bd64784def2f0c1c3f7e87c713b28f141c42dc3d1100d44f80d261bf0a89f4987acf8823f8c230d269cf8d0bdf3c61ff417ee60956baabd3745dc0b7aa69f89ecb874c456db4c19807e075e5b4285f157b851bf2733443ca29860410856a471983c7f1839878219bb6eed5818e5e403db1b29da0d84e346a65a5add8c9f31009077e3aa85c41169e66e179d144158a28a90d2ca065c733b6a1be74f5dbd86c43903eeee85bd28f5d0927ba68553499cd5426"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0xff8, 0x1, [@m_skbedit={0xff4, 0x19, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x5c, 0x7, 0x9, 0x800}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xab6f}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8, 0x20000000, 0x5d1cf863}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0xf3e2, 0xffffffffffffffff, 0x1, 0xe}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0xf60, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1a78}, 0x1, 0x0, 0x0, 0x10}, 0x20008004) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x5}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x86, 0xbe, 0x74, 0x40, 0xb48, 0x1008, 0xb7de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc4, 0x28, 0x47}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 12m20.179763165s ago: executing program 32 (id=4006): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x88400000}, 0xc, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtaction={0x1a78, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{0x2cc, 0x1, [@m_mpls={0x110, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe2601}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6a1c, 0x4, 0x6, 0x2}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0x90, 0x6, "4e51d0f0193e5c3d54175b491664b0e8fa8b82b67708e1b4281cddd0e8216997a3942427f90eebe1cba60453a96635e6e01b60cbfa17fd7d83ee15fd4639c0907a071d928713c69dea8acd0957a6db8ab1b1908c377d1abb5cc151eeb55c230e245110fd967a5b87126c969255ea5ab5f3377ea834f9cdbf8fc3508edea3c173bb60d4cb88076c488c82b625"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x1b8, 0x1d, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x80, 0xc, 0x1, 0xffffff80}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8001, 0x20000000, 0x3d, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x20000000, 0x3e4, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8a1, 0xffffffffffffffff, 0x1, 0x22a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0xffffffffffffffff, 0x7aca}, 0x0, r1}}]}, {0xec, 0x6, "2ea2593c49bd11b52dfe044b6ade798288d6940e0c6a4fc0bc033b166190de1099f508aed8e5b72488aedecfcf5a59520f669d71b5027d0a4b312af6dc621da972db66034b0b36626129f97af7e847404ff950eb25196936bd29a45077cd9b8412b629ad73657fb2542caa7318b286aac6cb64d169557081327202db0daf1d1cb3e5f6868f51bd2c5ed1c1cb5564b74145149a8be4f5963ad45e0df11ef60fed8af23db54c6c13d2dc7e18784d9034f24f7263cd8d8dc5d67f1e9f826036a4bae0c2a994b64be6d9592360d503f6b57b03eae97c5a31c070ed199350a08b04dbe285927344a18187"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x274, 0x1, [@m_skbedit={0x88, 0x15, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x230}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xb}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x3a, 0x6, "f8bcca4b3de34de9da1bfa76cc3e3e37788d83315a75417f18129ed304bb196c19a8265f463571d28f33ab0d298680d011d4e1355088"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xe4, 0x1a, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0xa0, 0x6, "5397138a3c5c6fc00117c7bf43b6ce6dd06e172fad96b4dd33f3cab7c0a2104cb5eeb74b83151481a5b89d48164f4c5248bb980974db3268cf6faebf8f96435087f31d386f1a8634970a4d13f9e9d3fd124e58469e2d805e07b1c55a315ea617eb6a34da99a1a0e67677714c41a6e27ef090d11478e66a8fae12335f5e60e8307d7266936144966ecde70de690eae8d0e601086fcebe56abf0ba5788"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x70, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xb32e, 0x10000000, 0x2, 0x8000}}, @TCA_DEF_DATA={0x8, 0x3, ',%+\x00'}]}, {0x22, 0x6, "be2ee517359c824df2a47820f408afbe4464626e634c30cb2fada9797637"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x94, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x7, 0x7, 0x5, 0x7}, 0x2}}]}, {0x48, 0x6, "324ae366e97c4aea287c2badd68eb3e88a578a0b858e75eac535a4bed7fc8c6f6b5436ccf888b85705b678b95d4b73016b7c5412b816140069c9ff0d3b9def230b6c571b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x52c, 0x1, [@m_mpls={0xc0, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4ae8}]}, {0x8a, 0x6, "b6e42ee0f1b18a30466486ff67d36aeef9d434d7ed5d1d4dc2053291ebeca230a8491c174ac4f1e36edf87b03495fa98cd0bdffba69f6f8316bedd7d617188a905591ba908d88b2e28724227b1b75cb3c139a3a183f4c63ea5a342f5962d0cb77f1d8125954b305111e807f68dd0a89adbf9711651e1ae430f2027ce4b0936dc50e6c809839a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0xdc, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0xb0, 0x6, "b133045b6f71113528b2c7e03366b34f8bbcbeac82201dda6a583d1a693c014d5c3e486bd3c7b6be57b9d03be6d61d25460fe782dcd53d0fa542c7db7853666df008ab8d757dc66c3c50499c87f0d3ed0c9a682ce929e70bd3bf8c0228c3fd51624e7e7c34886b943206181c45c8971198816030f50f7a0cabd115c07fb99998b6955c8fd38f5ff3d95efa3c6f2c2b72cf1c2c8f35140033315af21bd9dd1ac0bba17fbea627eed1fe280073"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x118, 0x17, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa02}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x87d, 0x10000000, 0xc, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0xab, 0x6, "b14ad6501cc8766ecdd0a4afd52a61e4ff0b8d482c58debbf5035b7f59268d2a835d05a8342484ada650f4cefb21116253a7f5f83bdf4936bb843ebd786796adc4a8c32ac65ba47e99cf5e63e49508644e9b7db71a2b4f27a30951be1b8857de66d8d20c241fc1d69542fd921a568e7081e8cc0b43b5b9e73e20fccb8fa5f1020605be0efa58c0f7fd344a349a8d59ac3fa500a86d4bc14797f39d8dd189350f30e0a8baac77b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x10c, 0x0, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xaf313}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_PROTO={0x6, 0x4, 0x886c}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x7, 0x5, 0x7}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0xbcd1, 0xfffffffffffffffc, 0x9, 0x6}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}]}, {0x78, 0x6, "729d12a47b631a5e9bb6ddb936146071838abdfc0e165b67eb2ff19289449e91624d925f4d31ca29255c61b39fb8184265548448abf9a872a6e1774e975c5659ebcfa6053fc0e059d4c8bf7d668569711094286e5c6bef274209e1713222f92b254a89fb947e255c9db9de04de852981c5cb3ff2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x168, 0x12, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8001, 0x5, 0x4, 0x9}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="df10b4bd41be"}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x200, 0x20000000, 0xb719, 0x98}, 0x1}}]}, {0xe5, 0x6, "1d03f33cc7c1374cbb072f8861e694489cf1130f09b6cf62971a67a435f3cae79e568b6831310792b85189bc4e7399bd64784def2f0c1c3f7e87c713b28f141c42dc3d1100d44f80d261bf0a89f4987acf8823f8c230d269cf8d0bdf3c61ff417ee60956baabd3745dc0b7aa69f89ecb874c456db4c19807e075e5b4285f157b851bf2733443ca29860410856a471983c7f1839878219bb6eed5818e5e403db1b29da0d84e346a65a5add8c9f31009077e3aa85c41169e66e179d144158a28a90d2ca065c733b6a1be74f5dbd86c43903eeee85bd28f5d0927ba68553499cd5426"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0xff8, 0x1, [@m_skbedit={0xff4, 0x19, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x5c, 0x7, 0x9, 0x800}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xab6f}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8, 0x20000000, 0x5d1cf863}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0xf3e2, 0xffffffffffffffff, 0x1, 0xe}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0xf60, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1a78}, 0x1, 0x0, 0x0, 0x10}, 0x20008004) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x5}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x86, 0xbe, 0x74, 0x40, 0xb48, 0x1008, 0xb7de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc4, 0x28, 0x47}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 45.572069746s ago: executing program 4 (id=6288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x2) recvmmsg(r4, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40010002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000005f0ac6b09b550430000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r5, 0x2c9ab000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}}, 0x108) close(0xffffffffffffffff) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x88, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x40, 0xb9, 0x0, 0x0, 0x8, 0x2, 0x3, 0x0, 0x8, 0x0, 0xff, 0xf7, 0x0, 0xff, 0xfffffff8, 0xf, 0x4, 0x64, 0x2, '\x00', 0xab, 0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) write$P9_RCREATE(r6, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x80, 0x2, 0x7}, 0x3}}, 0x18) 43.70694435s ago: executing program 4 (id=6293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) unshare(0x20000400) prctl$PR_CAPBSET_READ(0x18, 0x15) capset(0x0, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x0, 0x0}, 0x10) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000080)={@private=0xa050100, @dev={0xac, 0x14, 0x14, 0x3c}}, 0xc) 42.584565082s ago: executing program 4 (id=6294): r0 = socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f0000000400000004e2ffff110000000000000007f9e1a7c5bda1736535813c03dacbfc3f7c36ad0382e1f4fd4659b280759737955efe3ecdaa4ffba645a7c5e319fff88d4b01c2bbed91402fab8cecb96958dff6abf7041e0f0ced79e560b69756d5258e2078899e239a9a5c269e06e8ee08081534fa8927f060132447f044a40c7f6a8955d7be957eae323f4a501e4c513964a35c21c1e9e2c7783d8118c4e075abf0af0b8e1105", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f00000008c0)={&(0x7f0000000540)=@isdn={0x22, 0x9, 0xb, 0xff, 0x6}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000800)="b16b062a74ee18689ae3334342c08f0d3e7b045cfbebde0061c7f4d894049971defadab11711074f064e89b9c0e58765c7dc50926b7ff6985d9a99c2b8693febe66489b1600e1b910a685d0e9cc833a8bcfbd48c4ed12deeab341495018154f1092a7c5742ff7fa23767e257c9cae59412c8e06ec45183747f172594afdd987b99c477e9e60243cf71a3508e9c988a593b77383b723360a132908b8f529a38c8e070cb176de1af789b4cadf34ec8a7f8fcca0a8f59fbe815aa56314c2ca6", 0xbe}, {&(0x7f00000005c0)="c6af6c87b0c2da7c181c5ecde9ad64d2a1de881557049250d6ce25a805ad1c5021c1cf51e475812ae3a4ac50805fa832f37c33432be27e8aaabf55fbddb82e43cc159cdb74", 0x45}, {&(0x7f00000009c0)="5ca3f6ac382d8e60bbaae98163008ac0d2b1614a691feca2b39c8e4dfcc741a896fcbb7531e564a9eea138dda21550ebec8a28cc0cab00df7e1f9a39b92b70104937e4e1a6366170411cd04032bae555c8316db8c0e25f8e2befa45f39e51277095b4ac48a338a0d5ce4a12673236bc3e737d64b62ac0fc64b03b97559f2953e366b2c9174d0aecda195f319c0b7208cbf1b1ad61bc4e69f2be031f166e3dfaa68ba27e6f7ea2a80b4f3b70fbc68dd8241d85ecc69f5d379815d37941a588d0878dbd30e2165900de945cfe14eb2ab45a7ea2a5ed92643a1a0d95d1253ba9fe72238c4", 0xe3}, {&(0x7f0000000ac0)="493ac1f47410a16028c39b67cd70358a1fd8f281bcb65189036e3feb2061bfd1a6963f57c4d75d2dbedd1bd38453ef72c45999d2b04835c6ba549b5de666782c19d0a20a62", 0x45}, {&(0x7f0000000b40)="095d9ca2535080eccb85a0115b30bca0a3428925abb72b69d1287cc90b7d96b53652246640f03d65e8cc776c91be589b54c9880c732e47cd20db9287eb903d3a46d96be2f04e5efc1184e70dfcb22ec22ab94ca1f7bcd3c873ec16dd6f396bf2502fd8f92396d15fb7135653f5023452c188e9cdb8e309c380e273b82e021e548f13bffdbba93be8f354fc0c36b68f5e9f446498a129b1fd079b5af02189178fd8a42d0c8ab1a79cfe5584d32bd2241e244e963587c3e83362bbdadb4c9073", 0xbf}, {&(0x7f0000000680)="73b18b5f66d525ba05d96256bf19fc75718fb695172d86e9e382dab89e673359a08c17c77579176d45abde759938aad6", 0x30}, {&(0x7f0000000780)}, {&(0x7f0000000c40)="44653822e7084dc8169123c106eb14957c3a92725c46423fe9ed0148f3d4b0291ebf02d35587123a2a4d01df21886f5aac9e3e18a4804afe9993f51b13781ecbc5a37760edf4bee35b277aea56dd4e3470d47721", 0x54}], 0x8, &(0x7f0000000d40)=[{0xb8, 0x116, 0x8, "ff2620eb9ec77ead1743756d0468d4a7f20bb0172965dc029967bddbcacc32d0f82f279327bd1aa78aba578678c56852acd1181768e831cb986f09c246dcc5f64f399d33a9dafa22867c3be404d5c1c3539f13667b7cadce0f0f5a9efe81556a9fea78ecec8944aae36ab00ba287cfd28e9b0bcdb274529f56ea9b9782499055daadbde81ebe9d9c3d4dcf5b1f8beaa608461b16f5102b6fab34749b382c058600b2158d2c"}, {0x58, 0x107, 0x7, "f5e53f95353bc2edaf38cae7ef13305ecf3e2f0682fda76a038555cfb9295ecf011041be8aa61016a96a392240e15a16f0ecf503ef02ae08dcb4667a6e02eae2255f7528"}, {0xe0, 0x113, 0x5, "09670513dfdaee93a761dc7e802977d80e004845118250a73f6bc0373dee2d996e3afd24bc172eadde9b2e27ffa7ad182fb5fe4765c0e5ecc211e330962e86ce45e643e534bda855a22e0a377a5f582142ee4ade5d3550616b05b36f2773f8b7cc49adda310e4cd16dccdca60833f06f5e3968c0f2df7a203e4acd94b12293146608b14646ca0eeb0604665e54a644d26b3ce552e7e473777c5de200d6eff90c1c928601f968a42e84e9d09db8be2543d52b5b0bd3dee8b14a4c93138748e8c0aef7ffd0c18b26a930b01d22ea55"}], 0x1f0}, 0x800) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r5, &(0x7f0000000140)="82650000", 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xc2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8014) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r11 = dup(r10) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "2c9bda24d607a5a9e2843fe8ae6632ae2ffd8f9dd4c5e64fc65ac039b7a87c1f", "1c1e66c29869bf688917a2ed3835dc1d9e81b84960aca558453c4565abe3dcd8", "d1156d90637541abeca20b9ca73977b269091c8aca21e3a616010dc43a53ec09", "0f83ee263df12a6401579dcd55e31d69df95ecfcd41b0b75ef367a2297d352fc", "eef1d2fa3c932f1f8ebfc1874010684213066050ad07a2af725a1cc11d7e0bd6", "bc720fbd51342adaeb4ed100", 0x5, 0xfffffffd, 0x1c, 0x3, 0x6}}) 41.682420525s ago: executing program 4 (id=6296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 39.758912791s ago: executing program 4 (id=6301): r0 = socket(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}}, 0x0) 39.445012782s ago: executing program 4 (id=6304): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000034000701ffffffff02000000017c0000"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0x24004000) 39.279687153s ago: executing program 33 (id=6304): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000034000701ffffffff02000000017c0000"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0x24004000) 13.758131679s ago: executing program 1 (id=6362): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5040100, 0x0, 0x32) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = gettid() r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffff8000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$ax25(r4, &(0x7f0000000000)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)='\x00\x00'}) tkill(r3, 0x7) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r5) syz_genetlink_get_family_id$nl802154(0x0, r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) 12.831319409s ago: executing program 1 (id=6366): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3", 0x3}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x55, 0xe7, 0x64, 0x20, 0x421, 0x492, 0x49fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x2, 0xd3, 0xc0, 0x44, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x3ff}}, {{0x9, 0x5, 0x2, 0x2, 0x8}}]}}]}}]}}, 0x0) 8.978794233s ago: executing program 1 (id=6376): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r7 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r8 = socket$inet(0x2, 0x6, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x0) bind$inet(r8, 0x0, 0x0) syz_emit_ethernet(0xe6, &(0x7f0000000380)=ANY=[], 0x0) io_uring_enter(r4, 0x3516, 0x77e, 0xfffffffffffffff5, 0x0, 0x0) 8.748146325s ago: executing program 0 (id=6378): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x208000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x88c0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'pimreg\x00', 0x1}, 0x18) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x1, [{0x0, 0x2001, 0xfffffffd}]}]}, {0x0, [0x5f, 0x30, 0x61]}}, &(0x7f0000000f40)=""/4081, 0x35, 0xff1, 0x8, 0xffffffff}, 0x28) 8.47347589s ago: executing program 0 (id=6380): socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$ax25(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0xfff5, 0x0, 0xc000}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) fsopen(0x0, 0x0) 7.563213679s ago: executing program 0 (id=6384): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r4, 0x1) 7.333091624s ago: executing program 3 (id=6385): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB="0800030000000000"], 0x40}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @remote}, {0x2, 0x4e62, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x239, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x6, 0x6, 0x9e}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 5.650750968s ago: executing program 5 (id=6388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r1, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x8060000) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0xfdfc) 5.612444597s ago: executing program 6 (id=6389): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x3e, 0x0, 0x0, 0x0) 5.542281789s ago: executing program 5 (id=6390): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711213000000000095"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'team_slave_1\x00'}, 0x18) r3 = syz_open_dev$media(0x0, 0x1ff, 0x52300) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) timerfd_create(0x7, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x51) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x2, 0x200, &(0x7f0000003c40)="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"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r6, 0x7, &(0x7f0000000400)={0x100000000}, &(0x7f0000000440)) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000100), 0x41000004, &(0x7f0000000040)) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0202000000000000140012800a00010069706f696200000004000280080005002b02"], 0x3c}, 0x1, 0xba01}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0x1, &(0x7f00000000c0)="5f129fe02db2befd1fa5e9b0ffca6f748ea8150858bdaefe317607509c029534c6dce7358442b41c73932eb6c145654c41ea699b1b3fab8aa71bb7ee809957c430e3e59cc613833376962588b6fb00acb7dd0db3ad99bcfaa0bb5ad3", &(0x7f0000000140)=""/162}, 0x20) 4.623307591s ago: executing program 6 (id=6391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.616081475s ago: executing program 5 (id=6392): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r6 = gettid() prlimit64(r6, 0xa, &(0x7f0000000140)={0x100000008, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) (async) r8 = socket(0x1, 0x80802, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000040000000200000000000011"], 0x0, 0x2c}, 0x28) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0xb000001d}) close(r9) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r11, 0xc048aeca, &(0x7f00000000c0)) (async) write$rfkill(r4, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) (async) memfd_secret(0x0) 4.490376581s ago: executing program 1 (id=6393): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000304c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 4.480106212s ago: executing program 3 (id=6394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0xc00000000000000}, 0x10) 4.471658908s ago: executing program 5 (id=6395): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) 3.742149699s ago: executing program 3 (id=6396): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 3.604058884s ago: executing program 0 (id=6397): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0x0}}, 0x44885) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendfile(r0, r0, &(0x7f0000000080)=0x1, 0x4) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x8009, 0x5, 0x6}, &(0x7f0000000080)=0x10) 3.570572991s ago: executing program 1 (id=6398): bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2480, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r1, 0x8925, 0xffffffffffff7ffe) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x100000000) userfaultfd(0x80001) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) open_by_handle_at(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x5}], 0x1, 0x2010, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000240)="66b9800000c00f326635000800000f30dcf566b93d0b000066b80000000066ba000000800f302e64660f3838050f2224b86b000f00d83e660f3824de66b93e0200000f32660f54f1672e650fae6da3", 0x4f}], 0x1, 0x20, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup.net/syz1\x00', 0x1ff) 3.450259734s ago: executing program 3 (id=6399): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@deltfilter={0x24, 0x2d, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x7}}}, 0x24}}, 0x40010) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC], 0xb4}}, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x1000, 0x10}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000440)={0x4, 0x4, 0x9, 0xc, 0x80000001, 0x9, 0xe, 0x0, r3}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020029bd7000ffdbdf251500000008002a0002000000050029000100000008000334", @ANYRES32=r8, @ANYBLOB="1c002b80080001000300000005000200020000000800040007000000050029000000000008002c0000000000"], 0x58}}, 0x44000) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x7, 0x0, 0x0, 0x3e0000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x1000000}, 0x0) 3.399640329s ago: executing program 6 (id=6400): creat(&(0x7f0000000400)='./bus\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000200010000100000100000000fc", 0x64, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) 3.204986519s ago: executing program 5 (id=6401): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x28, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4048aec9, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1}) sendmsg$nl_route(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x20048000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r12 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x40, 0x3, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r12, 0x7323, 0x0, 0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000304000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.543346504s ago: executing program 0 (id=6402): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001180)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x1, 0x80, 0x544, 0x1ff, 0x7}}, 0x120) 1.146349925s ago: executing program 3 (id=6403): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000440)={0x81, 0x6, 0x3e0, 0xf2, 0x0, 0x5, 0x0}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)=ANY=[], 0xe) r9 = socket$netlink(0x10, 0x3, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) 1.146073336s ago: executing program 5 (id=6404): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x3, 0x3, 0xac, "ac9cbb6edd7cf9b6c793b8910faebf06fc858fa2bcd78d1fd85225434ec09e677d3cc271fa7e8390f26242b9e2bc8535743be38f8ce838f214fa9305322735", 0x2d}, 0x60) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = io_uring_setup(0x5bc9, &(0x7f0000000100)={0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{0xffffffffffffffff, 0x2}], &(0x7f0000001440), 0x1}, 0x20) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x17, 0x6, "a535fee5e86e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0xa, 0x2, 'Q8'}, 0x0, 0x0, 0x0, 0x0}) 1.143313684s ago: executing program 0 (id=6405): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB="0800030000000000"], 0x40}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @remote}, {0x2, 0x4e62, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x239, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x6, 0x6, 0x9e}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) 1.080266263s ago: executing program 6 (id=6406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f}, 0x94) 1.02877177s ago: executing program 1 (id=6407): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r1, 0xffff) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="002000000200", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r4, 0x1) 895.574119ms ago: executing program 6 (id=6408): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffee}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008082}, 0x2000400c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400d7bc9b62180000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x800}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r0, 0x900) r5 = dup3(r4, r0, 0x80000) read(r5, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r5, &(0x7f0000002380)=""/4107, 0x100b) 118.332526ms ago: executing program 3 (id=6409): r0 = inotify_init1(0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x16ff, 0x200, 0x10, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0xf}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0x1b, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xeb4}, [@exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x4, 0x1, 0x4, 0x2, 0x9, 0x18, 0x1}, @ldst={0x3, 0x3, 0x2, 0xa, 0x2, 0x80, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}]}, &(0x7f00000003c0)='syzkaller\x00', 0x7f, 0xcb, &(0x7f00000006c0)=""/203, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x4, 0x7, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000a80)=[r1, r2, r3, r4, r6, 0x1, r8], &(0x7f0000000ac0)=[{0x4, 0x5, 0x4, 0xc}, {0x3, 0x5, 0x2, 0xd}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x2, 0x9, 0x7}], 0x10, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000080008ffffffff001280090001"], 0x38}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r12, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r0, &(0x7f0000000140)=""/68, 0x44) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000480)={0x20340800, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000cbd701004f7ffff04000000080009"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_SESSION_GET(r13, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r14, 0x803, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x4000001) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40840, 0x1cc) 0s ago: executing program 6 (id=6410): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) pipe2(&(0x7f0000000040), 0x0) pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r0], 0x7c}}, 0x80) kernel console output (not intermixed with test programs): nable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2026.405096][T23065] usb 6-1: selecting invalid altsetting 6 [ 2026.414259][T21225] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 2026.425765][T23065] usb 6-1: digital interface selection failed (-22) [ 2026.428369][T21225] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2026.434723][ T977] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2026.459891][T21225] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2026.476240][T23065] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2026.478396][T21225] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2026.504399][T21225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.514645][T21225] usb 5-1: Product: syz [ 2026.522117][T21225] usb 5-1: Manufacturer: syz [ 2026.522523][T23065] usb 6-1: setting power OFF [ 2026.526928][T21225] usb 5-1: SerialNumber: syz [ 2026.531520][ T977] usb 2-1: USB disconnect, device number 85 [ 2026.543225][T23065] dvb-usb: bulk message failed: -22 (2/0) [ 2026.555735][T23065] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2026.587334][T23065] (NULL device *): no alternate interface [ 2026.614092][T11518] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2026.665322][T23065] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2026.709652][T23065] usb 6-1: USB disconnect, device number 54 [ 2026.960492][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2026.990073][T21225] usb 5-1: USB disconnect, device number 43 [ 2028.542944][T23065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.944191][T11632] 9pnet_fd: Insufficient options for proto=fd [ 2029.439594][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.622497][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.973970][T11646] netlink: 'syz.4.6021': attribute type 11 has an invalid length. [ 2029.982120][ T977] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2030.087296][T11645] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6021'. [ 2030.207672][T11648] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6022'. [ 2030.267847][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 2030.289088][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2030.300282][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2030.320276][ T977] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2030.470243][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.517758][ T977] usb 4-1: config 0 descriptor?? [ 2030.557421][ T5931] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2030.642532][T23065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.732875][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2030.743404][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2030.778153][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2030.800010][ T30] audit: type=1400 audit(1754160890.506:2040): avc: denied { map } for pid=11636 comm="syz.3.6020" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2030.838770][ T5931] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2031.504794][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.585646][ T30] audit: type=1400 audit(1754160891.286:2041): avc: denied { read } for pid=11636 comm="syz.3.6020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2031.589461][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.610545][ T5931] usb 2-1: config 0 descriptor?? [ 2031.676798][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.688569][T23065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2031.797662][ T5931] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 2031.837563][ T5931] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 2031.937457][ T5931] usb 2-1: USB disconnect, device number 86 [ 2032.132862][ T977] usbhid 4-1:0.0: can't add hid device: -71 [ 2032.142252][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2032.152709][ T977] usb 4-1: USB disconnect, device number 92 [ 2032.256851][T21230] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2032.416977][T21230] usb 6-1: Using ep0 maxpacket: 16 [ 2032.433642][T21230] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2032.451005][T21230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.466602][T21230] usb 6-1: Product: syz [ 2032.476786][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2032.493441][T21230] usb 6-1: Manufacturer: syz [ 2032.503875][T21230] usb 6-1: SerialNumber: syz [ 2032.520614][T21230] usb 6-1: config 0 descriptor?? [ 2032.725527][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.068844][T21230] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 2033.086570][T21230] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2033.105855][T21230] usb 6-1: USB disconnect, device number 55 [ 2033.257004][T11721] 9pnet_fd: Insufficient options for proto=fd [ 2034.158744][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.961840][T11754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6043'. [ 2035.295158][T23065] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2035.447171][T23065] usb 6-1: Using ep0 maxpacket: 8 [ 2035.465937][T23065] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2035.507444][T23065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.532338][T23065] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2035.551812][T23065] pvrusb2: ********** [ 2035.561926][T23065] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2035.582390][T23065] pvrusb2: Important functionality might not be entirely working. [ 2035.596495][T23065] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2035.617115][T23065] pvrusb2: ********** [ 2035.652932][T11776] FAULT_INJECTION: forcing a failure. [ 2035.652932][T11776] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.669959][T11776] CPU: 0 UID: 0 PID: 11776 Comm: syz.3.6046 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2035.669993][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2035.670005][T11776] Call Trace: [ 2035.670012][T11776] [ 2035.670020][T11776] dump_stack_lvl+0x16c/0x1f0 [ 2035.670059][T11776] should_fail_ex+0x512/0x640 [ 2035.670088][T11776] ? __kmalloc_noprof+0xbf/0x510 [ 2035.670109][T11776] ? iovec_from_user+0x108/0x140 [ 2035.670129][T11776] should_failslab+0xc2/0x120 [ 2035.670152][T11776] __kmalloc_noprof+0xd2/0x510 [ 2035.670175][T11776] iovec_from_user+0x108/0x140 [ 2035.670197][T11776] __import_iovec+0x88/0x650 [ 2035.670223][T11776] import_iovec+0x109/0x140 [ 2035.670247][T11776] copy_msghdr_from_user+0xf9/0x160 [ 2035.670274][T11776] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2035.670310][T11776] ___sys_sendmsg+0xfe/0x1d0 [ 2035.670336][T11776] ? __pfx____sys_sendmsg+0x10/0x10 [ 2035.670383][T11776] ? __mutex_unlock_slowpath+0x80/0x800 [ 2035.670417][T11776] __sys_sendmsg+0x16d/0x220 [ 2035.670443][T11776] ? __pfx___sys_sendmsg+0x10/0x10 [ 2035.670477][T11776] ? __pfx_handle_softirqs+0x10/0x10 [ 2035.670506][T11776] do_syscall_64+0xcd/0x4c0 [ 2035.670533][T11776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2035.670552][T11776] RIP: 0033:0x7f7ee678eb69 [ 2035.670568][T11776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2035.670585][T11776] RSP: 002b:00007f7ee766d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2035.670604][T11776] RAX: ffffffffffffffda RBX: 00007f7ee69b5fa0 RCX: 00007f7ee678eb69 [ 2035.670615][T11776] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2035.670626][T11776] RBP: 00007f7ee766d090 R08: 0000000000000000 R09: 0000000000000000 [ 2035.670637][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2035.670646][T11776] R13: 0000000000000000 R14: 00007f7ee69b5fa0 R15: 00007fffdd793d28 [ 2035.670670][T11776] [ 2035.875139][T21230] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2035.906109][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.914785][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.928679][T23065] usb 6-1: USB disconnect, device number 56 [ 2035.934847][ T2337] pvrusb2: Invalid write control endpoint [ 2036.167528][T21230] usb 5-1: Using ep0 maxpacket: 8 [ 2036.343950][T21230] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2036.353379][T21230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.365073][T21230] usb 5-1: Product: syz [ 2036.371377][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6047'. [ 2036.376264][T21230] usb 5-1: Manufacturer: syz [ 2036.380994][ T977] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2036.389166][T21230] usb 5-1: SerialNumber: syz [ 2036.465024][T21230] usb 5-1: config 0 descriptor?? [ 2036.534393][ T977] usb 1-1: device descriptor read/64, error -71 [ 2036.593447][T21230] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2036.601891][T21230] usb 5-1: setting power ON [ 2036.606457][T21230] dvb-usb: bulk message failed: -22 (2/0) [ 2036.616113][T21230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2036.628031][T21230] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2036.636740][T21230] usb 5-1: media controller created [ 2036.683373][T21230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2036.752924][ T30] audit: type=1400 audit(1754160896.469:2042): avc: denied { append } for pid=11790 comm="syz.3.6047" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2037.065912][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.288551][ T977] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2037.294275][T21230] usb 5-1: selecting invalid altsetting 6 [ 2037.329773][T21230] usb 5-1: digital interface selection failed (-22) [ 2037.422200][ T2337] pvrusb2: Invalid write control endpoint [ 2037.435782][T21230] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2037.453247][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2037.465280][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2037.473108][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2037.485636][T21230] usb 5-1: setting power OFF [ 2037.490285][T21230] dvb-usb: bulk message failed: -22 (2/0) [ 2037.497431][T21230] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2037.509088][ T2337] pvrusb2: Device being rendered inoperable [ 2037.517671][ T2337] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2037.525087][T21230] (NULL device *): no alternate interface [ 2037.531611][ T2337] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2037.555708][ T977] usb 1-1: device descriptor read/64, error -71 [ 2037.590226][ T2337] pvrusb2: Attached sub-driver cx25840 [ 2037.624466][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2037.691988][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2037.706167][T21230] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2037.713421][ T977] usb usb1-port1: attempt power cycle [ 2037.790952][T21230] usb 5-1: USB disconnect, device number 44 [ 2038.067407][ T977] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2038.101740][ T977] usb 1-1: device descriptor read/8, error -71 [ 2038.369540][ T977] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2039.159666][ T977] usb 1-1: device not accepting address 37, error -71 [ 2039.352188][ T977] usb usb1-port1: unable to enumerate USB device [ 2039.476655][T11859] netlink: 'syz.3.6057': attribute type 21 has an invalid length. [ 2039.484869][T11859] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6057'. [ 2039.494051][T11859] netlink: 'syz.3.6057': attribute type 4 has an invalid length. [ 2039.501826][T11859] netlink: 'syz.3.6057': attribute type 3 has an invalid length. [ 2039.509618][T11859] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6057'. [ 2040.670813][ T30] audit: type=1326 audit(1754160900.361:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11872 comm="syz.0.6061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f033778eb69 code=0x0 [ 2040.693686][ C0] vkms_vblank_simulate: vblank timer overrun [ 2040.765832][T11882] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6062'. [ 2041.053205][T11892] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2041.601908][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2041.668508][ T30] audit: type=1800 audit(1754160901.381:2044): pid=11922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6070" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 2041.801750][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 2041.828700][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2041.854366][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.862997][ T24] usb 5-1: Product: syz [ 2042.197810][ T24] usb 5-1: Manufacturer: syz [ 2042.206482][ T24] usb 5-1: SerialNumber: syz [ 2042.265619][ T24] usb 5-1: config 0 descriptor?? [ 2042.282883][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2042.306681][ T24] usb 5-1: setting power ON [ 2042.321227][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 2042.352668][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2042.384906][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2042.412362][ T24] usb 5-1: media controller created [ 2042.469888][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2042.760482][ T24] usb 5-1: selecting invalid altsetting 6 [ 2042.793853][ T24] usb 5-1: digital interface selection failed (-22) [ 2042.859817][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2042.905511][ T24] usb 5-1: setting power OFF [ 2042.910193][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 2043.000352][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2043.033714][ T24] (NULL device *): no alternate interface [ 2043.249158][ T977] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 2043.285126][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2043.341450][ T24] usb 5-1: USB disconnect, device number 45 [ 2043.504192][ T977] usb 1-1: config index 0 descriptor too short (expected 15908, got 36) [ 2043.550918][ T977] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2043.607361][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2043.703147][ T977] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2043.762245][ T977] usb 1-1: config index 1 descriptor too short (expected 15908, got 36) [ 2043.772131][ T977] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2043.779521][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2043.813670][ T977] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2043.840137][ T977] usb 1-1: config index 2 descriptor too short (expected 15908, got 36) [ 2043.850282][ T977] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2043.858408][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2043.900445][ T977] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2043.923468][ T977] usb 1-1: string descriptor 0 read error: -22 [ 2043.929942][ T977] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2043.950472][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.997905][ T977] adutux 1-1:168.0: interrupt endpoints not found [ 2044.848498][T11989] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 2045.864627][T21225] libceph: connect (1)[c::]:6789 error -101 [ 2045.870866][T21225] libceph: mon0 (1)[c::]:6789 connect error [ 2046.013810][ T10] usb 1-1: USB disconnect, device number 38 [ 2046.328112][T21225] libceph: connect (1)[c::]:6789 error -101 [ 2046.354162][T21225] libceph: mon0 (1)[c::]:6789 connect error [ 2046.499837][ T30] audit: type=1400 audit(1754160906.214:2045): avc: denied { getopt } for pid=11998 comm="syz.5.6087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2047.028291][T21225] libceph: connect (1)[c::]:6789 error -101 [ 2047.034760][T21225] libceph: mon0 (1)[c::]:6789 connect error [ 2047.045655][T12003] ceph: No mds server is up or the cluster is laggy [ 2047.538895][ T5931] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2047.688790][T21225] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2047.718855][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 2047.742432][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2047.848258][ T5931] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2047.884769][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.911731][ T5931] usb 4-1: config 0 descriptor?? [ 2048.153174][ T5931] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2048.338446][T21225] usb 2-1: Using ep0 maxpacket: 16 [ 2048.360113][T21225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2048.494023][T21225] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2048.504133][T21225] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2048.513442][T21225] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2048.521573][T21225] usb 2-1: Manufacturer: syz [ 2048.527729][T21225] usb 2-1: config 0 descriptor?? [ 2048.718425][ T30] audit: type=1400 audit(1754160908.415:2046): avc: denied { create } for pid=12062 comm="syz.5.6098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2048.734794][T12046] FAULT_INJECTION: forcing a failure. [ 2048.734794][T12046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2048.769504][T12066] overlay: Unknown parameter 'uid<00000000000000000000' [ 2048.821674][T12046] CPU: 1 UID: 0 PID: 12046 Comm: syz.1.6097 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2048.821703][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2048.821714][T12046] Call Trace: [ 2048.821720][T12046] [ 2048.821727][T12046] dump_stack_lvl+0x16c/0x1f0 [ 2048.821759][T12046] should_fail_ex+0x512/0x640 [ 2048.821790][T12046] _copy_from_user+0x2e/0xd0 [ 2048.821811][T12046] copy_msghdr_from_user+0x98/0x160 [ 2048.821837][T12046] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2048.821865][T12046] ? kfree+0x24f/0x4d0 [ 2048.821889][T12046] ? __lock_acquire+0x62e/0x1ce0 [ 2048.821926][T12046] ___sys_recvmsg+0xdb/0x1a0 [ 2048.821951][T12046] ? __pfx____sys_recvmsg+0x10/0x10 [ 2048.821989][T12046] ? __pfx___might_resched+0x10/0x10 [ 2048.822016][T12046] do_recvmmsg+0x2fe/0x750 [ 2048.822044][T12046] ? __pfx_do_recvmmsg+0x10/0x10 [ 2048.822071][T12046] ? ksys_write+0x190/0x250 [ 2048.822092][T12046] ? __mutex_unlock_slowpath+0x163/0x800 [ 2048.822127][T12046] ? __fget_files+0x20e/0x3c0 [ 2048.822152][T12046] __x64_sys_recvmmsg+0x22a/0x280 [ 2048.822177][T12046] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2048.822210][T12046] do_syscall_64+0xcd/0x4c0 [ 2048.822239][T12046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.822256][T12046] RIP: 0033:0x7f2a61f8eb69 [ 2048.822271][T12046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2048.822288][T12046] RSP: 002b:00007f2a62d23038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2048.822307][T12046] RAX: ffffffffffffffda RBX: 00007f2a621b5fa0 RCX: 00007f2a61f8eb69 [ 2048.822319][T12046] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000005 [ 2048.822329][T12046] RBP: 00007f2a62d23090 R08: 0000000000000000 R09: 0000000000000000 [ 2048.822340][T12046] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 2048.822352][T12046] R13: 0000000000000000 R14: 00007f2a621b5fa0 R15: 00007ffcd6ee9068 [ 2048.822376][T12046] [ 2050.207685][T21225] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2050.400373][ T10] usb 4-1: USB disconnect, device number 93 [ 2050.407525][T21225] usb 6-1: Using ep0 maxpacket: 8 [ 2050.435788][T21225] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2050.445604][T21225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.465843][T21225] usb 6-1: Product: syz [ 2050.481205][T21225] usb 6-1: Manufacturer: syz [ 2050.506428][T21225] usb 6-1: SerialNumber: syz [ 2050.539857][T21225] usb 6-1: config 0 descriptor?? [ 2050.583831][ T30] audit: type=1400 audit(1754160910.286:2047): avc: denied { shutdown } for pid=12102 comm="syz.3.6107" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2050.584870][T21225] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2050.614936][ T24] usb 2-1: USB disconnect, device number 87 [ 2050.680238][T21225] usb 6-1: setting power ON [ 2050.728896][T21225] dvb-usb: bulk message failed: -22 (2/0) [ 2050.736914][T21225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2050.803827][T21225] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2050.861805][T21225] usb 6-1: media controller created [ 2050.886934][T21225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2050.959946][T21225] usb 6-1: selecting invalid altsetting 6 [ 2050.979828][T21225] usb 6-1: digital interface selection failed (-22) [ 2050.988736][T21225] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2051.019560][T21225] usb 6-1: setting power OFF [ 2051.025448][T21225] dvb-usb: bulk message failed: -22 (2/0) [ 2051.033113][T21225] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2051.043658][T21225] (NULL device *): no alternate interface [ 2051.067305][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2051.144850][T21225] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2051.171448][T21225] usb 6-1: USB disconnect, device number 57 [ 2051.257069][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 2051.263653][ T24] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2051.289476][ T24] usb 2-1: config 0 has no interface number 0 [ 2051.323009][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2051.343885][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.376637][ T24] usb 2-1: Product: syz [ 2051.659235][ T24] usb 2-1: Manufacturer: syz [ 2051.745283][ T24] usb 2-1: SerialNumber: syz [ 2051.968601][ T24] usb 2-1: config 0 descriptor?? [ 2051.981370][ T24] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2052.227921][T12117] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2052.550784][T12176] vlan1: entered promiscuous mode [ 2052.557216][T12176] vlan1: entered allmulticast mode [ 2052.562377][T12176] veth0_vlan: entered allmulticast mode [ 2054.583780][T16727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2054.598447][T16727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2054.599746][T12183] bridge_slave_0: left allmulticast mode [ 2054.611479][T12183] bridge_slave_0: left promiscuous mode [ 2054.621460][T16727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2054.623297][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.630686][T16727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2054.647500][T16727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2054.655763][ T24] usb 2-1: qt2_attach - failed to power on unit: -71 [ 2054.664526][ T24] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 2054.676171][ T24] usb 2-1: USB disconnect, device number 88 [ 2054.764940][T12183] bridge_slave_1: left allmulticast mode [ 2054.772849][T12183] bridge_slave_1: left promiscuous mode [ 2054.779761][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.801435][T12183] bond0: (slave bond_slave_0): Releasing backup interface [ 2054.840887][T12183] bond0: (slave bond_slave_1): Releasing backup interface [ 2054.939362][T12183] team0: Port device team_slave_0 removed [ 2054.964276][T12183] team0: Port device team_slave_1 removed [ 2054.982295][T12183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2054.993653][T12183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2055.019200][T12183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2055.027221][T12183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2055.135100][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2055.298673][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 2055.364739][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2055.389685][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.578036][ T24] usb 2-1: Product: syz [ 2055.584949][ T24] usb 2-1: Manufacturer: syz [ 2055.589569][ T24] usb 2-1: SerialNumber: syz [ 2055.596309][ T24] usb 2-1: config 0 descriptor?? [ 2055.606303][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2055.614338][ T24] usb 2-1: setting power ON [ 2055.619192][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 2055.638376][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2055.653042][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2055.673686][ T24] usb 2-1: media controller created [ 2055.710888][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2055.858139][T10044] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2055.893701][T12189] wg1 speed is unknown, defaulting to 1000 [ 2055.909787][T12189] lo speed is unknown, defaulting to 1000 [ 2055.928517][ T24] usb 2-1: selecting invalid altsetting 6 [ 2055.934295][ T24] usb 2-1: digital interface selection failed (-22) [ 2055.993676][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2056.022235][ T24] usb 2-1: setting power OFF [ 2056.023265][T10044] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2056.042567][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 2056.094241][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2056.106329][T12255] syz.0.6125: attempt to access beyond end of device [ 2056.106329][T12255] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2056.114685][ T24] (NULL device *): no alternate interface [ 2056.220729][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2056.271703][ T24] usb 2-1: USB disconnect, device number 89 [ 2056.287677][T10044] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2056.504587][T21225] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 2056.696019][ T30] audit: type=1400 audit(1754160916.419:2048): avc: denied { ioctl } for pid=12337 comm="syz.5.6129" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2056.707731][T10044] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2056.721493][ C0] vkms_vblank_simulate: vblank timer overrun [ 2056.736557][T12304] fuse: Unknown parameter 'ÿÿÿÿ00000000000000000000005' [ 2056.779183][T21225] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 2056.804450][T16727] Bluetooth: hci4: command tx timeout [ 2056.820247][T21225] usb 1-1: config 0 has no interface number 0 [ 2056.833054][ T30] audit: type=1326 audit(1754160916.559:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12303 comm="syz.1.6128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a61f8eb69 code=0x0 [ 2056.856105][ C0] vkms_vblank_simulate: vblank timer overrun [ 2056.862931][T21225] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2056.886453][T21225] usb 1-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 2056.895745][T21225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.913769][T21225] usb 1-1: Product: syz [ 2056.924401][T21225] usb 1-1: Manufacturer: syz [ 2056.929136][T21225] usb 1-1: SerialNumber: syz [ 2056.943333][T12345] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6130'. [ 2056.956622][T12345] netlink: zone id is out of range [ 2056.963929][T21225] usb 1-1: config 0 descriptor?? [ 2056.977021][T12345] netlink: zone id is out of range [ 2056.983831][T12345] netlink: zone id is out of range [ 2056.989459][T12244] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2057.005464][T12345] netlink: zone id is out of range [ 2057.011962][T12345] netlink: zone id is out of range [ 2057.028552][T21225] usb-storage 1-1:0.132: USB Mass Storage device detected [ 2057.041007][T12345] netlink: zone id is out of range [ 2057.049254][T12345] netlink: zone id is out of range [ 2057.061712][T21225] usb-storage 1-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 2057.093446][T12345] netlink: zone id is out of range [ 2057.131898][T12345] netlink: zone id is out of range [ 2057.166468][T12345] netlink: zone id is out of range [ 2057.213931][T12189] chnl_net:caif_netlink_parms(): no params data found [ 2057.464365][ T30] audit: type=1400 audit(1754160917.199:2050): avc: denied { getopt } for pid=12407 comm="syz.1.6131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2057.640045][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6132'. [ 2057.737087][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6132'. [ 2058.707681][T21225] usb 1-1: USB disconnect, device number 39 [ 2058.861604][T12431] syz.3.6133: attempt to access beyond end of device [ 2058.861604][T12431] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2058.883339][T16727] Bluetooth: hci4: command tx timeout [ 2059.173023][T21230] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 2059.366532][T21230] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 2059.375803][T21230] usb 4-1: config 0 has no interface number 0 [ 2059.392210][T21230] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2059.420001][T21230] usb 4-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 2059.429308][T21230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.440408][T21230] usb 4-1: Product: syz [ 2059.450662][T21230] usb 4-1: Manufacturer: syz [ 2059.459582][T21230] usb 4-1: SerialNumber: syz [ 2059.481124][T21230] usb 4-1: config 0 descriptor?? [ 2059.494335][T12420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2059.505982][T21230] usb-storage 4-1:0.132: USB Mass Storage device detected [ 2059.538298][T21230] usb-storage 4-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 2059.604568][T10044] bond0 (unregistering): Released all slaves [ 2060.027666][T10044] tipc: Left network mode [ 2060.736917][T10044] team0: Port device wlan1 removed [ 2060.777284][T12189] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.788354][T12189] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.905632][T12189] bridge_slave_0: entered allmulticast mode [ 2060.942536][T16727] Bluetooth: hci4: command tx timeout [ 2060.944834][T12189] bridge_slave_0: entered promiscuous mode [ 2061.082712][T12523] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6139'. [ 2061.153156][T21225] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2061.175348][ T10] usb 4-1: USB disconnect, device number 94 [ 2061.193990][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 2061.206072][T12189] bridge0: port 2(bridge_slave_1) entered disabled state [ 2061.223941][T12189] bridge_slave_1: entered allmulticast mode [ 2061.231476][T12189] bridge_slave_1: entered promiscuous mode [ 2061.323328][T21225] usb 1-1: Using ep0 maxpacket: 8 [ 2061.339691][T21225] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2061.350194][T21225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.363090][T21225] usb 1-1: Product: syz [ 2061.367288][T21225] usb 1-1: Manufacturer: syz [ 2061.376601][T21225] usb 1-1: SerialNumber: syz [ 2061.404329][T21225] usb 1-1: config 0 descriptor?? [ 2061.415145][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2061.430881][T21225] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2061.446181][T21225] usb 1-1: setting power ON [ 2061.541936][T21225] dvb-usb: bulk message failed: -22 (2/0) [ 2061.567207][T21225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2061.622836][T12583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6144'. [ 2061.640103][T10044] hsr_slave_0: left promiscuous mode [ 2061.680314][T21225] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2061.689186][T21225] usb 1-1: media controller created [ 2061.708256][T21225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2061.717459][T10044] hsr_slave_1: left promiscuous mode [ 2061.905538][T21225] usb 1-1: selecting invalid altsetting 6 [ 2061.940358][T21225] usb 1-1: digital interface selection failed (-22) [ 2061.948988][T21225] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2062.052032][T21225] usb 1-1: setting power OFF [ 2062.081613][T21225] dvb-usb: bulk message failed: -22 (2/0) [ 2062.087537][T21225] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2062.098078][T21225] (NULL device *): no alternate interface [ 2062.103752][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6144'. [ 2062.127863][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6144'. [ 2062.168989][T21225] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2062.243956][T21225] usb 1-1: USB disconnect, device number 40 [ 2062.413609][T12606] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 2063.048003][T16727] Bluetooth: hci4: command tx timeout [ 2064.595895][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2064.605653][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6145'. [ 2064.671992][T21230] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2064.880251][T21230] usb 2-1: Using ep0 maxpacket: 8 [ 2064.887457][T21230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.907802][T21230] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2065.354143][T21230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2065.363290][T21230] usb 2-1: SerialNumber: syz [ 2065.380521][T12189] team0: Port device team_slave_0 added [ 2065.400692][T21230] usb 2-1: config 0 descriptor?? [ 2065.410266][T12189] team0: Port device team_slave_1 added [ 2065.421870][T21230] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 2065.429274][T21230] usb 2-1: No valid video chain found. [ 2065.525748][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2065.533726][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2065.560373][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2065.586063][T10044] IPVS: stop unused estimator thread 0... [ 2065.731338][T12702] ipvlan2: entered allmulticast mode [ 2065.736694][T12702] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2065.826678][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2065.845068][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.331242][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2067.156552][T12189] hsr_slave_0: entered promiscuous mode [ 2067.173889][T12189] hsr_slave_1: entered promiscuous mode [ 2067.191345][T12189] debugfs: 'hsr0' already exists in 'hsr' [ 2067.205471][T12189] Cannot create hsr debugfs directory [ 2067.228125][ T30] audit: type=1400 audit(1754160926.954:2051): avc: denied { accept } for pid=12620 comm="syz.1.6150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2067.385380][T12784] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 2067.801333][T12822] sp0: Synchronizing with TNC [ 2067.864809][T12822] sp0: Found TNC [ 2068.419257][ T977] usb 2-1: USB disconnect, device number 90 [ 2068.503063][T12189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2068.529949][T12189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2068.575198][T12189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2068.588344][T12189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2068.731787][T12189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2068.848815][T31364] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2069.170415][T12189] 8021q: adding VLAN 0 to HW filter on device team0 [ 2069.246935][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.254073][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2069.271493][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.278656][ T6728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2069.413857][T31364] usb 6-1: Using ep0 maxpacket: 32 [ 2069.421841][T31364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2069.464178][T31364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2069.474117][T31364] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 2069.485044][T31364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.167281][T31364] usb 6-1: config 0 descriptor?? [ 2070.522889][T12903] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6171'. [ 2070.593445][T12189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2070.619861][T31364] hid_parser_main: 7 callbacks suppressed [ 2070.619881][T31364] koneplus 0003:1E7D:2D51.0032: unknown main item tag 0x0 [ 2070.644474][T31364] koneplus 0003:1E7D:2D51.0032: unknown main item tag 0x0 [ 2070.644525][T12903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2070.659925][T31364] koneplus 0003:1E7D:2D51.0032: unknown main item tag 0x0 [ 2070.670700][T31364] koneplus 0003:1E7D:2D51.0032: unknown main item tag 0x0 [ 2070.678745][T31364] koneplus 0003:1E7D:2D51.0032: unknown main item tag 0x0 [ 2070.696864][T31364] koneplus 0003:1E7D:2D51.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 2070.710155][T12913] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2070.836559][T31364] koneplus 0003:1E7D:2D51.0032: couldn't init struct koneplus_device [ 2070.859453][T31364] koneplus 0003:1E7D:2D51.0032: couldn't install mouse [ 2070.889265][T31364] koneplus 0003:1E7D:2D51.0032: probe with driver koneplus failed with error -71 [ 2071.090727][T31364] usb 6-1: USB disconnect, device number 58 [ 2071.114766][T12189] veth0_vlan: entered promiscuous mode [ 2071.123799][T12189] veth1_vlan: entered promiscuous mode [ 2071.168502][T12189] veth0_macvtap: entered promiscuous mode [ 2071.184014][T12189] veth1_macvtap: entered promiscuous mode [ 2071.251443][T12189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2071.283456][T12189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2071.303819][T10044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2071.313530][T10044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2071.390472][T10044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2071.402194][T10044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.190617][T10044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2072.201378][T10044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2072.414587][T10044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2072.424931][T10044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2072.694388][T12979] tipc: Enabling of bearer rejected, failed to enable media [ 2073.992003][T12998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=12998 comm=syz.4.6185 [ 2074.171145][T13003] SELinux: failed to load policy [ 2074.323764][T13008] kvm: MWAIT instruction emulated as NOP! [ 2074.525468][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2074.696381][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 2074.696894][T13021] tipc: Enabling of bearer rejected, failed to enable media [ 2074.760444][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2074.774840][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2074.924149][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2074.953735][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2075.060004][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2075.073426][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.211435][T13030] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6192'. [ 2075.227549][T13030] net_ratelimit: 72 callbacks suppressed [ 2075.227566][T13030] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 2075.324545][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 2075.349430][ T10] usbtmc 4-1:16.0: can't read capabilities [ 2075.579692][ T24] usb 4-1: USB disconnect, device number 95 [ 2076.092096][T16727] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 2077.446391][ T30] audit: type=1326 audit(1754160937.159:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.1.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a61f8eb69 code=0x7fc00000 [ 2077.804667][T13211] tipc: Enabling of bearer rejected, failed to enable media [ 2077.930932][T13209] syz.1.6202: attempt to access beyond end of device [ 2077.930932][T13209] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2077.968162][ T30] audit: type=1326 audit(1754160937.159:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.1.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a61f8eb69 code=0x7fc00000 [ 2078.317098][ T30] audit: type=1326 audit(1754160937.159:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.1.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a61f8eb69 code=0x7fc00000 [ 2078.394955][ T30] audit: type=1326 audit(1754160937.159:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.1.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a61f8eb69 code=0x7fc00000 [ 2078.431846][ T30] audit: type=1326 audit(1754160937.159:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.1.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a61f8eb69 code=0x7fc00000 [ 2078.477863][ T30] audit: type=1326 audit(1754160937.159:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.1.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a61f8eb69 code=0x7fc00000 [ 2078.664200][T13239] wg1 speed is unknown, defaulting to 1000 [ 2078.671516][T13239] lo speed is unknown, defaulting to 1000 [ 2078.751491][T13245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2079.225802][T13263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13263 comm=syz.3.6206 [ 2079.378032][T13244] syz.0.6204: attempt to access beyond end of device [ 2079.378032][T13244] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2079.771417][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6207'. [ 2079.872817][T31364] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2079.881548][ T24] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 2080.036208][T21225] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2080.068599][ T24] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 2080.080546][T31364] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 2080.092620][ T24] usb 1-1: config 0 has no interface number 0 [ 2080.139350][T16727] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2080.150357][T16727] Bluetooth: hci2: Injecting HCI hardware error event [ 2080.159596][T16727] Bluetooth: hci2: hardware error 0x00 [ 2080.389233][ T24] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2080.402505][T31364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.423388][T31364] usb 4-1: config 0 descriptor?? [ 2080.438700][T31364] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2080.454933][T31364] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2080.495225][ T24] usb 1-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 2080.504605][T21225] usb 5-1: Using ep0 maxpacket: 16 [ 2080.510484][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.519188][T21225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.533555][T21225] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2080.542831][ T24] usb 1-1: Product: syz [ 2080.552486][ T24] usb 1-1: Manufacturer: syz [ 2080.561719][ T24] usb 1-1: SerialNumber: syz [ 2080.567565][T21225] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2080.576840][T21225] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2080.608000][ T24] usb 1-1: config 0 descriptor?? [ 2080.662669][T13263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.671182][T13263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.684229][T13263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.693270][T13263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.704559][ T977] usb 4-1: USB disconnect, device number 96 [ 2080.721711][T21225] usb 5-1: Manufacturer: syz [ 2080.735128][T13272] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2080.744832][ T24] usb-storage 1-1:0.132: USB Mass Storage device detected [ 2080.755795][T21225] usb 5-1: config 0 descriptor?? [ 2080.775950][ T24] usb-storage 1-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 2081.417081][T13313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2081.452266][ T30] audit: type=1400 audit(1754160941.141:2058): avc: denied { accept } for pid=13278 comm="syz.4.6207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2081.727988][T13317] SELinux: failed to load policy [ 2082.073967][T21225] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2082.081639][ T24] usb 1-1: USB disconnect, device number 41 [ 2082.371590][T16727] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2082.371742][T21225] usb 4-1: Using ep0 maxpacket: 8 [ 2082.395791][T21225] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2082.405765][T21225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2082.423461][T21225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2082.445441][T21225] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2082.459532][T21225] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2082.469887][T21225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.481710][ T5910] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2082.641361][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 2082.648557][ T5910] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2082.671849][T31364] usb 5-1: USB disconnect, device number 46 [ 2082.687367][ T5910] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2082.703427][T21225] usb 4-1: GET_CAPABILITIES returned 0 [ 2082.708942][T21225] usbtmc 4-1:16.0: can't read capabilities [ 2082.723885][ T5910] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2082.749124][ T5910] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2082.768543][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.789972][ T5910] usb 6-1: Product: syz [ 2082.800065][ T5910] usb 6-1: Manufacturer: syz [ 2082.810233][ T5910] usb 6-1: SerialNumber: syz [ 2082.914438][ T10] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 2082.964421][T13369] tipc: Enabling of bearer rejected, failed to enable media [ 2083.404095][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2083.419084][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2083.433529][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2083.451064][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2083.465804][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2083.475152][T31364] usb 4-1: USB disconnect, device number 97 [ 2083.477837][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=5061, bcdDevice= 0.00 [ 2083.495218][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.507999][ T10] usb 2-1: config 0 descriptor?? [ 2083.675039][ T5910] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 2083.750768][ T977] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2083.910842][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 2083.917876][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2083.925903][ T977] usb 1-1: no configurations [ 2083.930528][ T977] usb 1-1: can't read configurations, error -22 [ 2084.060804][ T977] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2084.087573][ T30] audit: type=1400 audit(1754160943.822:2059): avc: denied { write } for pid=13400 comm="syz.3.6220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2084.284907][ T30] audit: type=1800 audit(1754160943.993:2060): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.6218" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2084.800291][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 2084.831167][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2084.838886][ T977] usb 1-1: no configurations [ 2084.843576][ T977] usb 1-1: can't read configurations, error -22 [ 2084.860608][ T977] usb usb1-port1: attempt power cycle [ 2085.067345][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6221'. [ 2085.073366][ T5910] usb 6-1: USB disconnect, device number 59 [ 2085.200347][ T977] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2085.233637][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 2085.242033][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2085.252694][ T977] usb 1-1: no configurations [ 2085.257331][ T977] usb 1-1: can't read configurations, error -22 [ 2085.419995][ T977] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2085.450816][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 2085.537208][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2085.744532][T13449] syz.3.6224: attempt to access beyond end of device [ 2085.744532][T13449] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2085.745322][ T977] usb 1-1: no configurations [ 2085.767172][ T977] usb 1-1: can't read configurations, error -22 [ 2085.785912][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 2085.792739][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2085.822900][ T10] usb 2-1: USB disconnect, device number 91 [ 2086.061188][ T977] usb usb1-port1: unable to enumerate USB device [ 2086.329548][ T5931] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 2086.446068][T13475] binder_alloc: 13474: binder_alloc_buf, no vma [ 2086.452723][ T30] audit: type=1400 audit(1754160946.184:2061): avc: denied { transfer } for pid=13474 comm="syz.5.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2086.532347][ T5931] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 2086.542787][ T5931] usb 4-1: config 0 has no interface number 0 [ 2086.552652][ T5931] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2086.596831][ T5931] usb 4-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 2086.608102][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.633881][ T5931] usb 4-1: Product: syz [ 2086.655324][ T5931] usb 4-1: Manufacturer: syz [ 2086.675202][ T5931] usb 4-1: SerialNumber: syz [ 2086.774298][ T5931] usb 4-1: config 0 descriptor?? [ 2086.784242][T13448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2086.796648][ T5931] usb-storage 4-1:0.132: USB Mass Storage device detected [ 2086.807507][ T5931] usb-storage 4-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 2087.779659][T13495] SELinux: failed to load policy [ 2087.786750][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2087.802646][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2087.813179][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2087.829222][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2087.841260][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2087.880271][T13502] wg1 speed is unknown, defaulting to 1000 [ 2087.894575][T13502] lo speed is unknown, defaulting to 1000 [ 2088.009342][T21225] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2088.038669][ T5931] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2088.174673][T21225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.208100][T21225] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2088.218357][T21225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.231623][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 2088.251856][T21225] usb 1-1: config 0 descriptor?? [ 2088.261359][ T5931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2088.272192][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2088.283492][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2088.285277][T13502] chnl_net:caif_netlink_parms(): no params data found [ 2088.300461][ T5931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2088.300509][ T5931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2088.300533][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.555060][ T5931] usb 5-1: GET_CAPABILITIES returned 0 [ 2088.564970][T13502] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.585005][ T5931] usbtmc 5-1:16.0: can't read capabilities [ 2088.602660][T13502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.624993][T13502] bridge_slave_0: entered allmulticast mode [ 2088.642754][T13502] bridge_slave_0: entered promiscuous mode [ 2088.660050][T13502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.671868][T21225] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 2088.694994][T21225] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0033/input/input131 [ 2088.698590][T13502] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.716449][T13502] bridge_slave_1: entered allmulticast mode [ 2088.727509][T13502] bridge_slave_1: entered promiscuous mode [ 2088.785926][ T24] usb 4-1: USB disconnect, device number 98 [ 2088.802994][T21225] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 2088.951483][T13502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2088.977363][T13502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2089.350171][ T977] usb 1-1: USB disconnect, device number 46 [ 2089.467472][ T24] usb 5-1: USB disconnect, device number 47 [ 2089.504912][T13502] team0: Port device team_slave_0 added [ 2089.514919][T13502] team0: Port device team_slave_1 added [ 2089.888421][T16727] Bluetooth: hci1: command tx timeout [ 2089.909128][T13502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2089.917652][ T30] audit: type=1800 audit(1754160949.645:2062): pid=13809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6233" name="SYSV00000000" dev="tmpfs" ino=13 res=0 errno=0 [ 2089.917843][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2089.986299][T13502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2089.999903][T13502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2090.010306][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2090.038932][T13502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2091.306409][ T30] audit: type=1400 audit(1754160951.046:2063): avc: denied { mount } for pid=13839 comm="syz.5.6240" name="/" dev="hugetlbfs" ino=121247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2091.557019][ T30] audit: type=1400 audit(1754160951.136:2064): avc: denied { unmount } for pid=29255 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2091.889805][ T5910] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2092.014672][T16727] Bluetooth: hci1: command tx timeout [ 2092.037703][T13502] hsr_slave_0: entered promiscuous mode [ 2092.044105][T13502] hsr_slave_1: entered promiscuous mode [ 2092.053498][T13502] debugfs: 'hsr0' already exists in 'hsr' [ 2092.059989][T13502] Cannot create hsr debugfs directory [ 2092.327209][ T5910] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2092.526398][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2092.623116][ T5910] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2092.679731][ T5910] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2092.702655][ T5910] usb 6-1: Manufacturer: syz [ 2092.726267][ T5910] usb 6-1: config 0 descriptor?? [ 2092.776252][ T977] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 2092.868892][ T5910] rc_core: IR keymap rc-hauppauge not found [ 2092.887939][ T5910] Registered IR keymap rc-empty [ 2092.893626][ T5910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2092.894486][T13502] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2092.922106][T13502] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2092.923628][ T5910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input133 [ 2092.933512][T13502] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2093.137100][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.173154][ T977] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 2093.222992][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.242831][ T977] usb 5-1: config 0 descriptor?? [ 2093.291178][T13502] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2093.304193][T13956] rc rc0: two consecutive events of type space [ 2093.315769][T13502] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.327825][T13502] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2093.381501][T13940] wg1 speed is unknown, defaulting to 1000 [ 2093.395030][T13940] lo speed is unknown, defaulting to 1000 [ 2093.459666][T13502] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2093.470242][T13502] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.480751][T13502] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2093.516971][T13868] macvlan3: entered promiscuous mode [ 2093.522343][T13868] bridge0: entered promiscuous mode [ 2093.730009][T13982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2093.740276][T13982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.022070][T13502] tipc: Resetting bearer [ 2094.054074][T16727] Bluetooth: hci1: command tx timeout [ 2094.102413][T13502] tipc: Disabling bearer [ 2094.109560][T13502] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2094.124757][T13502] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.136985][T13502] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2094.549785][T13502] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2094.629712][ T5931] usb 6-1: USB disconnect, device number 60 [ 2094.675894][T13502] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2094.701155][T13502] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2094.727549][T13502] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2094.813739][T14043] FAULT_INJECTION: forcing a failure. [ 2094.813739][T14043] name failslab, interval 1, probability 0, space 0, times 0 [ 2094.842282][T14043] CPU: 0 UID: 0 PID: 14043 Comm: syz.3.6247 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2094.842327][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2094.842337][T14043] Call Trace: [ 2094.842347][T14043] [ 2094.842355][T14043] dump_stack_lvl+0x16c/0x1f0 [ 2094.842386][T14043] should_fail_ex+0x512/0x640 [ 2094.842414][T14043] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2094.842443][T14043] should_failslab+0xc2/0x120 [ 2094.842463][T14043] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2094.842483][T14043] ? __d_alloc+0x32/0xae0 [ 2094.842510][T14043] __d_alloc+0x32/0xae0 [ 2094.842535][T14043] d_alloc_pseudo+0x1c/0xc0 [ 2094.842561][T14043] alloc_file_pseudo+0xcf/0x230 [ 2094.842588][T14043] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2094.842614][T14043] ? _raw_spin_unlock+0x28/0x50 [ 2094.842636][T14043] ? alloc_fd+0x471/0x7d0 [ 2094.842658][T14043] __anon_inode_getfile+0xe8/0x280 [ 2094.842684][T14043] anon_inode_getfd+0x52/0xb0 [ 2094.842708][T14043] __x64_sys_fsopen+0x18b/0x240 [ 2094.842733][T14043] do_syscall_64+0xcd/0x4c0 [ 2094.842760][T14043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2094.842778][T14043] RIP: 0033:0x7f7ee678eb69 [ 2094.842791][T14043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2094.842808][T14043] RSP: 002b:00007f7ee766d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 2094.842825][T14043] RAX: ffffffffffffffda RBX: 00007f7ee69b5fa0 RCX: 00007f7ee678eb69 [ 2094.842836][T14043] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000001c0 [ 2094.842847][T14043] RBP: 00007f7ee766d090 R08: 0000000000000000 R09: 0000000000000000 [ 2094.842858][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2094.842867][T14043] R13: 0000000000000001 R14: 00007f7ee69b5fa0 R15: 00007fffdd793d28 [ 2094.842891][T14043] [ 2095.060765][T13502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2095.079052][T13502] 8021q: adding VLAN 0 to HW filter on device team0 [ 2095.117557][T13502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2095.128483][T13502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2095.240271][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 2095.247499][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2095.446633][ T977] usbhid 5-1:0.0: can't add hid device: -71 [ 2095.472300][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 2095.479484][ T6728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2095.484923][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2095.555922][ T977] usb 5-1: USB disconnect, device number 48 [ 2096.137825][T16727] Bluetooth: hci1: command tx timeout [ 2096.169988][ T30] audit: type=1800 audit(1754160955.528:2065): pid=14066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.6250" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 2096.330542][T13502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2096.507737][T13502] veth0_vlan: entered promiscuous mode [ 2096.519215][T13502] veth1_vlan: entered promiscuous mode [ 2096.572184][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2096.629024][T13502] veth0_macvtap: entered promiscuous mode [ 2096.735265][ T5910] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2096.804381][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 2096.826057][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2096.826284][T14086] FAULT_INJECTION: forcing a failure. [ 2096.826284][T14086] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.835409][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.855258][T14086] CPU: 0 UID: 0 PID: 14086 Comm: syz.4.6256 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2096.855285][T14086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2096.855294][T14086] Call Trace: [ 2096.855300][T14086] [ 2096.855307][T14086] dump_stack_lvl+0x16c/0x1f0 [ 2096.855336][T14086] should_fail_ex+0x512/0x640 [ 2096.855365][T14086] should_failslab+0xc2/0x120 [ 2096.855389][T14086] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2096.855406][T14086] ? skb_clone+0x190/0x3f0 [ 2096.855432][T14086] skb_clone+0x190/0x3f0 [ 2096.855455][T14086] netlink_deliver_tap+0xabd/0xd30 [ 2096.855483][T14086] netlink_dump+0x881/0xd30 [ 2096.855507][T14086] ? __pfx_netlink_dump+0x10/0x10 [ 2096.855529][T14086] ? __pfx___mutex_lock+0x10/0x10 [ 2096.855568][T14086] __netlink_dump_start+0x6d6/0x990 [ 2096.855594][T14086] vsock_diag_handler_dump+0x1a8/0x240 [ 2096.855618][T14086] ? __pfx_vsock_diag_handler_dump+0x10/0x10 [ 2096.855642][T14086] ? __pfx_vsock_diag_dump+0x10/0x10 [ 2096.855667][T14086] ? sock_diag_lock_handler+0x10f/0x2e0 [ 2096.855693][T14086] sock_diag_rcv_msg+0x435/0x790 [ 2096.855714][T14086] netlink_rcv_skb+0x155/0x420 [ 2096.855737][T14086] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 2096.855758][T14086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2096.855790][T14086] ? netlink_deliver_tap+0x1ae/0xd30 [ 2096.855817][T14086] netlink_unicast+0x5aa/0x870 [ 2096.855843][T14086] ? __pfx_netlink_unicast+0x10/0x10 [ 2096.855866][T14086] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2096.855895][T14086] netlink_sendmsg+0x8d1/0xdd0 [ 2096.855922][T14086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2096.855953][T14086] ____sys_sendmsg+0xa98/0xc70 [ 2096.855971][T14086] ? copy_msghdr_from_user+0x10a/0x160 [ 2096.855993][T14086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2096.856020][T14086] ___sys_sendmsg+0x134/0x1d0 [ 2096.856043][T14086] ? __pfx____sys_sendmsg+0x10/0x10 [ 2096.856085][T14086] ? __mutex_unlock_slowpath+0x80/0x800 [ 2096.856114][T14086] __sys_sendmsg+0x16d/0x220 [ 2096.856136][T14086] ? __pfx___sys_sendmsg+0x10/0x10 [ 2096.856173][T14086] do_syscall_64+0xcd/0x4c0 [ 2096.856197][T14086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.856214][T14086] RIP: 0033:0x7f022cf8eb69 [ 2096.856228][T14086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2096.856242][T14086] RSP: 002b:00007f022dee1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2096.856259][T14086] RAX: ffffffffffffffda RBX: 00007f022d1b5fa0 RCX: 00007f022cf8eb69 [ 2096.856269][T14086] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2096.856279][T14086] RBP: 00007f022dee1090 R08: 0000000000000000 R09: 0000000000000000 [ 2096.856292][T14086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.856301][T14086] R13: 0000000000000000 R14: 00007f022d1b5fa0 R15: 00007ffe42317c78 [ 2096.856323][T14086] [ 2096.884486][T13502] veth1_macvtap: entered promiscuous mode [ 2097.054213][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 2097.151189][ T24] usb 4-1: Product: syz [ 2097.155433][ T24] usb 4-1: Manufacturer: syz [ 2097.160160][ T24] usb 4-1: SerialNumber: syz [ 2097.257010][ T24] usb 4-1: config 0 descriptor?? [ 2097.389310][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2097.439484][ T24] usb 4-1: setting power ON [ 2097.444193][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 2097.453622][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2097.464938][ T5910] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2097.474201][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2097.484614][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.494551][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2097.503015][ T24] usb 4-1: media controller created [ 2097.508906][ T5910] usb 1-1: config 0 descriptor?? [ 2097.552926][T13502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2097.586630][T13502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2097.592572][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2097.602345][ T6127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.637647][ T6127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.642441][ T24] usb 4-1: selecting invalid altsetting 6 [ 2097.653033][ T24] usb 4-1: digital interface selection failed (-22) [ 2097.660846][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2097.688421][ T6127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.702776][ T24] usb 4-1: setting power OFF [ 2097.707590][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 2097.712609][ T6127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.734293][ T5910] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2097.748240][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2097.760604][ T24] (NULL device *): no alternate interface [ 2097.795531][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.805855][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2097.829071][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2097.849244][ T24] usb 4-1: USB disconnect, device number 99 [ 2097.871061][T10044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.882623][T10044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.215875][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.992928][T14147] overlayfs: failed to resolve './bus': -2 [ 2099.493162][ T5910] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2099.546884][T14160] wg1 speed is unknown, defaulting to 1000 [ 2099.553514][T14160] lo speed is unknown, defaulting to 1000 [ 2099.602886][T30916] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2099.672918][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 2099.684320][ T5910] usb 5-1: config 252 interface 0 has no altsetting 0 [ 2099.692327][ T5910] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2099.714390][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.766055][T30916] usb 4-1: Using ep0 maxpacket: 16 [ 2099.780828][ T5910] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2099.784801][T30916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.800414][ T5910] pvrusb2: ********** [ 2099.809980][T30916] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2099.810960][ T5910] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2099.835000][T30916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.848205][T30916] usb 4-1: config 0 descriptor?? [ 2099.849247][ T5910] pvrusb2: Important functionality might not be entirely working. [ 2099.873866][ T5910] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2099.895900][ T5910] pvrusb2: ********** [ 2099.911737][ T5910] usb 5-1: selecting invalid altsetting 0 [ 2099.926823][ T2337] pvrusb2: Invalid write control endpoint [ 2100.368249][ T30] audit: type=1800 audit(1754160959.921:2066): pid=14198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6264" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2100.675208][ T2337] pvrusb2: Invalid write control endpoint [ 2100.681218][ T5931] IPVS: starting estimator thread 0... [ 2100.688106][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2100.697870][ T5959] usb 5-1: USB disconnect, device number 49 [ 2100.698422][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2100.712368][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2100.723190][ T2337] pvrusb2: Device being rendered inoperable [ 2100.729345][ T2337] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2100.741902][ T977] usb 1-1: USB disconnect, device number 47 [ 2100.785054][T14200] IPVS: using max 36 ests per chain, 86400 per kthread [ 2100.804139][ T2337] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2100.875567][ T2337] pvrusb2: Attached sub-driver cx25840 [ 2100.881090][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2101.004238][T14202] netlink: 'syz.5.6265': attribute type 17 has an invalid length. [ 2101.007696][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2101.819916][T14249] SELinux: failed to load policy [ 2102.304104][T30916] usbhid 4-1:0.0: can't add hid device: -71 [ 2102.408077][T31364] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2102.408154][T30916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2102.616057][T14258] fuse: Bad value for 'fd' [ 2102.627266][T14262] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6270'. [ 2102.658668][T30916] usb 4-1: USB disconnect, device number 100 [ 2102.831536][T31364] usb 1-1: Using ep0 maxpacket: 8 [ 2102.845670][T31364] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2102.874905][T14276] FAULT_INJECTION: forcing a failure. [ 2102.874905][T14276] name failslab, interval 1, probability 0, space 0, times 0 [ 2102.888366][T14276] CPU: 0 UID: 0 PID: 14276 Comm: syz.4.6273 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2102.888393][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2102.888403][T14276] Call Trace: [ 2102.888407][T14276] [ 2102.888412][T14276] dump_stack_lvl+0x16c/0x1f0 [ 2102.888434][T14276] should_fail_ex+0x512/0x640 [ 2102.888451][T14276] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2102.888470][T14276] should_failslab+0xc2/0x120 [ 2102.888483][T14276] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2102.888505][T14276] ? get_mountpoint+0x166/0x4d0 [ 2102.888524][T14276] get_mountpoint+0x166/0x4d0 [ 2102.888540][T14276] do_lock_mount+0x248/0x5a0 [ 2102.888554][T14276] ? __pfx_do_lock_mount+0x10/0x10 [ 2102.888565][T14276] ? do_raw_spin_unlock+0x172/0x230 [ 2102.888578][T14276] ? ktime_get_real_seconds+0x9/0x20 [ 2102.888593][T14276] ? mnt_warn_timestamp_expiry+0x14d/0x5e0 [ 2102.888612][T14276] path_mount+0x1b3e/0x1fd0 [ 2102.888628][T14276] ? __pfx_path_mount+0x10/0x10 [ 2102.888645][T14276] ? kmem_cache_free+0x185/0x4d0 [ 2102.888658][T14276] ? putname+0x154/0x1a0 [ 2102.888674][T14276] ? __x64_sys_mount+0x28d/0x310 [ 2102.888687][T14276] __x64_sys_mount+0x28d/0x310 [ 2102.888701][T14276] ? __pfx___x64_sys_mount+0x10/0x10 [ 2102.888720][T14276] do_syscall_64+0xcd/0x4c0 [ 2102.888738][T14276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2102.888749][T14276] RIP: 0033:0x7f022cf8eb69 [ 2102.888759][T14276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2102.888770][T14276] RSP: 002b:00007f022dec0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2102.888781][T14276] RAX: ffffffffffffffda RBX: 00007f022d1b6080 RCX: 00007f022cf8eb69 [ 2102.888789][T14276] RDX: 0000200000000180 RSI: 0000200000002280 RDI: 0000000000000000 [ 2102.888795][T14276] RBP: 00007f022dec0090 R08: 0000000000000000 R09: 0000000000000000 [ 2102.888802][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2102.888808][T14276] R13: 0000000000000000 R14: 00007f022d1b6080 R15: 00007ffe42317c78 [ 2102.888822][T14276] [ 2103.299871][T31364] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2103.402927][T31364] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2103.445709][T31364] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2103.637684][T14281] netlink: 'syz.1.6276': attribute type 21 has an invalid length. [ 2103.645854][T14281] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6276'. [ 2103.655417][T14281] netlink: 'syz.1.6276': attribute type 4 has an invalid length. [ 2103.663400][T14281] netlink: 'syz.1.6276': attribute type 3 has an invalid length. [ 2103.671544][T14281] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6276'. [ 2103.897683][T31364] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2103.947687][T31364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.794042][T14290] 9pnet: Could not find request transport: f [ 2104.915575][T31364] usb 1-1: usb_control_msg returned -71 [ 2104.925633][T31364] usbtmc 1-1:16.0: can't read capabilities [ 2104.996326][T31364] usb 1-1: USB disconnect, device number 48 [ 2105.470232][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 2106.409606][ T30] audit: type=1400 audit(1754160966.154:2067): avc: denied { view } for pid=14332 comm="syz.0.6284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2107.044503][T14346] wg1 speed is unknown, defaulting to 1000 [ 2107.063892][T14346] lo speed is unknown, defaulting to 1000 [ 2107.147646][T21225] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2107.379491][T21225] usb 6-1: Using ep0 maxpacket: 8 [ 2107.387907][T21225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2107.411024][T21225] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2107.598275][T21225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.622717][T21225] usb 6-1: config 0 descriptor?? [ 2107.863205][T21225] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2108.111369][T14388] SELinux: failed to load policy [ 2108.778175][T14394] overlayfs: failed to resolve './bus': -2 [ 2108.855823][T14390] syz.1.6290: attempt to access beyond end of device [ 2108.855823][T14390] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2109.018203][ T5959] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2109.224288][T21225] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 2109.234050][T14407] syz.0.6292: attempt to access beyond end of device [ 2109.234050][T14407] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2109.279446][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 2109.291941][ T5959] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2109.313445][ T5959] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2109.325876][ T5959] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2109.446050][ T5959] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2109.471647][T21225] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2109.487879][T21225] usb 2-1: config 0 has no interface number 0 [ 2109.494096][T21225] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2109.986144][T21225] usb 2-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 2110.003007][T21225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.016637][T21225] usb 2-1: Product: syz [ 2110.026314][ T5959] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2110.037614][T21225] usb 2-1: Manufacturer: syz [ 2110.048783][T21225] usb 2-1: SerialNumber: syz [ 2110.053637][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.073932][ T977] usb 6-1: USB disconnect, device number 61 [ 2110.108701][T21225] usb 2-1: config 0 descriptor?? [ 2110.163134][T14390] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2110.224747][T21225] usb-storage 2-1:0.132: USB Mass Storage device detected [ 2110.250178][T21225] usb-storage 2-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 2110.329684][ T5959] usb 4-1: GET_CAPABILITIES returned 0 [ 2110.339756][ T5959] usbtmc 4-1:16.0: can't read capabilities [ 2110.369753][T14436] 9pnet_fd: Insufficient options for proto=fd [ 2110.624419][T14449] FAULT_INJECTION: forcing a failure. [ 2110.624419][T14449] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.637367][T14449] CPU: 1 UID: 0 PID: 14449 Comm: syz.5.6295 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2110.637394][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2110.637404][T14449] Call Trace: [ 2110.637411][T14449] [ 2110.637422][T14449] dump_stack_lvl+0x16c/0x1f0 [ 2110.637452][T14449] should_fail_ex+0x512/0x640 [ 2110.637483][T14449] should_failslab+0xc2/0x120 [ 2110.637503][T14449] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2110.637523][T14449] ? skb_clone+0x190/0x3f0 [ 2110.637552][T14449] skb_clone+0x190/0x3f0 [ 2110.637577][T14449] netlink_deliver_tap+0xabd/0xd30 [ 2110.637608][T14449] netlink_unicast+0x71f/0x870 [ 2110.637637][T14449] ? __pfx_netlink_unicast+0x10/0x10 [ 2110.637669][T14449] ? netlink_ack_tlv_len+0x219/0x290 [ 2110.637694][T14449] netlink_ack+0x696/0xb80 [ 2110.637729][T14449] netlink_rcv_skb+0x332/0x420 [ 2110.637754][T14449] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2110.637783][T14449] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2110.637807][T14449] ? rcu_is_watching+0x12/0xc0 [ 2110.637847][T14449] netlink_unicast+0x5aa/0x870 [ 2110.637877][T14449] ? __pfx_netlink_unicast+0x10/0x10 [ 2110.637905][T14449] ? security_netlink_send+0x13/0x210 [ 2110.637929][T14449] netlink_sendmsg+0x8d1/0xdd0 [ 2110.637960][T14449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2110.637996][T14449] ____sys_sendmsg+0xa98/0xc70 [ 2110.638016][T14449] ? copy_msghdr_from_user+0x10a/0x160 [ 2110.638040][T14449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2110.638071][T14449] ___sys_sendmsg+0x134/0x1d0 [ 2110.638097][T14449] ? __pfx____sys_sendmsg+0x10/0x10 [ 2110.638154][T14449] __sys_sendmsg+0x16d/0x220 [ 2110.638178][T14449] ? __pfx___sys_sendmsg+0x10/0x10 [ 2110.638220][T14449] do_syscall_64+0xcd/0x4c0 [ 2110.638248][T14449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2110.638266][T14449] RIP: 0033:0x7f6ba338eb69 [ 2110.638281][T14449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2110.638297][T14449] RSP: 002b:00007f6ba414f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2110.638314][T14449] RAX: ffffffffffffffda RBX: 00007f6ba35b6160 RCX: 00007f6ba338eb69 [ 2110.638326][T14449] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 2110.638336][T14449] RBP: 00007f6ba414f090 R08: 0000000000000000 R09: 0000000000000000 [ 2110.638347][T14449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2110.638380][T14449] R13: 0000000000000000 R14: 00007f6ba35b6160 R15: 00007fffb98f49c8 [ 2110.638406][T14449] [ 2110.921074][T21225] usb 4-1: USB disconnect, device number 101 [ 2111.245665][ T30] audit: type=1400 audit(1754160970.996:2068): avc: denied { mounton } for pid=14458 comm="syz.4.6296" path="/28/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 2112.236487][T14460] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2112.243030][T14460] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2112.284644][ T5910] usb 2-1: USB disconnect, device number 92 [ 2112.296063][T14460] vhci_hcd vhci_hcd.0: Device attached [ 2112.301671][T14461] vhci_hcd: connection closed [ 2112.312732][ T1134] vhci_hcd: stop threads [ 2112.323884][ T1134] vhci_hcd: release socket [ 2112.330539][ T1134] vhci_hcd: disconnect device [ 2112.546361][ T5931] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2112.726300][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 2112.739453][ T5931] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2112.987904][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.998389][ T5931] usb 6-1: config 0 has no interfaces? [ 2113.016720][ T5931] usb 6-1: string descriptor 0 read error: -22 [ 2113.034488][ T5931] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 2113.053548][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.068765][ T5931] usb 6-1: config 0 descriptor?? [ 2113.395926][ T5910] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 2113.429640][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.529117][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.577223][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2113.595947][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2113.615813][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2113.628770][ T5910] usb 2-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 2113.636392][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.638846][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.659317][ T5910] usb 2-1: config 0 descriptor?? [ 2113.763909][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.809755][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2113.825384][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2113.835192][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2113.846672][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2113.857408][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2113.905007][ T5910] usbhid 2-1:0.0: can't add hid device: -71 [ 2113.917802][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2113.940264][ T5910] usb 2-1: USB disconnect, device number 93 [ 2113.955101][T14519] wg1 speed is unknown, defaulting to 1000 [ 2113.966242][ T59] bridge_slave_1: left allmulticast mode [ 2113.971930][ T59] bridge_slave_1: left promiscuous mode [ 2113.980717][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.990325][ T59] bridge_slave_0: left allmulticast mode [ 2113.999151][ T59] bridge_slave_0: left promiscuous mode [ 2114.006776][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.953201][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2114.965458][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2114.979464][ T59] bond0 (unregistering): Released all slaves [ 2115.004810][T14519] lo speed is unknown, defaulting to 1000 [ 2115.592623][ T24] usb 6-1: USB disconnect, device number 62 [ 2115.956619][ T5859] Bluetooth: hci4: command tx timeout [ 2117.019323][T14583] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6308'. [ 2117.083673][T14583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2117.512413][ T59] hsr_slave_0: left promiscuous mode [ 2117.619153][ T59] hsr_slave_1: left promiscuous mode [ 2117.645252][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2117.665397][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2117.798568][ T30] audit: type=1800 audit(1754160977.479:2069): pid=14684 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6313" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2117.845323][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2117.879552][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2117.928617][ T59] veth1_macvtap: left promiscuous mode [ 2117.934784][ T59] veth0_macvtap: left promiscuous mode [ 2117.942766][ T59] veth1_vlan: left promiscuous mode [ 2117.948948][ T59] veth0_vlan: left promiscuous mode [ 2118.033799][ T5859] Bluetooth: hci4: command tx timeout [ 2120.109416][ T59] team0 (unregistering): Port device team_slave_1 removed [ 2120.117202][ T5859] Bluetooth: hci4: command tx timeout [ 2120.182118][ T59] team0 (unregistering): Port device team_slave_0 removed [ 2120.394606][ T30] audit: type=1400 audit(1754160980.151:2070): avc: denied { read } for pid=14704 comm="syz.5.6318" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2120.419929][ T30] audit: type=1400 audit(1754160980.151:2071): avc: denied { open } for pid=14704 comm="syz.5.6318" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2120.444402][ T30] audit: type=1400 audit(1754160980.151:2072): avc: denied { write } for pid=14704 comm="syz.5.6318" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2120.705631][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2120.872521][T14711] FAULT_INJECTION: forcing a failure. [ 2120.872521][T14711] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.885605][T14711] CPU: 0 UID: 0 PID: 14711 Comm: syz.0.6319 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2120.885633][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2120.885644][T14711] Call Trace: [ 2120.885651][T14711] [ 2120.885658][T14711] dump_stack_lvl+0x16c/0x1f0 [ 2120.885691][T14711] should_fail_ex+0x512/0x640 [ 2120.885718][T14711] ? fs_reclaim_acquire+0xae/0x150 [ 2120.885746][T14711] should_failslab+0xc2/0x120 [ 2120.885768][T14711] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2120.885794][T14711] ? do_raw_spin_lock+0x12c/0x2b0 [ 2120.885816][T14711] ? inode_doinit_use_xattr+0x54/0x410 [ 2120.885839][T14711] inode_doinit_use_xattr+0x54/0x410 [ 2120.885862][T14711] inode_doinit_with_dentry+0x51e/0x12e0 [ 2120.885892][T14711] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 2120.885922][T14711] selinux_d_instantiate+0x26/0x30 [ 2120.885944][T14711] security_d_instantiate+0x142/0x1a0 [ 2120.885968][T14711] d_splice_alias_ops+0x92/0x840 [ 2120.886001][T14711] ovl_lookup+0xeee/0x21a0 [ 2120.886032][T14711] ? __pfx_ovl_lookup+0x10/0x10 [ 2120.886065][T14711] ? do_raw_spin_lock+0x12c/0x2b0 [ 2120.886090][T14711] ? do_raw_spin_unlock+0x172/0x230 [ 2120.886111][T14711] ? _raw_spin_unlock+0x28/0x50 [ 2120.886139][T14711] lookup_one_qstr_excl+0x1d1/0x250 [ 2120.886164][T14711] ? mnt_want_write+0x161/0x450 [ 2120.886183][T14711] do_rmdir+0x245/0x3c0 [ 2120.886203][T14711] ? strncpy_from_user+0xa6/0x2e0 [ 2120.886228][T14711] ? __pfx_do_rmdir+0x10/0x10 [ 2120.886253][T14711] ? strncpy_from_user+0x14b/0x2e0 [ 2120.886286][T14711] ? getname_flags.part.0+0x1c5/0x550 [ 2120.886316][T14711] __x64_sys_rmdir+0xc5/0x110 [ 2120.886337][T14711] do_syscall_64+0xcd/0x4c0 [ 2120.886366][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.886386][T14711] RIP: 0033:0x7f033778eb69 [ 2120.886401][T14711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2120.886419][T14711] RSP: 002b:00007f03385a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 2120.886438][T14711] RAX: ffffffffffffffda RBX: 00007f03379b6080 RCX: 00007f033778eb69 [ 2120.886450][T14711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 2120.886461][T14711] RBP: 00007f03385a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2120.886472][T14711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2120.886483][T14711] R13: 0000000000000000 R14: 00007f03379b6080 R15: 00007fff36f9eae8 [ 2120.886508][T14711] [ 2121.002224][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 2122.070515][ T24] usb 6-1: config 252 has an invalid interface number: 165 but max is 0 [ 2122.082344][T14519] chnl_net:caif_netlink_parms(): no params data found [ 2122.089263][ T24] usb 6-1: config 252 has no interface number 0 [ 2122.101536][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 2122.129269][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.153999][ T24] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 2122.164820][ T24] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 2122.191919][ T5859] Bluetooth: hci4: command tx timeout [ 2122.402272][T14519] bridge0: port 1(bridge_slave_0) entered blocking state [ 2122.462554][T14519] bridge0: port 1(bridge_slave_0) entered disabled state [ 2122.466644][T23065] usb 6-1: USB disconnect, device number 63 [ 2122.480219][T14519] bridge_slave_0: entered allmulticast mode [ 2122.494084][T14519] bridge_slave_0: entered promiscuous mode [ 2122.507354][T14519] bridge0: port 2(bridge_slave_1) entered blocking state [ 2122.515519][T14519] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.526615][T14519] bridge_slave_1: entered allmulticast mode [ 2122.540354][T14519] bridge_slave_1: entered promiscuous mode [ 2122.581450][T30916] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2122.986453][T14519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2123.018920][T14519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2123.041173][T30916] usb 2-1: Using ep0 maxpacket: 8 [ 2123.048067][T30916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2123.071481][T30916] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2123.081084][T30916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.206663][T30916] usb 2-1: config 0 descriptor?? [ 2123.209567][T14519] team0: Port device team_slave_0 added [ 2123.249935][T14519] team0: Port device team_slave_1 added [ 2123.523060][T30916] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2123.930752][T23065] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2123.931909][T14519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2123.951139][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.987599][T14519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2124.004845][T14519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2124.012079][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2124.038313][T14519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2124.101761][T23065] usb 6-1: Using ep0 maxpacket: 16 [ 2124.116898][T23065] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 2124.127686][T23065] usb 6-1: config 0 has no interface number 0 [ 2124.134426][T23065] usb 6-1: config 0 interface 18 has no altsetting 0 [ 2124.147821][T23065] usb 6-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=7a.1a [ 2124.158060][T23065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.196514][T23065] usb 6-1: Product: syz [ 2124.205724][T14519] hsr_slave_0: entered promiscuous mode [ 2124.375728][T23065] usb 6-1: Manufacturer: syz [ 2124.388571][T14912] overlay: Unknown parameter 'uid<00000000000000000000' [ 2124.411357][T14519] hsr_slave_1: entered promiscuous mode [ 2124.411501][T23065] usb 6-1: SerialNumber: syz [ 2124.419288][T14519] debugfs: 'hsr0' already exists in 'hsr' [ 2124.534172][T14519] Cannot create hsr debugfs directory [ 2124.550958][T23065] usb 6-1: config 0 descriptor?? [ 2124.557755][T23065] ums-sddr55 6-1:0.18: USB Mass Storage device detected [ 2125.128080][T14519] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2125.171871][T14519] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2125.196889][T14519] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2125.208627][T14845] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6324'. [ 2125.227462][ T5959] usb 6-1: USB disconnect, device number 64 [ 2125.463891][T14519] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2125.579658][T15013] syz.0.6327: attempt to access beyond end of device [ 2125.579658][T15013] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2125.594163][ T5959] usb 2-1: USB disconnect, device number 94 [ 2126.280109][ T977] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2126.361865][T30916] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 2126.401406][T14519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2126.423854][T14519] 8021q: adding VLAN 0 to HW filter on device team0 [ 2126.450490][T14519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2126.466095][T14519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2126.536567][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state [ 2126.543667][ T6127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2126.551421][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 2126.568562][T30916] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 2126.614436][ T977] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2126.614541][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state [ 2126.628144][T30916] usb 1-1: config 0 has no interface number 0 [ 2126.630646][ T6127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2126.649983][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.675534][ T977] usb 4-1: Product: syz [ 2126.688023][ T977] usb 4-1: Manufacturer: syz [ 2126.694284][T30916] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2126.711291][ T977] usb 4-1: SerialNumber: syz [ 2126.743369][ T977] usb 4-1: config 0 descriptor?? [ 2126.788062][ T977] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2126.796409][T30916] usb 1-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 2126.816421][T30916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.829755][ T977] usb 4-1: setting power ON [ 2126.834328][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 2126.840278][T30916] usb 1-1: Product: syz [ 2126.846545][T30916] usb 1-1: Manufacturer: syz [ 2126.854898][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2126.864393][T30916] usb 1-1: SerialNumber: syz [ 2126.877423][T30916] usb 1-1: config 0 descriptor?? [ 2126.885567][ T977] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2126.929271][ T5931] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2126.965292][T15013] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2126.977996][T30916] usb-storage 1-1:0.132: USB Mass Storage device detected [ 2127.031742][ T977] usb 4-1: media controller created [ 2127.445300][T30916] usb-storage 1-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 2127.458350][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 2127.473848][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.546988][ T5931] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2127.557466][T14519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2127.564453][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2127.569936][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2127.610480][ T977] usb 4-1: selecting invalid altsetting 6 [ 2127.627613][ T5931] usb 2-1: SerialNumber: syz [ 2127.640084][ T977] usb 4-1: digital interface selection failed (-22) [ 2127.744823][ T5931] usb 2-1: config 0 descriptor?? [ 2127.752341][ T977] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2127.780387][ T5931] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 2127.791556][ T977] usb 4-1: setting power OFF [ 2127.808859][ T5931] usb 2-1: No valid video chain found. [ 2127.817042][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 2127.833985][ T977] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2127.856771][ T977] (NULL device *): no alternate interface [ 2127.900765][ T977] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2128.790629][ T24] usb 2-1: USB disconnect, device number 95 [ 2128.822186][ T5959] usb 1-1: USB disconnect, device number 49 [ 2128.957649][T21225] usb 4-1: USB disconnect, device number 102 [ 2129.046960][T14519] veth0_vlan: entered promiscuous mode [ 2129.069363][T14519] veth1_vlan: entered promiscuous mode [ 2129.093947][T15119] netlink: 'syz.5.6334': attribute type 30 has an invalid length. [ 2129.259666][T14519] veth0_macvtap: entered promiscuous mode [ 2129.270883][T14519] veth1_macvtap: entered promiscuous mode [ 2129.289189][T14519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2129.312401][T14519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2129.854351][ T1134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2129.892894][ T1134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2129.914734][ T1134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.087320][ T1134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.119315][ T30] audit: type=1400 audit(1754160989.875:2073): avc: denied { mount } for pid=15131 comm="syz.1.6337" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2130.482578][T15138] tipc: Enabling of bearer rejected, failed to enable media [ 2130.604549][ T5156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2130.726922][ T5156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2130.876136][T19453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2130.884608][T19453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2132.911291][T15167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2133.102021][T15177] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 2133.547105][T15192] syz.6.6345: attempt to access beyond end of device [ 2133.547105][T15192] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2134.325809][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 2134.389093][T21225] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2134.515021][T15211] tipc: Enabling of bearer rejected, failed to enable media [ 2134.515989][ T24] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 2134.575780][T21225] usb 1-1: Using ep0 maxpacket: 8 [ 2134.603068][T21225] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2134.651511][T21225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.659783][ T24] usb 7-1: config 0 has no interface number 0 [ 2134.675241][T21225] usb 1-1: Product: syz [ 2134.679426][T21225] usb 1-1: Manufacturer: syz [ 2134.684301][ T24] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2134.704158][T21225] usb 1-1: SerialNumber: syz [ 2134.721080][ T24] usb 7-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 2134.736052][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.768921][T21225] usb 1-1: config 0 descriptor?? [ 2134.776559][ T24] usb 7-1: Product: syz [ 2134.784098][ T24] usb 7-1: Manufacturer: syz [ 2134.797225][T21225] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2134.806865][ T24] usb 7-1: SerialNumber: syz [ 2134.887689][ T24] usb 7-1: config 0 descriptor?? [ 2134.896147][T21225] usb 1-1: setting power ON [ 2134.903280][T21225] dvb-usb: bulk message failed: -22 (2/0) [ 2134.922436][T15190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2134.944864][T21225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2134.956992][ T24] usb-storage 7-1:0.132: USB Mass Storage device detected [ 2134.971644][T21225] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2134.980986][T21225] usb 1-1: media controller created [ 2135.155663][ T5959] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 2135.171184][ T24] usb-storage 7-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 2135.315956][T21225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2135.570550][ T5959] usb 6-1: device descriptor read/64, error -71 [ 2135.883857][T21225] usb 1-1: selecting invalid altsetting 6 [ 2135.890717][T21225] usb 1-1: digital interface selection failed (-22) [ 2135.899566][T21225] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2135.912073][T21225] usb 1-1: setting power OFF [ 2135.916931][T21225] dvb-usb: bulk message failed: -22 (2/0) [ 2135.922809][T21225] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2136.048391][T21225] (NULL device *): no alternate interface [ 2136.672032][T21225] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2136.749353][ T5959] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 2136.934217][ T5959] usb 6-1: device descriptor read/64, error -71 [ 2137.008156][T21225] usb 7-1: USB disconnect, device number 2 [ 2137.048912][ T30] audit: type=1400 audit(1754160996.819:2074): avc: denied { getopt } for pid=15262 comm="syz.3.6354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2137.102680][ T5959] usb usb6-port1: attempt power cycle [ 2137.196547][ T24] usb 1-1: USB disconnect, device number 50 [ 2137.464279][ T5959] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 2137.608570][ T5959] usb 6-1: device descriptor read/8, error -71 [ 2138.047585][T15280] tmpfs: Bad value for 'mpol' [ 2138.333572][ T5959] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 2138.545419][ T5959] usb 6-1: device not accepting address 68, error -71 [ 2138.577374][ T5959] usb usb6-port1: unable to enumerate USB device [ 2138.760487][T15296] tipc: Enabling of bearer rejected, failed to enable media [ 2139.071271][T15298] FAULT_INJECTION: forcing a failure. [ 2139.071271][T15298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2139.084615][T15298] CPU: 0 UID: 0 PID: 15298 Comm: syz.0.6359 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2139.084646][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2139.084657][T15298] Call Trace: [ 2139.084664][T15298] [ 2139.084670][T15298] dump_stack_lvl+0x16c/0x1f0 [ 2139.084703][T15298] should_fail_ex+0x512/0x640 [ 2139.084733][T15298] _copy_from_iter+0x29f/0x16f0 [ 2139.084755][T15298] ? __alloc_skb+0x200/0x380 [ 2139.084778][T15298] ? __pfx__copy_from_iter+0x10/0x10 [ 2139.084798][T15298] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2139.084831][T15298] netlink_sendmsg+0x829/0xdd0 [ 2139.084860][T15298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2139.084895][T15298] ____sys_sendmsg+0xa98/0xc70 [ 2139.084914][T15298] ? copy_msghdr_from_user+0x10a/0x160 [ 2139.084938][T15298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2139.084966][T15298] ___sys_sendmsg+0x134/0x1d0 [ 2139.084991][T15298] ? __pfx____sys_sendmsg+0x10/0x10 [ 2139.085040][T15298] ? __mutex_unlock_slowpath+0x80/0x800 [ 2139.085075][T15298] __sys_sendmsg+0x16d/0x220 [ 2139.085099][T15298] ? __pfx___sys_sendmsg+0x10/0x10 [ 2139.085140][T15298] do_syscall_64+0xcd/0x4c0 [ 2139.085168][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.085185][T15298] RIP: 0033:0x7f033778eb69 [ 2139.085198][T15298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2139.085214][T15298] RSP: 002b:00007f03385a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2139.085231][T15298] RAX: ffffffffffffffda RBX: 00007f03379b6080 RCX: 00007f033778eb69 [ 2139.085242][T15298] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2139.085252][T15298] RBP: 00007f03385a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2139.085262][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.085272][T15298] R13: 0000000000000000 R14: 00007f03379b6080 R15: 00007fff36f9eae8 [ 2139.085294][T15298] [ 2139.678108][T15301] netlink: 'syz.1.6362': attribute type 21 has an invalid length. [ 2139.686166][T15301] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6362'. [ 2139.695664][T15301] netlink: 'syz.1.6362': attribute type 4 has an invalid length. [ 2139.703546][T15301] netlink: 'syz.1.6362': attribute type 3 has an invalid length. [ 2139.711303][T15301] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6362'. [ 2139.980364][T15303] binder: 15302:15303 ioctl c0306201 200000000280 returned -14 [ 2140.562546][T15318] syz.1.6366: attempt to access beyond end of device [ 2140.562546][T15318] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2140.892201][ T24] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 2141.266209][ T24] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2141.276144][ T24] usb 2-1: config 0 has no interface number 0 [ 2141.380212][ T24] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2141.430346][ T24] usb 2-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 2141.439783][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.451319][ T24] usb 2-1: Product: syz [ 2141.458046][ T24] usb 2-1: Manufacturer: syz [ 2141.463237][ T24] usb 2-1: SerialNumber: syz [ 2141.474313][ T24] usb 2-1: config 0 descriptor?? [ 2141.854690][T15318] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2141.906504][ T24] usb-storage 2-1:0.132: USB Mass Storage device detected [ 2142.371627][ T5959] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2142.515581][ T24] usb-storage 2-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 2142.641410][T15362] nbd5: detected capacity change from 0 to 10 [ 2142.642544][T15376] block nbd5: Send control failed (result -89) [ 2142.655167][T15376] block nbd5: Request send failed, requeueing [ 2142.681358][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 2142.711584][T19097] block nbd5: Dead connection, failed to find a fallback [ 2142.711740][ T5859] block nbd5: Receive control failed (result -32) [ 2142.719666][T19097] block nbd5: shutting down sockets [ 2142.732912][T19097] blk_print_req_error: 6 callbacks suppressed [ 2142.732927][T19097] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.751776][T19097] buffer_io_error: 6 callbacks suppressed [ 2142.756131][T19097] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2142.800646][T15376] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.816823][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2142.856774][T15376] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2142.868930][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2142.890006][T15376] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.040255][T15376] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2143.048375][T15376] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.051146][ T5959] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 2143.073780][T15376] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2143.105798][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.124125][T15376] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.138070][T15376] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2143.154318][T15376] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.208507][T15376] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2143.219509][T15376] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.258894][T15376] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2143.261739][ T5959] usb 4-1: config 0 descriptor?? [ 2143.301822][T15376] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.322622][T15376] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2143.336317][T15376] ldm_validate_partition_table(): Disk read failed. [ 2143.343799][T15376] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.355426][T15376] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2143.381188][T15376] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.461047][T15376] Buffer I/O error on dev nbd5, logical block 0, async page read [ 2143.489447][T15376] Dev nbd5: unable to read RDB block 0 [ 2143.512952][T15376] nbd5: unable to read partition table [ 2143.590106][T15376] nbd5: partition table beyond EOD, truncated [ 2143.623055][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 2143.682154][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=4, location=4 [ 2143.694468][ T5959] playstation 0003:054C:0DF2.0034: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 2143.722585][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=3, location=3 [ 2143.756421][ T5931] usb 2-1: USB disconnect, device number 96 [ 2143.778469][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=2, location=2 [ 2143.798872][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 2143.819702][T15376] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 2143.827992][T15376] UDF-fs: Scanning with blocksize 1024 failed [ 2143.841208][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 2143.872752][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=1, location=1 [ 2143.910915][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 2143.913561][ T5959] playstation 0003:054C:0DF2.0034: Invalid reportID received, expected 9 got 184 [ 2143.929544][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 2143.960111][T15376] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 2143.974804][ T5959] playstation 0003:054C:0DF2.0034: Failed to retrieve DualSense pairing info: -22 [ 2143.984913][ T5959] playstation 0003:054C:0DF2.0034: Failed to get MAC address from DualSense [ 2143.993864][ T5959] playstation 0003:054C:0DF2.0034: Failed to create dualsense. [ 2144.017157][ T5959] playstation 0003:054C:0DF2.0034: probe with driver playstation failed with error -22 [ 2144.050764][T15376] UDF-fs: Scanning with blocksize 2048 failed [ 2144.058897][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 2144.101161][T15359] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 2144.121839][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 2144.145630][T15376] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 2144.200365][T15376] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 2144.230013][T15376] UDF-fs: Scanning with blocksize 4096 failed [ 2144.242564][T15376] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 2145.174698][ T5959] usb 4-1: USB disconnect, device number 103 [ 2145.328516][T15438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2146.239519][ T5959] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2146.449497][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 2146.464490][T15462] tipc: Enabling of bearer rejected, failed to enable media [ 2146.464966][ T5959] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2146.581115][ T5959] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2146.590332][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2146.629389][ T5959] usb 4-1: SerialNumber: syz [ 2146.654930][ T5959] usb 4-1: config 0 descriptor?? [ 2146.673811][ T5959] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 2146.680913][ T5959] usb 4-1: No valid video chain found. [ 2146.898843][T15469] tipc: Enabling of bearer rejected, failed to enable media [ 2147.262290][T15478] wg1 speed is unknown, defaulting to 1000 [ 2147.267290][ T977] usb 4-1: USB disconnect, device number 104 [ 2147.271155][T15478] lo speed is unknown, defaulting to 1000 [ 2148.465468][T15527] netlink: 'syz.6.6391': attribute type 10 has an invalid length. [ 2148.985257][T15527] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2149.782648][T15543] tipc: Enabling of bearer rejected, failed to enable media [ 2149.981556][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6401'. [ 2150.092753][T15558] vlan1: entered allmulticast mode [ 2150.098483][T15558] veth1: entered allmulticast mode [ 2151.910600][T21225] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 2151.980054][ T5910] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2152.091699][T21225] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2152.266481][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 2152.302362][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2152.315998][T21225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.342468][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2152.356149][T21225] usb 6-1: Product: syz [ 2152.367967][T21225] usb 6-1: Manufacturer: syz [ 2152.373671][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2152.383602][T21225] usb 6-1: SerialNumber: syz [ 2152.389541][ T5910] usb 1-1: SerialNumber: syz [ 2152.401663][T21225] usb 6-1: config 0 descriptor?? [ 2152.420535][ T5910] usb 1-1: config 0 descriptor?? [ 2152.443967][ T5910] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 2152.458959][ T5910] usb 1-1: No valid video chain found. [ 2152.839483][ T30] audit: type=1326 audit(1754161012.617:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.6.6410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c9d8eb69 code=0x7ffc0000 [ 2152.865355][ T30] audit: type=1326 audit(1754161012.617:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.6.6410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c9d8eb69 code=0x7ffc0000 [ 2152.889173][ T30] audit: type=1326 audit(1754161012.617:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.6.6410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c9d8eb69 code=0x7ffc0000 [ 2152.912801][ T30] audit: type=1326 audit(1754161012.617:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.6.6410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c9d8eb69 code=0x7ffc0000 [ 2152.939967][ T30] audit: type=1326 audit(1754161012.617:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15610 comm="syz.6.6410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff3c9d8eb69 code=0x7ffc0000 [ 2257.803583][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2257.810561][ C0] rcu: 1-...!: (1 GPs behind) idle=e7bc/1/0x4000000000000000 softirq=206384/206385 fqs=17 [ 2257.821932][ C0] rcu: (detected by 0, t=10502 jiffies, g=198569, q=259 ncpus=2) [ 2257.829742][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2257.829771][ C1] NMI backtrace for cpu 1 [ 2257.829783][ C1] CPU: 1 UID: 0 PID: 15612 Comm: syz.6.6410 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2257.829800][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2257.829808][ C1] RIP: 0010:rb_erase+0x60c/0x1370 [ 2257.829832][ C1] Code: c1 ea 03 80 3c 02 00 0f 85 e3 0b 00 00 48 89 19 e9 74 ff ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 ab 0b 00 00 49 8b 5d 00 48 83 fb 03 0f 86 40 01 00 00 48 b8 [ 2257.829844][ C1] RSP: 0018:ffffc90000a08d90 EFLAGS: 00000046 [ 2257.829856][ C1] RAX: dffffc0000000000 RBX: ffff888143b84340 RCX: ffff8880b8527dd0 [ 2257.829865][ C1] RDX: 1ffff11028770868 RSI: ffff8880b8527dd0 RDI: ffff888143b84350 [ 2257.829874][ C1] RBP: ffff8880b8527dd0 R08: 0000000000000006 R09: 0000000000000001 [ 2257.829883][ C1] R10: ffff888143b84340 R11: 0000000000000000 R12: ffff8880b8527dd8 [ 2257.829891][ C1] R13: ffff888143b84340 R14: 0000000000000000 R15: 0000000000000000 [ 2257.829900][ C1] FS: 00007ff3cabe76c0(0000) GS:ffff8881247c8000(0000) knlGS:0000000000000000 [ 2257.829914][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2257.829923][ C1] CR2: 000000110c2d51be CR3: 0000000044fc9000 CR4: 00000000003526f0 [ 2257.829932][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000040020 [ 2257.829940][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2257.829948][ C1] Call Trace: [ 2257.829955][ C1] [ 2257.829964][ C1] timerqueue_del+0x83/0x150 [ 2257.829978][ C1] __remove_hrtimer+0x99/0x290 [ 2257.829995][ C1] __hrtimer_run_queues+0x4f9/0xad0 [ 2257.830012][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2257.830027][ C1] ? read_tsc+0x9/0x20 [ 2257.830046][ C1] hrtimer_interrupt+0x397/0x8e0 [ 2257.830066][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 2257.830082][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2257.830100][ C1] [ 2257.830105][ C1] [ 2257.830109][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2257.830124][ C1] RIP: 0010:unwind_next_frame+0x1592/0x20a0 [ 2257.830139][ C1] Code: 49 89 c0 49 c1 e8 03 41 0f b6 14 10 49 89 f8 41 83 e0 07 44 38 c6 41 0f 9e c0 40 84 f6 40 0f 95 c6 41 84 f0 0f 85 47 08 00 00 <83> e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 30 08 00 [ 2257.830151][ C1] RSP: 0018:ffffc900055d7648 EFLAGS: 00000246 [ 2257.830161][ C1] RAX: ffffffff91f61d21 RBX: 0000000000000001 RCX: ffffffff91f61d1e [ 2257.830169][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff91f61d20 [ 2257.830178][ C1] RBP: ffffc900055d7700 R08: 0000000000000001 R09: 0000000000000000 [ 2257.830186][ C1] R10: 0000000000000002 R11: 00000000000a920a R12: ffffc900055d7708 [ 2257.830195][ C1] R13: ffffc900055d76b8 R14: ffffc900055d7f58 R15: ffffc900055d76ec [ 2257.830210][ C1] ? unwind_next_frame+0xd10/0x20a0 [ 2257.830224][ C1] ? do_syscall_64+0x347/0x4c0 [ 2257.830243][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2257.830261][ C1] arch_stack_walk+0x94/0x100 [ 2257.830279][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.830293][ C1] stack_trace_save+0x8e/0xc0 [ 2257.830309][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2257.830328][ C1] kasan_save_stack+0x33/0x60 [ 2257.830342][ C1] ? kasan_save_stack+0x33/0x60 [ 2257.830353][ C1] ? kasan_save_track+0x14/0x30 [ 2257.830365][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 2257.830376][ C1] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 2257.830390][ C1] ? kmemdup_noprof+0x29/0x60 [ 2257.830403][ C1] ? sidtab_sid2str_get+0x17a/0x680 [ 2257.830419][ C1] ? sidtab_entry_to_string+0x33/0x110 [ 2257.830434][ C1] ? security_sid_to_context_core+0x35c/0x640 [ 2257.830449][ C1] ? selinux_lsmprop_to_secctx+0xe4/0x1b0 [ 2257.830465][ C1] ? security_lsmprop_to_secctx+0x94/0x260 [ 2257.830481][ C1] ? audit_log_task_context+0x122/0x190 [ 2257.830500][ C1] ? audit_log_task+0x1c2/0x3f0 [ 2257.830515][ C1] ? audit_seccomp+0x79/0x290 [ 2257.830531][ C1] ? __seccomp_filter+0x7b6/0xea0 [ 2257.830548][ C1] ? __secure_computing+0x287/0x3b0 [ 2257.830565][ C1] ? syscall_trace_enter+0x89/0x240 [ 2257.830580][ C1] ? do_syscall_64+0x347/0x4c0 [ 2257.830614][ C1] kasan_save_track+0x14/0x30 [ 2257.830626][ C1] __kasan_kmalloc+0xaa/0xb0 [ 2257.830639][ C1] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 2257.830654][ C1] ? sidtab_sid2str_get+0x17a/0x680 [ 2257.830671][ C1] kmemdup_noprof+0x29/0x60 [ 2257.830684][ C1] sidtab_sid2str_get+0x17a/0x680 [ 2257.830702][ C1] sidtab_entry_to_string+0x33/0x110 [ 2257.830718][ C1] security_sid_to_context_core+0x35c/0x640 [ 2257.830734][ C1] selinux_lsmprop_to_secctx+0xe4/0x1b0 [ 2257.830751][ C1] ? __pfx_selinux_lsmprop_to_secctx+0x10/0x10 [ 2257.830767][ C1] ? map_id_range_up+0x2ce/0x3b0 [ 2257.830782][ C1] security_lsmprop_to_secctx+0x94/0x260 [ 2257.830799][ C1] audit_log_task_context+0x122/0x190 [ 2257.830818][ C1] ? __pfx_audit_log_task_context+0x10/0x10 [ 2257.830838][ C1] ? from_kuid+0x8d/0xd0 [ 2257.830851][ C1] ? __pfx_from_kuid+0x10/0x10 [ 2257.830865][ C1] ? __pfx_audit_log_start+0x10/0x10 [ 2257.830885][ C1] audit_log_task+0x1c2/0x3f0 [ 2257.830903][ C1] ? __pfx_audit_log_task+0x10/0x10 [ 2257.830918][ C1] ? __pfx_migrate_enable+0x10/0x10 [ 2257.830935][ C1] audit_seccomp+0x79/0x290 [ 2257.830953][ C1] __seccomp_filter+0x7b6/0xea0 [ 2257.830970][ C1] ? __pfx___seccomp_filter+0x10/0x10 [ 2257.830989][ C1] ? do_sys_settimeofday64+0x1e4/0x260 [ 2257.831010][ C1] ? __x64_sys_clock_settime+0x1c9/0x2a0 [ 2257.831026][ C1] __secure_computing+0x287/0x3b0 [ 2257.831045][ C1] syscall_trace_enter+0x89/0x240 [ 2257.831060][ C1] do_syscall_64+0x347/0x4c0 [ 2257.831078][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2257.831091][ C1] RIP: 0033:0x7ff3c9d8eb69 [ 2257.831103][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2257.831114][ C1] RSP: 002b:00007ff3cabe70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2257.831126][ C1] RAX: ffffffffffffffda RBX: 00007ff3c9fb5fa8 RCX: 00007ff3c9d8eb69 [ 2257.831135][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff3c9fb5fac [ 2257.831143][ C1] RBP: 00007ff3c9fb5fa0 R08: 00007ff3cabe8000 R09: 0000000000000000 [ 2257.831151][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3c9fb5fac [ 2257.831160][ C1] R13: 0000000000000000 R14: 00007fff42d5c7a0 R15: 00007fff42d5c888 [ 2257.831173][ C1] [ 2257.831765][ C0] rcu: rcu_preempt kthread starved for 10466 jiffies! g198569 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2258.468220][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2258.478177][ C0] rcu: RCU grace-period kthread stack dump: [ 2258.484044][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2258.497523][ C0] Call Trace: [ 2258.500789][ C0] [ 2258.503713][ C0] __schedule+0x1190/0x5de0 [ 2258.508223][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2258.513162][ C0] ? __pfx___schedule+0x10/0x10 [ 2258.518008][ C0] ? find_held_lock+0x2b/0x80 [ 2258.522689][ C0] ? schedule+0x2d7/0x3a0 [ 2258.527015][ C0] schedule+0xe7/0x3a0 [ 2258.531076][ C0] schedule_timeout+0x123/0x290 [ 2258.535918][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2258.541286][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2258.546568][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2258.552364][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 2258.557822][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 2258.562574][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2258.567844][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2258.573038][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2258.577960][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 2258.582798][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2258.588600][ C0] rcu_gp_kthread+0x270/0x380 [ 2258.593262][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2258.598448][ C0] ? rcu_is_watching+0x12/0xc0 [ 2258.603202][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2258.608396][ C0] ? __kthread_parkme+0x19e/0x250 [ 2258.613413][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2258.618595][ C0] kthread+0x3c5/0x780 [ 2258.622650][ C0] ? __pfx_kthread+0x10/0x10 [ 2258.627231][ C0] ? rcu_is_watching+0x12/0xc0 [ 2258.631983][ C0] ? __pfx_kthread+0x10/0x10 [ 2258.636560][ C0] ret_from_fork+0x5d7/0x6f0 [ 2258.641134][ C0] ? __pfx_kthread+0x10/0x10 [ 2258.645713][ C0] ret_from_fork_asm+0x1a/0x30 [ 2258.650478][ C0] [ 2258.653482][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2258.659785][ C0] CPU: 0 UID: 0 PID: 6728 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 2258.671572][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2258.681616][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 2258.687599][ C0] RIP: 0010:write_comp_data+0x8b/0x90 [ 2258.692957][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 50 e9 d9 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 2258.712549][ C0] RSP: 0018:ffffc9001117e860 EFLAGS: 00000293 [ 2258.718601][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe80 RCX: ffffffff81af8aa1 [ 2258.726558][ C0] RDX: ffff8880620e0000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2258.734513][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2258.742468][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 2258.750423][ C0] R13: ffffed10170a7fd1 R14: 0000000000000001 R15: 0000000000000001 [ 2258.758380][ C0] FS: 0000000000000000(0000) GS:ffff8881246c8000(0000) knlGS:0000000000000000 [ 2258.767299][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2258.773868][ C0] CR2: 00007f3f778f2b07 CR3: 0000000068408000 CR4: 00000000003526f0 [ 2258.781829][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2258.789782][ C0] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2258.797736][ C0] Call Trace: [ 2258.801000][ C0] [ 2258.803918][ C0] smp_call_function_many_cond+0xe21/0x1600 [ 2258.809805][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 2258.815170][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 2258.820369][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 2258.826695][ C0] ? lock_acquire+0x179/0x350 [ 2258.831372][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 2258.836560][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 2258.841923][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 2258.847031][ C0] flush_tlb_mm_range+0x4a0/0x17a0 [ 2258.852133][ C0] ? page_table_check_clear+0x362/0x740 [ 2258.857668][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 2258.863632][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 2258.869171][ C0] ? find_held_lock+0x2b/0x80 [ 2258.873838][ C0] ptep_clear_flush+0x136/0x180 [ 2258.878679][ C0] page_vma_mkclean_one.constprop.0+0x3b4/0x7e0 [ 2258.884917][ C0] ? __pfx_page_vma_mkclean_one.constprop.0+0x10/0x10 [ 2258.891683][ C0] page_mkclean_one+0x196/0x260 [ 2258.896526][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 2258.901894][ C0] ? __pfx___might_resched+0x10/0x10 [ 2258.907173][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 2258.912535][ C0] __rmap_walk_file+0x356/0x620 [ 2258.917383][ C0] rmap_walk_file+0x174/0x1f0 [ 2258.922056][ C0] folio_mkclean+0x251/0x3f0 [ 2258.926636][ C0] ? __pfx_folio_mkclean+0x10/0x10 [ 2258.931738][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 2258.937103][ C0] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 2258.942729][ C0] folio_clear_dirty_for_io+0x153/0x810 [ 2258.948279][ C0] mpage_submit_folio+0x84/0x2d0 [ 2258.953207][ C0] mpage_process_page_bufs+0x47c/0x8d0 [ 2258.958662][ C0] mpage_prepare_extent_to_map+0x79f/0x14d0 [ 2258.964560][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 2258.970902][ C0] ? trace_kmem_cache_alloc+0x28/0xc0 [ 2258.976263][ C0] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 2258.981886][ C0] ? ext4_init_io_end+0x24/0x170 [ 2258.986815][ C0] ext4_do_writepages+0xa11/0x3cf0 [ 2258.991922][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 2258.996867][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 2259.002419][ C0] ? ext4_writepages+0x37a/0x7d0 [ 2259.007346][ C0] ext4_writepages+0x37a/0x7d0 [ 2259.012103][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 2259.017389][ C0] ? do_writepages+0x4b7/0x600 [ 2259.022146][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 2259.027423][ C0] do_writepages+0x277/0x600 [ 2259.032010][ C0] ? __pfx_do_writepages+0x10/0x10 [ 2259.037115][ C0] ? reacquire_held_locks+0xcd/0x1f0 [ 2259.042392][ C0] ? writeback_sb_inodes+0x3b0/0xfa0 [ 2259.047671][ C0] __writeback_single_inode+0x160/0xfb0 [ 2259.053228][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 2259.059318][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2259.064519][ C0] writeback_sb_inodes+0x60d/0xfa0 [ 2259.069641][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 2259.074576][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 2259.080203][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2259.085158][ C0] ? _raw_spin_unlock+0x28/0x50 [ 2259.089999][ C0] ? move_expired_inodes+0x5a0/0x850 [ 2259.095285][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 2259.100480][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 2259.106281][ C0] ? queue_io+0x3f6/0x520 [ 2259.110602][ C0] wb_writeback+0x7f3/0xb70 [ 2259.115107][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 2259.120129][ C0] ? get_nr_dirty_inodes+0x170/0x1e0 [ 2259.125409][ C0] wb_workfn+0x8ca/0xbe0 [ 2259.129648][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2259.135446][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 2259.140210][ C0] ? rcu_is_watching+0x12/0xc0 [ 2259.144967][ C0] process_one_work+0x9cc/0x1b70 [ 2259.149906][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2259.155271][ C0] ? assign_work+0x1a0/0x250 [ 2259.159851][ C0] worker_thread+0x6c8/0xf10 [ 2259.164438][ C0] ? __kthread_parkme+0x19e/0x250 [ 2259.169457][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2259.174554][ C0] kthread+0x3c5/0x780 [ 2259.178609][ C0] ? __pfx_kthread+0x10/0x10 [ 2259.183184][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 2259.188552][ C0] ? __pfx_kthread+0x10/0x10 [ 2259.193130][ C0] ret_from_fork+0x5d7/0x6f0 [ 2259.197705][ C0] ? __pfx_kthread+0x10/0x10 [ 2259.202285][ C0] ret_from_fork_asm+0x1a/0x30 [ 2259.207050][ C0]