last executing test programs: 2m47.893525285s ago: executing program 2 (id=1682): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x1d, 0x800000000004}, &(0x7f0000bbdffc)) ioprio_get$pid(0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 2m46.775256548s ago: executing program 2 (id=1685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x4080, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x2000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2m45.567161362s ago: executing program 4 (id=1688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20049841}, 0x4008000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000a00d"]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r8 = epoll_create1(0x0) r9 = socket(0x1, 0x80802, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r10, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r10) shutdown(r9, 0x200000000000000) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r11, &(0x7f0000003ac0)={0x2020}, 0x2020) syz_open_procfs(r7, &(0x7f0000000040)='oom_score_adj\x00') sendmmsg$inet6(r9, &(0x7f00000017c0)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x1, @private0, 0xc}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000340)="0c183540099b1909d419abcd4e44cca65888809ce3d9cf70bb41f9e526be7a2713b4bd56e47541e7d782fc56304da0994ef624dcff68d6011db38a1bd63a647542b566ff01d580ab4b0add5e3b56f1b603ea00f8ceadad", 0x57}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f00000013c0)="d1bfecb05d30af", 0x7}, {&(0x7f0000001400)="bde5eb1dfad0dd611d9fb15c284b99a7934a7ea2f931ddeea2ea85322731e974e7d6093e489b89e15a482f5d00de1dea7fa57ed9aaa6f33bfa1335879c75b3852d0d22b4aae57df21478cd415219fe513a5741cbcfc753f2bf376d6131533ddf6514fb5e75c1b79e54d6412a67f6c6c265311254b78e74e8447ef7b0b94bf026b5cedc461fbed2425f77945d1509f78ccdcc9e3c3868a229a552c2fd4d47440132f77f616088fc11de73e5fb45dd3cab3f91ea21534d97365185f32be011d833f772b036d2193fe1f427ba9b42580369", 0xd0}, {&(0x7f0000001500)="4c297a8b480f879b6b7367817d74b1c016a1ddefd722a10de9170d4b0a88394fdadd003e52f43279a41d852ccfd158bbf9ba230971d66a9f622c97c92c669efc", 0x40}, {&(0x7f0000001540)="98f56b2e096ff4f8eaae53fbeb3d3f09e7d7127f4321862da2a4faad082c14f27f6a02b85ed61ae2da096ffbaa7a03b897f113aed9dcba21ac063ad24fa6414b2285b638a78b79a0351649852c157ca0f4a588036c379db242218fe3f8d388273bea5b1c91de51d41601a53931c114993f7ba4a46381110b31eb724f12c442ef2a531d823a4c6ec5eb8c8c86e052ed00ef7f74927697dfad823f8c02b68649d52f171f7551e1b2f4242e0c32c3fbec57d07a479f2aa8c9fe8866ccb3acc57afb0eb321634d339e94074d59193e8760d97c0bf04a03999cc4880e41af9499", 0xde}], 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="1400000000000000290000003400000006000000000000001400000000000000290000003e0000000010000000000000b80000000000000029000000390000001614010100000000fe800000000000000000000000000028fc020000000000000000000000000001fc000000000000000000000000000001fc000000000000000000000000000000fe8000000000000000000000000000bbfe880000000000000000000000000001fe8000000000000000000000000000aafc010000000000fe880000000000000000000000000101fe8000000000000000000000000000bb"], 0xe8}}], 0x1, 0x4040040) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$alg(r13, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) 2m45.383943349s ago: executing program 2 (id=1689): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x100, @string={0x100, 0x3, "fb93ebbf194dc63d148da0f3557804094c498587be7ad1d44eb3bbe717aec22120512f89ea21388df5ec319056fe508038373dc48997872effe4d7811c1106d3b01773fb0530a10fa25252ab64eb79081ef9747d0e1877344f300f577df60d2535880a8209c999bf39f1c521554d8bb053db4ae55e1f522bd883f2150c99667d3c3a896098c328a265d5178431ac012eeb0edc06d8293f5edeba92dc448ad75b6b1d8700926aeecd549d7a571a1f51aab6ae123106c606aa326f9faa55bbc8e97be7686eda4a594640c7cea8cf77b926b96319bd51e6638b566731ad14c99e3e903a2dfba4d5755cc7924f1d0841762c9b44371a623947a59eecab7b3fd8"}}, &(0x7f0000000600)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x6, 0x4}]}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0xf, @string={0xf, 0x3, "e8889cc040cb77b038e5d9c6cf"}}, 0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r4}, 0x0, &(0x7f00000013c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r8 = dup(r3) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) 2m45.220420942s ago: executing program 4 (id=1690): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x9, 0xffff, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000440)={&(0x7f0000000400)=[{0x7, 0x6200, 0x3d, &(0x7f0000000100)="55e11f0e7461a46f38284a1b586e7ac1fb86b7042a4e38b9e3fcb79e8ade3c6116b97751afed840e58109804fc31595162817d4f658e543a4f64b22d7d"}], 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) sched_setscheduler(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, 0x0, 0x0) setfsuid(0x0) setfsuid(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) 2m44.829348124s ago: executing program 1 (id=1694): mknod$loop(&(0x7f0000000180)='./bus\x00', 0x8, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x6000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x30) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004202, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r4, 0x2000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f00000001c0)={0x4, 0x88}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xfd85) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8050}, 0x50840) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x600100, 0x389b0d52417bb201) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7000, 0x0, 0x3) pwritev2(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="2c1eb3a743d3759f5f366d84e7734438b5536da2fccbfe00"/34, 0x22}], 0x1, 0x10001, 0x81, 0xc) listen(r5, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x4000810) socket$inet6(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) 2m44.18201674s ago: executing program 0 (id=1697): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x141000, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sock_ops, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$inet6(r5, &(0x7f0000000300)={&(0x7f0000000200)={0xa, 0x4e1c, 0x8, @private0, 0x88}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)}, {&(0x7f0000000d00)="cddf9012b1ffa0a1820715bcaa738079a4581567ab58c209f60a16d365adce8fd61d2f7f26ddb8c785b0123393c3494a0d7949f701317a8e", 0x38}, {&(0x7f0000000780)="67b7e15d62a5a22a7dae48be1cd3bae42a33332534792fcb0f090af5f75bce877f75afaa1b4422eb739dc96b5b56d2c858af4a5e5ccbc6a5662733ddbba6d3b0cf98b8a5d69245f3281b9a96cf0849d9839429452cad7e4ac1011f4d3dd06c7ab1e072a28d046ce0487dd25b7d77b70af32560e47af93c2f265e420fad8028ff16ccb07c5e73ef65707df47542eb2aafd9cc8c6114eb5c224f16cfb729c6be6f13b1a941bff44b3152153ad3cd491222d3cd9f402823bdcf43affd7d3bb69d85eb0ef3", 0xc3}, {&(0x7f0000000880)="4414ecd15bbbdc39bcae1e5b4f53da04110b516d167d6d093ee49215c641f836fe96b95dcb9b829bac0db36ad7c983df2c784b60c6736227f47c8bc269dee3bfc61f455fb921c7bae127955e8b17459a126dcc13c65919e8c6e5dcec510d3bb3f9089dfac14b5288396a47c5cceb86b6b527723efcde95b8b017071d144de1eb7dc854b1c4", 0x85}, {0x0}], 0x5}, 0x20044000) sendmmsg$sock(r7, 0x0, 0x0, 0x48094) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xfffe, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast1, @in=@multicast1, @in6=@loopback, @in=@broadcast, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in=@empty, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x13) 2m43.696996408s ago: executing program 1 (id=1698): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2000002, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) 2m43.588733174s ago: executing program 0 (id=1699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0xc3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x0, "77f68c74"}, @main=@item_012={0x1, 0x0, 0xb, "d2"}]}}, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) 2m43.504033177s ago: executing program 1 (id=1700): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r0, @ANYRES8, @ANYRESOCT=r2], 0x8c8}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_open_dev$evdev(0x0, 0xaa54, 0x8042) ioctl$UI_DEV_DESTROY(r4, 0x5502) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003d0007010080000008000000047c0000100008800c0008"], 0x24}, 0x1, 0x0, 0x0, 0x40440cd}, 0xc000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)}) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x1d, "b84bfe4ac94321fb668f9cd4c8078684567d5ced11df829bdf306e5cb2"}) r7 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sockstat\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, &(0x7f00007d0000)) close_range(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 2m43.332658437s ago: executing program 1 (id=1701): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) madvise(&(0x7f00004a7000/0x3000)=nil, 0x3000, 0xb) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mlockall(0x4) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 2m42.649639333s ago: executing program 0 (id=1704): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000008c0)=ANY=[], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[], 0x0) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m42.649236412s ago: executing program 2 (id=1705): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xff84) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000023cf6c5ded1e755fa2402eae10c91fd500c4da9f4940da3fd8f51898d6489bfa305df7e074458dc667a5a7d6407fa7a0cc5e5bbe65a4132530fc26641c79969c14c535892795fa82664db539f37fb4e7590b9ce4908034eb5be38359fcffc89c4f66f8eb61a790226e6e9e634d90b3ada9e791d4978a8b4524d88d8e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="80020000000001643fe3ffd2fe6709ebcc59f87f", @ANYRESOCT=0x0, @ANYBLOB="6be5c4ab0000000000000000b7080000010400007b8af8ff00000000bfa20038c4194062a44f000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000009b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x13, 0x4, 0x4, 0x20007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3}}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000206050000000000000000000100000005000400000000000900020073797a31000000000c0007800800064000000000050005000a000000050001004600000011000300"], 0x58}, 0x1, 0x0, 0x0, 0x44404}, 0x40040) 2m41.756533405s ago: executing program 4 (id=1707): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c00000", 0x22) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 2m41.453896506s ago: executing program 0 (id=1708): bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) mount(0x0, 0x0, 0x0, 0x8, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x102) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x4) syz_emit_vhci(0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000380)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x800000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fdatasync(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4c0a0) 2m41.224305565s ago: executing program 3 (id=1709): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000002300), 0x2, 0x101d01) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) close(r0) r3 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r3, 0x0, 0x0, 0x12142, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xef, 0xbc, &(0x7f0000000000)="d7ada1b4178098966282377eca801d894b297537ba703d302286f59a66273fc4916553618dd7e782e20a1fb5ea96f718b86fca441630434ac09301528c843f9a53a008cc3bfe77c49486c8766a9f1227b9a1a965d435b9531dd499375ef8c4fd68213cfae79f4ec660d4de33f1cff6d85e47afec85ea33719713246937ade3d10215bfa778e05c95c8638e7a3e432170fe6336e9f127e6dc94b5c9d2ac24ed83e9159134b93798615b48f2a698cf27e3e3b7de142aa32660951a37fbcfdbb3cf53dd7bd598c56be39545db147db837ff60f82029adbbaf4d7f50e38e0f2a5f3e16d9f679350219f4afcbdda788c058", &(0x7f0000000140)=""/188, 0xf, 0x0, 0x90, 0xc5, &(0x7f0000000200)="2f2ef8af9c8f3671a1d7f84cc67403c2d523f493b036f8b63d2ab67022f25f615ed93265dd5cf9a07ddbcfe6375467e45e39246403c794dc290e7e1e58c1fd2ef0524164ed1e9dde38549ef57abbd8a9c0652e855b752f5abf635c6555850b70704cfee675530f98fda82f7ee12a8f5235b96e77ece9c5d30e530bdcc2e4dc41a2118762c838f2eda29bf33df1a6dac3", &(0x7f00000002c0)="8e49763dcca56736c634f819f5a0538292af02d7d9d6d9b79dfd44d8cbbd5228d5ef35a672bf298c2aeb2a00308f23e6b68d6eaa964cf03e99c9bf4986279907ad2d22bf24a39869e610af325f177d3958db55a095870b2458c13ab36c97c3ee06fe1afe0a816774c52b224c1154f087f03baeb66173f99ae29c8c96745857fdc1171f2238401c5570a728e32338ed910efdf6db5e6f233f26a190955a4821a59f663e1592371af7ba9b455857af9e8f1f38be575df7dc3b62af9280601e32becac6f4d6d1", 0x2, 0x0, 0x8}, 0x50) 2m41.020444754s ago: executing program 3 (id=1710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20802, 0x0) socket(0x2b, 0x80801, 0x1) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) socket$inet(0x2b, 0x801, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000780)={0x3, "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"}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x19) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_INIT(r7, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) 2m40.489214532s ago: executing program 3 (id=1711): socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xf}, 0x8) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000002000000"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_open_dev$MSR(0x0, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c400"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000400)={r6, r5}) 2m40.003660902s ago: executing program 3 (id=1712): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) mkdir(&(0x7f0000000140)='./file0\x00', 0x50) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0xa77, 0x5, 0x6, 0x7ff}, {0xf96a, 0x9, 0x4, 0x9}, {0x7, 0x4, 0x8, 0x2}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, r1, 0x0) (async) close_range(r1, r1, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) (async) write(r3, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f00000001c0), 0x95) (async) write$binfmt_misc(r4, &(0x7f00000001c0), 0x95) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000440)={0x6, 0x1000000000000000}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) 2m39.692430187s ago: executing program 3 (id=1713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x1411, 0x20, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x26}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x35}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x40) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000300)=0x3ff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000300)) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0xffffffff, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, 0x0, 0x7f03) syz_open_pts(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m39.624630352s ago: executing program 1 (id=1714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f07"], 0x0}, 0x0) 2m39.234977986s ago: executing program 4 (id=1715): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000040)) 2m39.185526502s ago: executing program 2 (id=1716): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r3 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5edb, 0x8, 0x2, 0x2d6}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000806ffffffffff00000000bbbbbbbbbbbb00000002000000000000000000"], 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_WRITEV={0x2, 0x58, 0x4007, @fd_index=0x8, 0x4, &(0x7f00000016c0)=[{&(0x7f0000000200)="9fa06bf131c213e4e98da014ac5f104c467707cbe45ed7a6cc3546649d13af374c43bb6dde9551dcab5099b9a9acaeb0bb80821a77c953927beb622bcb96897b92deeec379e903181089bc48711b0b98bebd3a503e86a738ae1860273d", 0x5d}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="c7555d351ef99bc565151b5843287f7138cf70fa2fa212832a419fa0ae0a89ef5ae04909782299a045b398412871173c6a9e671d696c2d217a2c11e0a02e9bac704d5dd3404fa8bac12ed53e2ad4c5e6d7ac1c167bb573c7b71fb0e6ff69dbeb1b3272cdd7e6f0ec280520896010b71e3c5d49ff895dfd201a96ba5e3cd4964867a721d0a319f1fe1f63648b1828789f3ae8bc410f1e9512b43cc4f908c09be327de15f5a33dd4378635248c260add0d8bbaa72749de6487ef69b8d454c2f475e18f24c883e5ff92cfd85bd5225191a701a7b3d31f78caf005071bf86f3f4ba02dfc8b7b87183f293439f09a4e52cd", 0xef}, {&(0x7f0000001440)="b9e5d8bd620ab50d48e383ed386c74ba2a0958bd60bb3391abda421eb0b6bd85b365786a3eb9c2b21865847f121631cdfc4e62b58f51163ee8f036ea65a0ba8762bde77bc8b762a2769d66c6da0cd8991e21860d32468bc3f77232c54272e5cc15e34d404d935936694122a872300058015f63c54ae8df18cd9eb7f9f15900a6a4c371b9bf663c556f", 0x89}, {&(0x7f0000001500)="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", 0xfc}, {&(0x7f0000001600)="40e84c3949af1de60b5a041ad5979738fc3997f693d15c962fadad5ba3b341f88e9685a4eb5fcded56fab41866ff2b67a0dab4b1cbf3b25485c972dbc8e42d0f8292bdc9f48a2cfb26cba4769476b19c26e7cf143a2a2b687abe95ede36bb050c08477041cdd4bfa30157e063942c5d7f3cfffe47362b16b667269238c515a9adf1ab4926ddb9032dfb764cbd89d912a384bf280e531bc5d194f1f459925f7b094f81849f0969db09e", 0xa9}], 0x6, 0x2, 0x0, {0x0, r7}}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x2, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) 2m39.004474109s ago: executing program 4 (id=1717): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xb62ca000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$system_posix_acl(&(0x7f0000000240)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000c010}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) 2m39.004206539s ago: executing program 0 (id=1718): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r4, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) 2m38.540620026s ago: executing program 3 (id=1719): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380)=0x17) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r5, 0x705, &(0x7f00000000c0)=0xe6) 2m37.893945536s ago: executing program 0 (id=1720): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2m37.84079613s ago: executing program 2 (id=1721): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) r1 = memfd_secret(0x80000) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x8}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x2}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 2m37.66496219s ago: executing program 1 (id=1722): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0}) 2m37.549102472s ago: executing program 4 (id=1723): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000080)={0x0, 0x1d, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) 2m17.522720162s ago: executing program 32 (id=1720): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2m17.422524963s ago: executing program 33 (id=1722): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0}) 2m17.32680775s ago: executing program 34 (id=1721): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) r1 = memfd_secret(0x80000) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x8}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x2}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 2m17.271162863s ago: executing program 35 (id=1719): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380)=0x17) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r5, 0x705, &(0x7f00000000c0)=0xe6) 2m17.1144137s ago: executing program 36 (id=1723): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000080)={0x0, 0x1d, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) 28.62841011s ago: executing program 8 (id=2012): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x24000000) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7a, 0x95, 0x35, 0x8, 0x16ca, 0x1502, 0x1eb5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x3, 0x47, 0xa0, 0x7e, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x3, 0x4, 0x1}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x1, 0x5, 0x6}}, {{0x9, 0x5, 0x8, 0xc, 0xc005861b7e434401, 0x1, 0xc, 0x40}}]}}]}}]}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x15) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.814364101s ago: executing program 8 (id=2026): clock_adjtime(0x4, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0xc2d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3b9ac9ff, 0x2, 0x800000001, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = getpid() syz_emit_ethernet(0x32, &(0x7f0000000280)=ANY=[], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa1f08004500002400000002001190780000d178a285180000640101000000000700109078e2fd000180000000"], 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) listen(r4, 0x80) accept$netrom(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(r2, 0x1, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x4, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000d00)=ANY=[@ANYRES16=r5, @ANYRES8, @ANYBLOB="a00adb48e975fd6c6d60cbf7834130c8cc904230e586e91690e96186d50c3ccebd3b099d9a7599b354c41dd9a0cfdfe04f332f404977120aad5e9ce69c70249cdc6c69586b1ec2ffa3f3a48e586986eee60a4ef378abe8835da64fc147db68145d81e1de43a096fc7bffd576063d254a7c9ded934f86e339", @ANYRESHEX=r1, @ANYRES16=r5, @ANYRES64, @ANYBLOB="29bb9124462a770123c42d5eece392e17760ae275664a62094", @ANYRESDEC=0x0], 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x54c, 0x4, 0x0, 0x1, 0x5, 0x7, 0x7, 0x3, 0xfff, 0x1ff, 0x9a000004, 0x6, 0x1ff, 0x8, 0x2, 0x30, {0x2058, 0x8000}, 0x8, 0x6}}) 25.525281445s ago: executing program 7 (id=2028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x1c, 0x15, &(0x7f0000003300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002f40)='GPL\x00', 0x7, 0xce, &(0x7f0000002f80)=""/206, 0x100, 0x42, '\x00', 0x0, @fallback=0x15, r1, 0x8, &(0x7f0000003080)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000030c0)={0x2, 0xb, 0x4, 0x4}, 0x10, 0x0, r0, 0x0, 0x0, &(0x7f0000003140), 0x10, 0x101}, 0x94) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(0x0, 0x3c8) lchown(0x0, r2, r3) 24.96850532s ago: executing program 7 (id=2029): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'8255\x00', [0x2f00, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x8, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x3, 0x1, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x1, 0x3, 0x7, 0x5, 0x5]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x16, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002600aac5869f1089d8caffffffffffffffff0000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x1ec, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x7, 0x100000000], 0x2, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x10000, 0x0, 0x5000, 0x1000, &(0x7f0000ab7000/0x1000)=nil}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020601020000000000000000000000000900020073797a310000000005000100dada20159d525835bce4699c07000000050005000a0000000c00078008001240fffffffa10000300686173683a69702c6dffffff7f00040000000000"], 0x54}}, 0x0) 24.684270114s ago: executing program 5 (id=2031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) readahead(r1, 0x80000001, 0x2) r6 = syz_open_dev$video4linux(&(0x7f0000000740), 0x1, 0x2040) semop(0xffffffffffffffff, &(0x7f0000000680)=[{0x2, 0x70, 0x1000}], 0x1) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1000000, {0x28, 0x64, 0x2025, 0x5, 0x1, 0x0, 0x1, 0x4}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x185442, 0x1db) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r9, 0x0, 0x0}, 0x10) splice(r5, 0x0, r7, 0x0, 0x6, 0xb) r10 = socket(0x0, 0x80000, 0x2000fe) sendmmsg$alg(r10, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2) 23.814428733s ago: executing program 5 (id=2035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2b, 0x80801, 0x1) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) socket$inet(0x2b, 0x801, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000780)={0x3, "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"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x19) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) 23.507773967s ago: executing program 7 (id=2039): socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xf}, 0x8) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000002000000"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_open_dev$MSR(0x0, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000400)={r6, r5}) 22.73684818s ago: executing program 5 (id=2041): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) r3 = gettid() ioprio_get$pid(0x1, r3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) 21.881093287s ago: executing program 7 (id=2043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x1c, 0x16, &(0x7f0000003300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002f40)='GPL\x00', 0x7, 0xce, &(0x7f0000002f80)=""/206, 0x100, 0x42, '\x00', 0x0, @fallback=0x15, r1, 0x8, &(0x7f0000003080)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000030c0)={0x2, 0xb, 0x4, 0x4}, 0x10, 0x0, r0, 0x7, &(0x7f0000003100)=[r0], &(0x7f0000003140)=[{0x3, 0x5, 0x3, 0x9}, {0x3, 0x1, 0x9, 0x2}, {0x3, 0x2, 0xf, 0x4}, {0x3, 0x3, 0x6}, {0x0, 0x3, 0x7, 0x1}, {0x2, 0x4, 0x10, 0x5}, {0x1, 0x5, 0xd, 0x1}], 0x10, 0x101}, 0x94) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(0x0, 0x3c8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_submit(0x0, 0xfffffffffffffcf9, 0x0) setpriority(0x0, 0x0, 0xacf0165) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)='\a', 0x1}], 0x1}}], 0x1, 0x20004800) r6 = syz_usb_connect$cdc_ecm(0x1, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xdf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0xd, 0x0, 0x99, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, "a12339fd0487"}, {0x5, 0x24, 0x0, 0x3}, {0x9, 0x24, 0xf, 0x1, 0x2, 0x10, 0x3, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0xe, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xcdaf, 0x7, 0xc, 0x40, 0x81, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7a, 0x0, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0xf7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x5, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x5e, 0xff, 0x5, 0x40, 0x8}, 0x4a, &(0x7f0000000300)={0x5, 0xf, 0x4a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "9561c64c0ae6351186f07770ed8e1a1b"}, @ss_container_id={0x0, 0x10, 0x4, 0x8, "1671775408b01c02860981a6cf8bdbb4"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x0, 0xf4, 0x1ff, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0xa, 0x4}]}, 0x2, [{0xd5, &(0x7f00000024c0)=ANY=[@ANYBLOB="d50373252a26fbc27a16d2b663a7c3982c3ed19b6b36a61a1568c11bf47734d77f6e435c9d582d0b93e551741cf416092d3b102e104be47133e449e9b549011b7a8f7068969ada2298ee8f64ebf601c31c3c6dd1bc6b801955e73deda59dfc2552a82e7e6692a5b04dd4e1c46c917d3a276defd497c9348da78abe8dba3da061178fd545bd23910c66215e7c3a2e8bf84121979784a6686607e1988f854df5841b15473e5ed57fa42c6fa74c2479f42b060b9107b01dfda2a769f23a40ce5ee9468cebb1576bd48d430913693940753e7becd02ae4"]}, {0x4, &(0x7f0000003280)=ANY=[@ANYBLOB="0003c80663dd03eb7af03b8debc2e3d4278beb8321a24cb792ea281ab6494c0b12c95d5369956fe79162bb539349a209e4898b8818bb7124caa6c3fd1418cbc6f535a3a1b9030e8a3d230e9b5a612355939c53e1e2cc2ec3d6e05b59ab"]}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000026c0)={0x14, &(0x7f00000025c0)={0x20, 0xc, 0xfa, {0xfa, 0x3, "6446516444f7e7e595965de20f0a0607127603689407b857774a0ace09f4ecbda6dd689fb10f602746cec6c9aa268108ff4e4f4ed5879ff6a85bd4f53bbf7bdc017cb90f53df4711e16ea7eda0fcc39866c59a77461a33f008278ac3cc185c8df8ed35ab5f35b5885499d0441b6314354ba04e4438be46524b6ea66fe79db08fc063c076361d527615065840a796b36be12a129d3ef399f0765d6d07ec80db5a70d35c8f9284a0f2cefd28e4d7b8f0e3b1b1bced0461145fca2c1062c8dd700fef18f951aa1d3a2ed7d149b1041f301a7be01e63d12ba5deb0b3e7e065dcfd5cd8d85e51dc16f399710d3dafa20c3c13dcc18647dca889f6"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002800)={0x1c, &(0x7f0000002700)=ANY=[@ANYBLOB="40147a000000f4a346b0292a874f006989ae6bde805bdf752eca0cbff68cdf7a9df17d96ea40116797ce7f4b99356cd3d5bc865da0b8a5222c360800000000000000015f7848adc91ca31e4f0b0e75de83c514e54e257bb3488789bd556218b70f9a9d16e68a76d14935331ea81f8c78240ef662e76f63c6d3e5360428644dca"], &(0x7f0000002780)={0x0, 0xa, 0x1}, &(0x7f00000027c0)={0x0, 0x8, 0x1, 0x5}}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r8, 0x40085400, &(0x7f00000000c0)=0xfffffffffffffeff) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0xd}, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002d00)={r0, 0xe0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000002b00)=[{}, {}], 0x10, 0x10, &(0x7f0000002b40), &(0x7f0000002b80), 0x8, 0x93, 0x8, 0x8, &(0x7f0000002bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x14, 0x23, &(0x7f0000002880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3a91, 0x0, 0x0, 0x0, 0xffff}, @call={0x85, 0x0, 0x0, 0x5b}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa29887264c0d91df}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000029c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002a00)={0x4, 0x7, 0x1, 0x9ea6}, 0x10, r9, r5, 0x0, &(0x7f0000002d40)=[r1, r1], 0x0, 0x10, 0x1600}, 0x94) lsetxattr$security_capability(&(0x7f0000002e40)='./file0\x00', &(0x7f00000003c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x2, 0xeec}, {0xe8000000, 0xffff8000}]}, 0x14, 0x1) lchown(&(0x7f0000002840)='./file0\x00', r2, r3) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000002ec0)=ANY=[@ANYRES64=r2, @ANYRES8=r6, @ANYRESDEC], 0x0, 0x0) 21.820478236s ago: executing program 8 (id=2044): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x2ac}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x55, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r5, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 21.541269814s ago: executing program 5 (id=2045): socket$kcm(0xa, 0x922000000003, 0x11) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x9, {0x9, 0x11, "46ff4490d70a1e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000240)=""/178, 0xb2) 21.490972193s ago: executing program 9 (id=2046): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x633, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004, 0xa}, {@in=@dev, 0x0, 0x32}, @in6=@private2, {0x327, 0x0, 0x0, 0x0, 0x1000, 0xfffffffffffffffc}, {}, {0x7, 0x800000}, 0x70bd25, 0x3502, 0xa, 0x0, 0xff}, [@algo_crypt={0x4c, 0x2, {{'ecb(cipher_null)\x00'}, 0x20, "05b7a279"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x20000, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2000000, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8569, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1ffffe], [0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x744]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, &(0x7f0000000000)='sync\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 21.242807589s ago: executing program 8 (id=2047): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200303a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08029078000000"], 0x0) 20.521255045s ago: executing program 8 (id=2048): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) 20.388420664s ago: executing program 9 (id=2049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)={0x14, 0x4e, 0x1, 0x0, 0x0, "", [@generic="df4737bd"]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x2004, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000440)=[{0x2, 0x3, {0x0, 0xff}, {0x1, 0x0, 0x1}, 0xfe, 0x2}, {0x0, 0x3, {0x1, 0xf1, 0x3}, {0x2, 0xff, 0x4}, 0xfe, 0xff}, {0x0, 0xfe, {0x1, 0xff, 0x4}, {}, 0x2, 0xff}, {0x0, 0x0, {0x1, 0xf0, 0x4}, {0x0, 0xf0, 0x2}, 0x1, 0x1}, {0x2, 0x3, {0x1, 0x1, 0x3}, {0x1}, 0x1, 0xfe}, {0x3, 0x2, {0x0, 0xff, 0x1}, {0x1, 0xff, 0x4}, 0xff, 0xfd}, {0x0, 0x2, {0x0, 0x1, 0x1}, {0x0, 0xf0, 0x2}, 0x1, 0xfd}, {0x0, 0x1, {0x2, 0xf0, 0x2}, {0x2, 0x1, 0x1}, 0x0, 0xfd}], 0x100) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39011}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x6, 0xfffffffa, 0x1}, &(0x7f00000001c0)=0x10) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfe, 0x41141800}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x401, 0xe8}, &(0x7f00000002c0)=0x8) 20.269516975s ago: executing program 9 (id=2050): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000040)=0x800, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xfffd}, {0xffff, 0x2}, {0x8, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xebed}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x1f) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x19ac, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x120, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xd0, 0x3, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x400, 0x7, 0x5, 0xfffffffd}, 0xd}}]}, {0x7e, 0x6, "6bd4af1894fcbf4114b62d438bc7e24fc656f560859a2d0d4004643f146222586f5aac337fe173ca5296eabf7f9a7d1e1a5aabc62acd0cf5092bfa53c2045b84bc8996c56064b2af84beef997b9cde5c833387d177a14579e39630e1dca0363e40a8e819b3c68391b718331efa94f8202ce29e57936f725dd5dd"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x264, 0x1, [@m_vlan={0x130, 0xb, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0xfc, 0x6, "941aa390b334bee84616d5341ac728e579f7b44dffaab3bdf52034a3dca8e5f6526b2151c80145730e84b5405d34a1fff3ec10bce67a4af533047123042f9bdb70fa663aeaf473418afb5bdf18db0918e0796bd637fd547a5716f923d76570fa54d70adec231dcb871db5e0eda6655f832400cbcf2d5eaf24bae9c260f1be3d73c87d59b4f2cd5e0e60d5940df50942c6378ceb88db306bc97cc6c413df62ec5db327841734af68702f5c6e42c8f20dbf14730b7138eee932adc97908c3a31d5ba306b6f7d7796fec9aa63051579ddeb68aef344edde0e7ca9b4ead9c73b653f97d1c7522689b692bdd06049a4062d2b3adf96388c3acbe1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x130, 0x1e, 0x0, 0x0, {{0x9}, {0x4}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x10c0, 0x1, [@m_csum={0x10bc, 0x6, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x4, 0x8}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb326, 0x7, 0x4, 0x6, 0x10}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x58ce, 0x6, 0x20000000, 0x5, 0x800}, 0x14}}, @TCA_CSUM_PARMS={0xfffffffffffffeb2, 0x1, {{0x6, 0x8, 0x1, 0xc, 0x8}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x81, 0x20000000, 0x2, 0xfffffff8}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4c4, 0x1, [@m_sample={0xd0, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0xfffffffb, 0x20000000, 0x9, 0x8}}]}, {0x8b, 0x6, "a1f2727488a51d34650b1c8153c890f7e71232b1f22103234154958a66355556942bb901d659301b68d5e763d2bed13a2bf08ded101e865f6e73aa19b616820cb5baf90a89e235885beec3784b70c842d0ad4b6dfd98ed4c80d80f4f5d4c90ad58fe430c93199a5149b2938822d9ee8ac61fc3d1e5eb85574dc2bf8fd97c29186b705353aa7be8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x5c, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6a80}]}, {0x26, 0x6, "4a87abea63618640556d137d3be2f1f8695a669f83c9d5e773c4eb6c273a568f6fc4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xbc, 0xc, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x400}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x6, 0x20000000, 0x5a48, 0x10}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8001}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80008000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa3b}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7a0}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x87}]}, {0x38, 0x6, "222da4ca662d08e6a9d916657328d4a62b1b6de240482ff96fcebc3e946331028221f4b8be7948b8bcf2c336ee92f7ea1dcd6f36"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xfc, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x8, 0x3, '&)^\x00'}, @TCA_DEF_DATA={0x14, 0x3, ',V-\\(\\}-@(@*\xe3($\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x3, 0x10000000, 0x8, 0x2}}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}]}, {0x87, 0x6, "2120959663d991e0181ab4149b4cbdfa624381ed360be6f600a44fdad82fd0af36c182046eff7eda8301d31910fc6bcbede7b5af5bb1d580f044e13deb6aa83f048f10f01d16d7f54ab7562484620b162026042bbc408cd9dc526d12c9d1aefe824b34b47cdb9868d27fdcb6951cd9184f38df8dff10fa5a7a1f3ef7d355be44e6c7a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1dc, 0x1f, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffff8, 0x20000000, 0x5, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x8, 0x6, 0x2}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x400, 0x0, 0x7fffffff, 0x71a55b77}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7f, 0x3, 0xf}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x0, 0x1, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0xc, 0x1, 0x3ff, 0x3}, 0x9}}]}, {0x102, 0x6, "29c78a47ec07ac9f56617485246e4b5ea2c802daaa525b5479db4bfdf48880be001fbdddd2f266146c734c1da34f04fe1404ee3c112b36b1f56d86ba7a8d731e42732114104bd7bb01c30cda33f19793c9593400ebf18820886965895c3f8e461d689c70eb36771f2e0e4d22b80aed9365f174a11d086f63b66597e808c90b1c73682e09df4d140947b7bae80b120a68c2568fdf4a8db31ddb9ea850620628d1c8816c24e1a1b47a75be61c77bfd17c92a51affe143fbe8a07c90fcf61d35188f2e4e9cec570feb3ab8b7a9fa8595a5b68ec4e1850e0ee07a4e6b6c29c5d15e56cba3cd875e291531109351ec20e0254452de2e2d378835f16d56e4b4d50"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x90, 0x1, [@m_csum={0x8c, 0xb, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7fff, 0x1, 0x94d, 0x73e}, 0x6e}}]}, {0x42, 0x6, "f1be5bb4d2fe1f051ea8b67edd088c0e782ef9abb390fbaa28b02ced584e40a92448785e795b1f56a7a2f3c3ac172dae304a954b9da5e6043498331005a4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x19ac}}, 0x0) listen(r1, 0xda90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x2000a804) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e000100000000010000000000000008000100ffffffff000000000000000000ec1adf42d8875bf120b6ce6017791923311331591d3c4bb4b2"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_null}]}) r8 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x110, r8, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x4, 0x4) pipe2(&(0x7f0000000000), 0x80000) 20.209230829s ago: executing program 9 (id=2051): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) (fail_nth: 11) 20.067068971s ago: executing program 9 (id=2053): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000097ff8208582005109bc10000000109021200010000000009048f0000bf575a0044583f33b12facce6477f5703901f3366fee668b90c2ce62d92572ded60041ec77995620f19fb0e72601a01f5265dcd2dd01e59f2e01aaba9dc877841664c16a5663dd2a4532d151eb0ff1718f537c9bcbe808730d075b16602c0e1a8a9ed7b2f9a64a20b0d73b3750666783809b5d95307695c2640bc2d408ca6857a1102105401803c8550b5cf7f5c9922583425ac4273522bffeaa4f268af493d327f55aeba720d57e5489f0892707eb0f33732c65d37a79e3f6f43b"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=r0]) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x326, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x1, 0x2b, 0x1, {0x22, 0x28d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0x77, 0xc, 0x40, 0x4}, 0xaf, &(0x7f0000000440)=ANY=[@ANYBLOB="050faf00e0ab098c48ab6c32c5625b28ca2a11a3888a6557e02d6dd685e5015461efce658d35010cb383108d9498fe28972d08ae3b42ed1e6ea0c4c58d9f53ded054b85f0c100a05e0ff1f008ff807001c100a0624000000000fff0f003f00000000000000807f003000000039100158a6e0fa38382cd2445e4af4ea722505f372831044eeaa5a58e31fb2fba0e32535cee2528a6644399c6a57345980c98dcb21dcfee7030004000809e5037f0d370f"], 0x2, [{0xc6, &(0x7f0000000280)=@string={0xc6, 0x3, "7f095f5525a21c747e7597a9fe5410973ee19fbfc0fa814c81c2f0f7a3b8f2a549c6dfd7e73d327bae65a61ee4678ca763649aa6fb89ce74c731fde8fe9968c40dc6ac77e745cc5f27c3824ef7210a588a8c4a9e36adc43aebcebf02c396e46e8dcc94986b3dee6ce3273c0bf39c9bd6b9247e13cec87c166b0cae80d5c8e7ebebd7f0c0a27f873efdc015e4aca42adcdb81a3d4a1b189379a68ed1e89571a7e76d4e4994be695fe2b9eed681eb99dbc34193aa362020ad6f17c5184645c40f4e5bf57a6"}}, {0x4d, &(0x7f0000000600)=ANY=[@ANYBLOB="4d0375a0455daa4df80774f19a0baa20186daf59c8269e3fda7efb2c909a3449d7b8eb61df92c30a9bca99124610ec4c4373a1acd02716b1a27b3bbb15463bd2e95d2b53f6dc41948b6070abc8ced9c1b02f30ced9cd887dd900000000000000d5e9fe3b826a09c7232bb32a383e6642f02945f2eea185492e5d2b55c2ee5051030448b06ccdbf24441ee1e38063d099acb6ac4bc949a58856b403c2f8c67d9620f98bb8de6bb4b758d5"]}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x82, 0x5, @local}, 0x1c) readv(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/51, 0x33}, {&(0x7f0000000980)=""/179, 0xb3}], 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) mmap(&(0x7f000009a000/0x3000)=nil, 0x3000, 0x3000004, 0x100110, r3, 0xfd452000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) open(0x0, 0x44842, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) shmget$private(0x0, 0x3000, 0xfcf774859b375a8c, &(0x7f0000ffd000/0x3000)=nil) ioctl$KDSIGACCEPT(r5, 0x5607, 0x2c) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000240)) 19.332268613s ago: executing program 8 (id=2054): socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xf}, 0x8) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000002000000"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_open_dev$MSR(0x0, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 19.025874623s ago: executing program 6 (id=2055): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) r3 = gettid() ioprio_get$pid(0x1, r3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) 18.715690076s ago: executing program 7 (id=2056): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) r2 = gettid() timer_create(0x2, &(0x7f0000000080)={0x0, 0x1d, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) 17.828499508s ago: executing program 6 (id=2057): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$incfs(0xffffffffffffffff, 0x0, 0x240401, 0x46) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, &(0x7f0000000340)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00), 0x218}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000080)) 17.827413729s ago: executing program 7 (id=2058): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000040)={&(0x7f0000000240)={{@host, 0x3}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="042ffd02ffffffffffff030863d9ff03009f7dbe22ff0f00fc44ea6d1aec274c8968917697e62edc322898c618f3fb5e491f9e8adff68d373fb0734adfc545389458b825340c8c8f5c492078d00adc867641fcb0351732cefa32848d5e44c43df47371c93da4cdff225f61b624958bd6668dc99425d17452bb3e5dbe078b3a7451e54dc0c2587964a6886f466d7b66c8f914cf3a4b3b61cd721e36df2e08fec18c94317d8bb53ef342ff391f7034a4f3639116e19551aac5539c313ea03737d2c1404121a85b892b08815abf97626ad4e6a9b0d00d9a74e409486f8ea349fdba0cb4757dbcea513381c76a1c3d6e79f0d14e3a27d93b600168eebeaaaaaaaaaa10d2098a54c3330000dba74559adde41e078484e9f387a109a0520c9f59f1d3c9fac7a118a24988d673e37ce8ccef7862cdffa1d7d6066471ca7831aeb3d20e729b78a4adeac6c80e8933e4a010100d15fcfe4620aacd245cc5e5b50016ede784d559561b836e5c308740b523d9024b9b77f9d51db558ee477509a28b06bc2f0787bb8dbeda3e4aa3d1762352c5c15886251caea2fb1af87e76e9729578474233bf840c98d40147e"], 0x200) 17.589526191s ago: executing program 5 (id=2059): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206010200000000000000000000000705000100070000000c0007800800120000000000050005000a00000805000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x4055}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x3, [@enum64={0xe, 0x5, 0x0, 0x13, 0x0, 0xc, [{0x8, 0x8, 0x7}, {0x1, 0x4, 0xd33}, {0x4, 0x56, 0x301a}, {0x10, 0x4, 0xb2}, {0xa, 0xad, 0x400}]}, @enum={0x5, 0x5, 0x0, 0x6, 0x4, [{0x8, 0xb12e}, {0xf, 0xffffffff}, {0x4, 0x5}, {0xf, 0x1000}, {0x4, 0x40}]}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @float={0x5, 0x0, 0x0, 0x10, 0xc}, @union={0xc, 0x1, 0x0, 0x5, 0x1, 0x81, [{0x4, 0x1}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000440)=""/213, 0xdf, 0xd5, 0x0, 0x45e, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x5, 0x3, 0x4e4, 0x6, r3, 0xb0, '\x00', r4, r5, 0x5, 0x2, 0x5}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) keyctl$session_to_parent(0x12) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902"], 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0x40345410, &(0x7f0000000080)={{0x3, 0x3, 0x3}, 0x8000000000000000}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80e85411, 0xfffffffffffffffe) fcntl$dupfd(r1, 0x406, r2) open$dir(0x0, 0x0, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) 17.316475351s ago: executing program 6 (id=2060): socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) fsopen(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) 16.622428452s ago: executing program 5 (id=2061): prlimit64(0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\a\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x2000000) 16.578253479s ago: executing program 9 (id=2062): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000040)=0x800, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xfffd}, {0xffff, 0x2}, {0x8, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xebed}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x1f) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x19ac, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x120, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xd0, 0x3, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x400, 0x7, 0x5, 0xfffffffd}, 0xd}}]}, {0x7e, 0x6, "6bd4af1894fcbf4114b62d438bc7e24fc656f560859a2d0d4004643f146222586f5aac337fe173ca5296eabf7f9a7d1e1a5aabc62acd0cf5092bfa53c2045b84bc8996c56064b2af84beef997b9cde5c833387d177a14579e39630e1dca0363e40a8e819b3c68391b718331efa94f8202ce29e57936f725dd5dd"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x264, 0x1, [@m_vlan={0x130, 0xb, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0xfc, 0x6, "941aa390b334bee84616d5341ac728e579f7b44dffaab3bdf52034a3dca8e5f6526b2151c80145730e84b5405d34a1fff3ec10bce67a4af533047123042f9bdb70fa663aeaf473418afb5bdf18db0918e0796bd637fd547a5716f923d76570fa54d70adec231dcb871db5e0eda6655f832400cbcf2d5eaf24bae9c260f1be3d73c87d59b4f2cd5e0e60d5940df50942c6378ceb88db306bc97cc6c413df62ec5db327841734af68702f5c6e42c8f20dbf14730b7138eee932adc97908c3a31d5ba306b6f7d7796fec9aa63051579ddeb68aef344edde0e7ca9b4ead9c73b653f97d1c7522689b692bdd06049a4062d2b3adf96388c3acbe1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x130, 0x1e, 0x0, 0x0, {{0x9}, {0x4}, {0x102, 0x6, "a6754e33b67a43be46177b1add082916c985098e6b3323dce1b36b99f2a397063852a981d3b096be87b1c1ddf516db43cb0ec1f3c209ee464b4ac220822c247d8d03cfede6a9e12a9f205affef354c5386f5a7b79f1bd8822b10027848cc7fcaecabfbd27ed915c82a94278152088ca7c8cb0001129162b44cf51b72c40ff8081f45f51cd093fedca157368c6735db474ee78f369e7ab09887594029159b172a09584c3065f7953c896da02ac4fd250a71fe9975ff7453a99f8e933b994d6676a597e8721fa23ef46b029928eeb23de9da446ed422f949ff10cb83faec5383b157f7bb276d23befc6231ef553619e9ce97cbcd07ccd5c03d8c03df5e3f50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x10c0, 0x1, [@m_csum={0x10bc, 0x6, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x4, 0x8}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb326, 0x7, 0x4, 0x6, 0x10}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x58ce, 0x6, 0x20000000, 0x5, 0x800}, 0x14}}, @TCA_CSUM_PARMS={0xfffffffffffffeb2, 0x1, {{0x6, 0x8, 0x1, 0xc, 0x8}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x81, 0x20000000, 0x2, 0xfffffff8}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4c4, 0x1, [@m_sample={0xd0, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0xfffffffb, 0x20000000, 0x9, 0x8}}]}, {0x8b, 0x6, "a1f2727488a51d34650b1c8153c890f7e71232b1f22103234154958a66355556942bb901d659301b68d5e763d2bed13a2bf08ded101e865f6e73aa19b616820cb5baf90a89e235885beec3784b70c842d0ad4b6dfd98ed4c80d80f4f5d4c90ad58fe430c93199a5149b2938822d9ee8ac61fc3d1e5eb85574dc2bf8fd97c29186b705353aa7be8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x5c, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6a80}]}, {0x26, 0x6, "4a87abea63618640556d137d3be2f1f8695a669f83c9d5e773c4eb6c273a568f6fc4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xbc, 0xc, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x400}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x6, 0x20000000, 0x5a48, 0x10}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8001}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80008000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa3b}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7a0}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x87}]}, {0x38, 0x6, "222da4ca662d08e6a9d916657328d4a62b1b6de240482ff96fcebc3e946331028221f4b8be7948b8bcf2c336ee92f7ea1dcd6f36"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xfc, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x8, 0x3, '&)^\x00'}, @TCA_DEF_DATA={0x14, 0x3, ',V-\\(\\}-@(@*\xe3($\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x3, 0x10000000, 0x8, 0x2}}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}]}, {0x87, 0x6, "2120959663d991e0181ab4149b4cbdfa624381ed360be6f600a44fdad82fd0af36c182046eff7eda8301d31910fc6bcbede7b5af5bb1d580f044e13deb6aa83f048f10f01d16d7f54ab7562484620b162026042bbc408cd9dc526d12c9d1aefe824b34b47cdb9868d27fdcb6951cd9184f38df8dff10fa5a7a1f3ef7d355be44e6c7a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1dc, 0x1f, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffff8, 0x20000000, 0x5, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x8, 0x6, 0x2}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x400, 0x0, 0x7fffffff, 0x71a55b77}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7f, 0x3, 0xf}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x0, 0x1, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0xc, 0x1, 0x3ff, 0x3}, 0x9}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x90, 0x1, [@m_csum={0x8c, 0xb, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7fff, 0x1, 0x94d, 0x73e}, 0x6e}}]}, {0x42, 0x6, "f1be5bb4d2fe1f051ea8b67edd088c0e782ef9abb390fbaa28b02ced584e40a92448785e795b1f56a7a2f3c3ac172dae304a954b9da5e6043498331005a4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x19ac}}, 0x0) listen(r1, 0xda90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x2000a804) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e000100000000010000000000000008000100ffffffff000000000000000000ec1adf42d8875bf120b6ce6017791923311331591d3c4bb4b2"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x1, 0x1}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_null}]}) r8 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x110, r8, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x4, 0x4) pipe2(&(0x7f0000000000), 0x80000) 16.448547831s ago: executing program 6 (id=2063): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r2}, 0x18) r3 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) ppoll(&(0x7f0000002280), 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001400010000000000fcdbdf25021f49cb", @ANYRES32=r1, @ANYBLOB="08000200e0000002140003"], 0x34}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0xa00, @loopback}}) 15.548478908s ago: executing program 6 (id=2064): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x4, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6715, 0x400, 0x8, 0x2, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 15.510581618s ago: executing program 6 (id=2065): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x840000000002, 0x3, 0xff) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) prlimit64(0x0, 0x425ea057ada49652, &(0x7f0000000140)={0x4231, 0x24b0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000004000615d5cdfac3d50ebad52aa48e010000000000edff0500000000002000000000000000"], 0x24, 0x0) 3.351569442s ago: executing program 37 (id=2054): socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xf}, 0x8) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000002000000"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_open_dev$MSR(0x0, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 2.509911448s ago: executing program 38 (id=2058): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000040)={&(0x7f0000000240)={{@host, 0x3}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="042ffd02ffffffffffff030863d9ff03009f7dbe22ff0f00fc44ea6d1aec274c8968917697e62edc322898c618f3fb5e491f9e8adff68d373fb0734adfc545389458b825340c8c8f5c492078d00adc867641fcb0351732cefa32848d5e44c43df47371c93da4cdff225f61b624958bd6668dc99425d17452bb3e5dbe078b3a7451e54dc0c2587964a6886f466d7b66c8f914cf3a4b3b61cd721e36df2e08fec18c94317d8bb53ef342ff391f7034a4f3639116e19551aac5539c313ea03737d2c1404121a85b892b08815abf97626ad4e6a9b0d00d9a74e409486f8ea349fdba0cb4757dbcea513381c76a1c3d6e79f0d14e3a27d93b600168eebeaaaaaaaaaa10d2098a54c3330000dba74559adde41e078484e9f387a109a0520c9f59f1d3c9fac7a118a24988d673e37ce8ccef7862cdffa1d7d6066471ca7831aeb3d20e729b78a4adeac6c80e8933e4a010100d15fcfe4620aacd245cc5e5b50016ede784d559561b836e5c308740b523d9024b9b77f9d51db558ee477509a28b06bc2f0787bb8dbeda3e4aa3d1762352c5c15886251caea2fb1af87e76e9729578474233bf840c98d40147e"], 0x200) 1.504338549s ago: executing program 39 (id=2061): prlimit64(0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\a\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x2000000) 1.472889925s ago: executing program 40 (id=2062): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000040)=0x800, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xfffd}, {0xffff, 0x2}, {0x8, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xebed}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x1f) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x19ac, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x120, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xd0, 0x3, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x400, 0x7, 0x5, 0xfffffffd}, 0xd}}]}, {0x7e, 0x6, "6bd4af1894fcbf4114b62d438bc7e24fc656f560859a2d0d4004643f146222586f5aac337fe173ca5296eabf7f9a7d1e1a5aabc62acd0cf5092bfa53c2045b84bc8996c56064b2af84beef997b9cde5c833387d177a14579e39630e1dca0363e40a8e819b3c68391b718331efa94f8202ce29e57936f725dd5dd"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x264, 0x1, [@m_vlan={0x130, 0xb, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0xfc, 0x6, "941aa390b334bee84616d5341ac728e579f7b44dffaab3bdf52034a3dca8e5f6526b2151c80145730e84b5405d34a1fff3ec10bce67a4af533047123042f9bdb70fa663aeaf473418afb5bdf18db0918e0796bd637fd547a5716f923d76570fa54d70adec231dcb871db5e0eda6655f832400cbcf2d5eaf24bae9c260f1be3d73c87d59b4f2cd5e0e60d5940df50942c6378ceb88db306bc97cc6c413df62ec5db327841734af68702f5c6e42c8f20dbf14730b7138eee932adc97908c3a31d5ba306b6f7d7796fec9aa63051579ddeb68aef344edde0e7ca9b4ead9c73b653f97d1c7522689b692bdd06049a4062d2b3adf96388c3acbe1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x130, 0x1e, 0x0, 0x0, {{0x9}, {0x4}, {0x102, 0x6, "a6754e33b67a43be46177b1add082916c985098e6b3323dce1b36b99f2a397063852a981d3b096be87b1c1ddf516db43cb0ec1f3c209ee464b4ac220822c247d8d03cfede6a9e12a9f205affef354c5386f5a7b79f1bd8822b10027848cc7fcaecabfbd27ed915c82a94278152088ca7c8cb0001129162b44cf51b72c40ff8081f45f51cd093fedca157368c6735db474ee78f369e7ab09887594029159b172a09584c3065f7953c896da02ac4fd250a71fe9975ff7453a99f8e933b994d6676a597e8721fa23ef46b029928eeb23de9da446ed422f949ff10cb83faec5383b157f7bb276d23befc6231ef553619e9ce97cbcd07ccd5c03d8c03df5e3f50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x10c0, 0x1, [@m_csum={0x10bc, 0x6, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x4, 0x8}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb326, 0x7, 0x4, 0x6, 0x10}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x58ce, 0x6, 0x20000000, 0x5, 0x800}, 0x14}}, @TCA_CSUM_PARMS={0xfffffffffffffeb2, 0x1, {{0x6, 0x8, 0x1, 0xc, 0x8}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x81, 0x20000000, 0x2, 0xfffffff8}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4c4, 0x1, [@m_sample={0xd0, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0xfffffffb, 0x20000000, 0x9, 0x8}}]}, {0x8b, 0x6, "a1f2727488a51d34650b1c8153c890f7e71232b1f22103234154958a66355556942bb901d659301b68d5e763d2bed13a2bf08ded101e865f6e73aa19b616820cb5baf90a89e235885beec3784b70c842d0ad4b6dfd98ed4c80d80f4f5d4c90ad58fe430c93199a5149b2938822d9ee8ac61fc3d1e5eb85574dc2bf8fd97c29186b705353aa7be8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x5c, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6a80}]}, {0x26, 0x6, "4a87abea63618640556d137d3be2f1f8695a669f83c9d5e773c4eb6c273a568f6fc4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xbc, 0xc, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x400}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x6, 0x20000000, 0x5a48, 0x10}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8001}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80008000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa3b}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7a0}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x87}]}, {0x38, 0x6, "222da4ca662d08e6a9d916657328d4a62b1b6de240482ff96fcebc3e946331028221f4b8be7948b8bcf2c336ee92f7ea1dcd6f36"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xfc, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x8, 0x3, '&)^\x00'}, @TCA_DEF_DATA={0x14, 0x3, ',V-\\(\\}-@(@*\xe3($\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x3, 0x10000000, 0x8, 0x2}}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}]}, {0x87, 0x6, "2120959663d991e0181ab4149b4cbdfa624381ed360be6f600a44fdad82fd0af36c182046eff7eda8301d31910fc6bcbede7b5af5bb1d580f044e13deb6aa83f048f10f01d16d7f54ab7562484620b162026042bbc408cd9dc526d12c9d1aefe824b34b47cdb9868d27fdcb6951cd9184f38df8dff10fa5a7a1f3ef7d355be44e6c7a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1dc, 0x1f, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffff8, 0x20000000, 0x5, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x8, 0x6, 0x2}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x400, 0x0, 0x7fffffff, 0x71a55b77}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7f, 0x3, 0xf}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x0, 0x1, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0xc, 0x1, 0x3ff, 0x3}, 0x9}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x90, 0x1, [@m_csum={0x8c, 0xb, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7fff, 0x1, 0x94d, 0x73e}, 0x6e}}]}, {0x42, 0x6, "f1be5bb4d2fe1f051ea8b67edd088c0e782ef9abb390fbaa28b02ced584e40a92448785e795b1f56a7a2f3c3ac172dae304a954b9da5e6043498331005a4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x19ac}}, 0x0) listen(r1, 0xda90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x2000a804) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e000100000000010000000000000008000100ffffffff000000000000000000ec1adf42d8875bf120b6ce6017791923311331591d3c4bb4b2"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x1, 0x1}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_null}]}) r8 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x110, r8, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x4, 0x4) pipe2(&(0x7f0000000000), 0x80000) 0s ago: executing program 41 (id=2065): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x840000000002, 0x3, 0xff) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) prlimit64(0x0, 0x425ea057ada49652, &(0x7f0000000140)={0x4231, 0x24b0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000004000615d5cdfac3d50ebad52aa48e010000000000edff0500000000002000000000000000"], 0x24, 0x0) kernel console output (not intermixed with test programs): 0x10/0x10 [ 581.837525][T12182] do_syscall_64+0xcd/0x4c0 [ 581.837551][T12182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.837567][T12182] RIP: 0033:0x7fa585b8e929 [ 581.837580][T12182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.837596][T12182] RSP: 002b:00007fa586a58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.837613][T12182] RAX: ffffffffffffffda RBX: 00007fa585db5fa0 RCX: 00007fa585b8e929 [ 581.837624][T12182] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 581.837633][T12182] RBP: 00007fa586a58090 R08: 0000000000000000 R09: 0000000000000000 [ 581.837643][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.837652][T12182] R13: 0000000000000000 R14: 00007fa585db5fa0 R15: 00007fffda403c98 [ 581.837674][T12182] [ 582.088023][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'. [ 582.348996][ T975] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 582.402887][T12193] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 582.425100][ T30] audit: type=1400 audit(1751685412.879:641): avc: denied { getopt } for pid=12191 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 582.453190][ T30] audit: type=1400 audit(1751685412.899:642): avc: denied { write } for pid=12191 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 582.520823][ T975] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 582.585424][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1605'. [ 582.959341][ T30] audit: type=1400 audit(1751685413.069:643): avc: denied { shutdown } for pid=12188 comm="syz.0.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 582.979388][ T975] usb 4-1: config 160 has no interface number 0 [ 582.986096][ T975] usb 4-1: config 160 interface 200 has no altsetting 0 [ 583.003727][ T975] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 583.013523][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.022039][ T975] usb 4-1: Product: syz [ 583.026526][ T975] usb 4-1: Manufacturer: syz [ 583.107077][ T975] usb 4-1: SerialNumber: syz [ 583.496876][ T975] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.567934][ T975] usb 4-1: MIDIStreaming interface descriptor not found [ 583.600940][ T975] usb 4-1: USB disconnect, device number 74 [ 583.619236][ T5889] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 584.965747][ T6346] udevd[6346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.017998][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 585.055627][ T5889] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 585.110099][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.257932][ T5889] usb 2-1: Product: syz [ 585.332905][ T5889] usb 2-1: Manufacturer: syz [ 585.337547][ T5889] usb 2-1: SerialNumber: syz [ 585.344852][ T5889] usb 2-1: config 0 descriptor?? [ 585.561568][ T5889] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 585.667361][T12227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1616'. [ 585.689559][T12227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1616'. [ 586.465902][T12236] cgroup: none used incorrectly [ 586.583085][T12238] loop6: detected capacity change from 0 to 63 [ 586.599043][T12238] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.607199][T12238] Buffer I/O error on dev loop6, logical block 1, async page read [ 586.615655][ T30] audit: type=1400 audit(1751685417.079:644): avc: denied { map } for pid=12237 comm="syz.4.1621" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.639733][T12238] Buffer I/O error on dev loop6, logical block 2, async page read [ 586.647630][T12238] Buffer I/O error on dev loop6, logical block 3, async page read [ 586.657425][ T30] audit: type=1400 audit(1751685417.079:645): avc: denied { execute } for pid=12237 comm="syz.4.1621" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.669001][ T975] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 586.686106][T12238] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.701587][T12238] Buffer I/O error on dev loop6, logical block 1, async page read [ 586.711436][T12238] Buffer I/O error on dev loop6, logical block 2, async page read [ 586.722355][T12238] Buffer I/O error on dev loop6, logical block 3, async page read [ 586.732548][ T5825] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.744325][ T5825] Buffer I/O error on dev loop6, logical block 1, async page read [ 586.854918][T12241] FAULT_INJECTION: forcing a failure. [ 586.854918][T12241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.878390][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 586.897905][T12241] CPU: 0 UID: 0 PID: 12241 Comm: syz.4.1622 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 586.897933][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 586.897944][T12241] Call Trace: [ 586.897965][T12241] [ 586.897972][T12241] dump_stack_lvl+0x16c/0x1f0 [ 586.898007][T12241] should_fail_ex+0x512/0x640 [ 586.898035][T12241] _copy_from_user+0x2e/0xd0 [ 586.898060][T12241] move_addr_to_kernel+0x65/0x170 [ 586.898082][T12241] __copy_msghdr+0x386/0x470 [ 586.898106][T12241] copy_msghdr_from_user+0xc1/0x160 [ 586.898130][T12241] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 586.898166][T12241] ___sys_sendmsg+0xfe/0x1d0 [ 586.898192][T12241] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.898213][T12241] ? __lock_acquire+0x622/0x1c90 [ 586.898260][T12241] __sys_sendmsg+0x16d/0x220 [ 586.898285][T12241] ? __pfx___sys_sendmsg+0x10/0x10 [ 586.898325][T12241] do_syscall_64+0xcd/0x4c0 [ 586.898353][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.898370][T12241] RIP: 0033:0x7fd2a738e929 [ 586.898385][T12241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.898401][T12241] RSP: 002b:00007fd2a8188038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.898419][T12241] RAX: ffffffffffffffda RBX: 00007fd2a75b5fa0 RCX: 00007fd2a738e929 [ 586.898431][T12241] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 586.898440][T12241] RBP: 00007fd2a8188090 R08: 0000000000000000 R09: 0000000000000000 [ 586.898450][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.898460][T12241] R13: 0000000000000000 R14: 00007fd2a75b5fa0 R15: 00007ffdabd8df18 [ 586.898484][T12241] [ 587.160096][T12248] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1625'. [ 587.166599][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.180593][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.190766][ T975] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 587.199840][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.213540][ T975] usb 3-1: config 0 descriptor?? [ 587.219069][T12248] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1625'. [ 587.234214][ T975] hub 3-1:0.0: USB hub found [ 587.472571][ T975] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 587.507685][ T5889] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 587.573831][ T5889] usb 2-1: USB disconnect, device number 66 [ 587.913625][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.147962][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.564219][T12253] ubi31: attaching mtd0 [ 588.569980][T12253] ubi31: scanning is finished [ 588.777912][T12253] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 588.785567][T12253] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 588.792863][T12253] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 588.799914][T12253] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 588.807374][T12253] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 588.814240][T12253] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 588.822361][T12253] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 428696324 [ 588.832371][T12253] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 588.864273][T12259] ubi31: background thread "ubi_bgt31d" started, PID 12259 [ 588.905008][ T975] usbhid 3-1:0.0: can't add hid device: -71 [ 588.924056][ T975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 588.980213][ T975] usb 3-1: USB disconnect, device number 67 [ 589.134013][T12265] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 589.194107][T12265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.299007][T12267] bond1: (slave veth5): Enslaving as an active interface with a down link [ 589.342174][T12265] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 589.349333][T12265] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 589.622341][T12274] netlink: 'syz.2.1634': attribute type 4 has an invalid length. [ 590.393467][ T30] audit: type=1400 audit(1751685420.329:646): avc: denied { ioctl } for pid=12275 comm="syz.4.1635" path="socket:[31264]" dev="sockfs" ino=31264 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 590.421482][ T30] audit: type=1400 audit(1751685420.409:647): avc: denied { remount } for pid=12275 comm="syz.4.1635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 590.527198][T12282] sctp: [Deprecated]: syz.1.1636 (pid 12282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.527198][T12282] Use struct sctp_sack_info instead [ 590.652638][T12287] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 590.656266][T12288] ubi31: detaching mtd0 [ 590.900334][ T30] audit: type=1400 audit(1751685421.369:648): avc: denied { getopt } for pid=12284 comm="syz.0.1637" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 590.933118][T12288] ubi31: mtd0 is detached [ 590.992604][T12289] IPVS: length: 91 != 24 [ 590.993364][T12291] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1640'. [ 591.042160][ T30] audit: type=1400 audit(1751685421.479:649): avc: denied { read } for pid=12286 comm="syz.4.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 591.327780][ T30] audit: type=1400 audit(1751685421.499:650): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 594.272969][T12336] erofs (device nullb0): cannot find valid erofs superblock [ 595.703569][T12356] FAULT_INJECTION: forcing a failure. [ 595.703569][T12356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.737856][T12356] CPU: 0 UID: 0 PID: 12356 Comm: syz.4.1660 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 595.737888][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 595.737899][T12356] Call Trace: [ 595.737905][T12356] [ 595.737911][T12356] dump_stack_lvl+0x16c/0x1f0 [ 595.737940][T12356] should_fail_ex+0x512/0x640 [ 595.737968][T12356] _copy_from_user+0x2e/0xd0 [ 595.737995][T12356] move_addr_to_kernel+0x65/0x170 [ 595.738015][T12356] __copy_msghdr+0x386/0x470 [ 595.738039][T12356] copy_msghdr_from_user+0xc1/0x160 [ 595.738063][T12356] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 595.738098][T12356] ___sys_sendmsg+0xfe/0x1d0 [ 595.738123][T12356] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.738147][T12356] ? __lock_acquire+0x622/0x1c90 [ 595.738188][T12356] __sys_sendmsg+0x16d/0x220 [ 595.738211][T12356] ? __pfx___sys_sendmsg+0x10/0x10 [ 595.738245][T12356] do_syscall_64+0xcd/0x4c0 [ 595.738269][T12356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.738285][T12356] RIP: 0033:0x7fd2a738e929 [ 595.738300][T12356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.738314][T12356] RSP: 002b:00007fd2a8188038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.738331][T12356] RAX: ffffffffffffffda RBX: 00007fd2a75b5fa0 RCX: 00007fd2a738e929 [ 595.738341][T12356] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 595.738350][T12356] RBP: 00007fd2a8188090 R08: 0000000000000000 R09: 0000000000000000 [ 595.738360][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.738370][T12356] R13: 0000000000000000 R14: 00007fd2a75b5fa0 R15: 00007ffdabd8df18 [ 595.738392][T12356] [ 595.898358][ T6006] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 595.900083][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.122353][ T30] audit: type=1400 audit(1751685426.610:651): avc: denied { getattr } for pid=12362 comm="syz.1.1662" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 596.147379][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.154125][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 596.171042][ T6006] usb 4-1: unable to get BOS descriptor or descriptor too short [ 596.190847][ T975] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 596.198439][ T6006] usb 4-1: config 8 interface 0 has no altsetting 0 [ 596.200104][ T6006] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= f.ca [ 596.221671][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.246631][ T6006] usb 4-1: Product: syz [ 596.260690][ T6006] usb 4-1: Manufacturer: syz [ 596.320332][ T6006] usb 4-1: SerialNumber: syz [ 596.658712][T12354] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 596.665265][T12354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 596.678372][T12354] vhci_hcd vhci_hcd.0: Device attached [ 596.722787][T12368] vhci_hcd: connection closed [ 596.723831][ T7402] vhci_hcd: stop threads [ 596.743462][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.763979][ T6006] usb 4-1: USB disconnect, device number 75 [ 596.774081][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.774275][ T7402] vhci_hcd: release socket [ 596.800959][ T975] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 596.808708][ T7402] vhci_hcd: disconnect device [ 596.848177][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.878651][ T5889] vhci_hcd: vhci_device speed not set [ 596.899383][ T975] usb 3-1: config 0 descriptor?? [ 597.723157][ T975] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 597.731070][ T975] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 597.741476][ T975] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000F/input/input25 [ 597.773731][ T975] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 597.819332][ T975] usb 3-1: USB disconnect, device number 68 [ 598.074744][T12386] fido_id[12386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 598.211461][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1671'. [ 598.233468][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1671'. [ 598.789743][T12399] netlink: 'syz.0.1672': attribute type 2 has an invalid length. [ 599.085419][T12409] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1673'. [ 599.876795][T12415] hub 8-0:1.0: USB hub found [ 599.883289][T12415] hub 8-0:1.0: 1 port detected [ 601.732852][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 602.831114][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 602.926426][T12451] chnl_net:caif_netlink_parms(): no params data found [ 603.039506][T12450] loop6: detected capacity change from 0 to 524287999 [ 603.508728][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 603.668534][ T975] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 603.688347][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.714005][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.719233][T12466] Bluetooth: MGMT ver 1.23 [ 603.759493][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 603.783476][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.820493][ T9] usb 3-1: config 0 descriptor?? [ 603.880063][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.899512][ T975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 603.919237][ T975] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 603.931091][ T30] audit: type=1400 audit(1751685434.419:652): avc: denied { setopt } for pid=12467 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 603.982998][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.006100][ T975] usb 5-1: config 0 descriptor?? [ 604.020955][ T975] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 604.037507][ T975] dvb-usb: bulk message failed: -22 (3/0) [ 604.095790][ T975] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 604.114058][T12473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1696'. [ 604.133243][ T975] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 604.148773][ T975] usb 5-1: media controller created [ 604.156603][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.165775][T12473] xt_CT: No such helper "pptp" [ 604.209695][ T975] dvb-usb: bulk message failed: -22 (6/0) [ 604.232124][T12459] dibusb: i2c wr: len=61 is too big! [ 604.232124][T12459] [ 604.354438][ T975] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 604.370227][ T975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 604.412907][ T975] dvb-usb: schedule remote query interval to 150 msecs. [ 604.420384][ T975] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 604.446607][ T9] usb 3-1: string descriptor 0 read error: -22 [ 604.599234][ T975] dvb-usb: bulk message failed: -22 (1/0) [ 604.732779][ T975] dvb-usb: error while querying for an remote control event. [ 604.814107][ T9] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input27 [ 604.903970][ T9] uclogic 0003:256C:006D.0010: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 604.989435][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 605.006024][ T9] dvb-usb: error while querying for an remote control event. [ 605.031568][ T975] usb 3-1: USB disconnect, device number 69 [ 605.061978][T12480] fido_id[12480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 605.175995][T12486] input: syz1 as /devices/virtual/input/input28 [ 605.206029][T12486] netlink: 'syz.1.1700': attribute type 8 has an invalid length. [ 605.214436][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 605.223662][ T5889] dvb-usb: error while querying for an remote control event. [ 605.275379][ T30] audit: type=1326 audit(2000000001.070:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12488 comm="syz.1.1701" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d7b38e929 code=0x0 [ 605.390092][ T975] dvb-usb: bulk message failed: -22 (1/0) [ 605.437414][ T975] dvb-usb: error while querying for an remote control event. [ 605.609908][ T975] dvb-usb: bulk message failed: -22 (1/0) [ 605.891185][ T975] dvb-usb: error while querying for an remote control event. [ 606.175584][ T975] dvb-usb: bulk message failed: -22 (1/0) [ 606.187624][ T975] dvb-usb: error while querying for an remote control event. [ 606.376266][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 606.972832][ T9] dvb-usb: error while querying for an remote control event. [ 607.142377][ T975] usb 5-1: USB disconnect, device number 70 [ 607.269731][ T975] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 607.587827][ T975] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 607.872620][T12520] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 608.097660][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 608.114285][ T975] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 608.129850][ T975] usb 5-1: config 0 has no interface number 0 [ 608.140706][ T975] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 608.157680][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.180009][ T975] usb 5-1: Product: syz [ 608.184202][ T975] usb 5-1: Manufacturer: syz [ 608.223607][ T975] usb 5-1: SerialNumber: syz [ 608.243996][ T975] usb 5-1: config 0 descriptor?? [ 608.280505][ T975] smsc95xx v2.0.0 [ 608.284144][ T975] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 608.336117][ T975] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 608.628632][T12509] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1707'. [ 608.653350][T12538] netlink: 'syz.3.1712': attribute type 3 has an invalid length. [ 608.661440][T12509] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1707'. [ 608.671030][T12537] netlink: 'syz.3.1712': attribute type 3 has an invalid length. [ 608.683878][ T975] usb 5-1: USB disconnect, device number 71 [ 608.748501][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 608.777793][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 609.268693][ T975] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 609.431628][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 609.459956][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.498052][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.514774][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 609.599319][ T975] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 609.705497][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.714330][T12550] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 609.720854][T12550] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 609.721224][ T975] usb 2-1: config 0 descriptor?? [ 609.762266][T12550] vhci_hcd vhci_hcd.0: Device attached [ 609.797751][T12554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.839045][T12550] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 609.845680][T12550] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 609.949875][T12554] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 609.956523][T12554] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 609.964089][ T9] vhci_hcd: vhci_device speed not set [ 609.991391][T12559] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 609.998022][T12559] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 610.009613][T12550] vhci_hcd vhci_hcd.0: Device attached [ 610.046550][T12559] vhci_hcd vhci_hcd.0: Device attached [ 610.057214][T12554] vhci_hcd vhci_hcd.0: Device attached [ 610.059701][T12562] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 610.075530][ T9] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 610.108026][T12550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 610.179208][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.186571][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.190875][T12555] vhci_hcd: connection closed [ 610.194588][T12552] vhci_hcd: connection reset by peer [ 610.204766][T12560] vhci_hcd: connection closed [ 610.204938][T12557] vhci_hcd: connection closed [ 610.205047][ T7409] vhci_hcd: stop threads [ 610.215216][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.221333][ T7409] vhci_hcd: release socket [ 610.230682][ T7409] vhci_hcd: disconnect device [ 610.235554][ T7409] vhci_hcd: stop threads [ 610.244609][ T7409] vhci_hcd: release socket [ 610.246118][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.249594][ T7409] vhci_hcd: disconnect device [ 610.265816][ T7409] vhci_hcd: stop threads [ 610.271351][ T7409] vhci_hcd: release socket [ 610.275933][ T7409] vhci_hcd: disconnect device [ 610.276839][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.297281][ T7409] vhci_hcd: stop threads [ 610.303211][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.318513][ T7409] vhci_hcd: release socket [ 610.324739][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.325448][ T7409] vhci_hcd: disconnect device [ 610.341941][T12564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1717'. [ 610.354924][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.367692][ T6006] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 610.372693][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.407522][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.414773][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.437957][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.445210][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.457888][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.465131][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.472476][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.481041][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.492617][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.502967][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.510782][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.517998][ T6006] usb 4-1: Using ep0 maxpacket: 8 [ 610.523648][ T6006] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 610.523753][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.542972][ T6006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.546558][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.559022][ T975] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 610.571106][ T975] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 610.575479][ T6006] pvrusb2: Hardware description: Terratec Grabster AV400 [ 610.590565][ T975] microsoft 0003:045E:07DA.0011: no inputs found [ 610.604432][ T975] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 610.625286][ T6006] pvrusb2: ********** [ 610.628019][ T975] usb 2-1: USB disconnect, device number 67 [ 610.630800][ T6006] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 610.647916][ T6006] pvrusb2: Important functionality might not be entirely working. [ 610.655897][ T6006] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 610.668500][ T6006] pvrusb2: ********** [ 610.742765][T12569] fido_id[12569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 610.777394][ T2327] pvrusb2: Invalid write control endpoint [ 610.845936][T12574] misc userio: Can't change port type on an already running userio instance [ 610.961208][ T2327] pvrusb2: Invalid write control endpoint [ 610.968454][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 610.987517][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 611.003387][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 611.015198][T12565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.029110][ T2327] pvrusb2: Device being rendered inoperable [ 611.035812][T12565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.061810][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 611.073119][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 611.083241][ T2327] pvrusb2: Attached sub-driver cx25840 [ 611.089989][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 611.110960][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 616.307504][ T9] vhci_hcd: vhci_device speed not set [ 630.868419][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.008903][ T5838] usb 4-1: USB disconnect, device number 76 [ 632.267767][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.280119][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.306810][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.357154][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.364794][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.375238][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.383185][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 632.390514][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.416802][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.428739][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.467150][ T30] audit: type=1400 audit(2000000028.241:654): avc: denied { mounton } for pid=12592 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 632.585073][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 632.593926][T12594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 632.614887][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 632.617710][T12602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 632.631919][T12602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 632.632245][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 632.640658][T12602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 632.652045][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 632.655186][T12602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 632.668839][T12594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 632.669235][T12602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 632.675904][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 632.685636][T12602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 632.697803][T12602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 632.721161][T12602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 632.760724][ T7411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.950575][ T7411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.984857][T12590] hsr0 speed is unknown, defaulting to 1000 [ 633.013417][T12596] hsr0 speed is unknown, defaulting to 1000 [ 633.056881][T12595] hsr0 speed is unknown, defaulting to 1000 [ 633.089424][T12592] hsr0 speed is unknown, defaulting to 1000 [ 633.107433][T12599] hsr0 speed is unknown, defaulting to 1000 [ 633.135190][ T7411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.236971][ T7411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.366534][T12590] chnl_net:caif_netlink_parms(): no params data found [ 633.499885][T12595] chnl_net:caif_netlink_parms(): no params data found [ 633.695447][T12592] chnl_net:caif_netlink_parms(): no params data found [ 633.917177][ T7411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.930237][ T7411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.939843][ T7411] bond0 (unregistering): Released all slaves [ 633.956868][T12596] chnl_net:caif_netlink_parms(): no params data found [ 634.060303][T12590] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.074985][T12590] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.082461][T12590] bridge_slave_0: entered allmulticast mode [ 634.089624][T12590] bridge_slave_0: entered promiscuous mode [ 634.098193][T12590] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.105248][T12590] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.112744][T12590] bridge_slave_1: entered allmulticast mode [ 634.120260][T12590] bridge_slave_1: entered promiscuous mode [ 634.126789][T12595] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.133858][T12595] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.141103][T12595] bridge_slave_0: entered allmulticast mode [ 634.147813][T12595] bridge_slave_0: entered promiscuous mode [ 634.154527][T12599] chnl_net:caif_netlink_parms(): no params data found [ 634.200503][T12595] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.208235][T12595] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.215325][T12595] bridge_slave_1: entered allmulticast mode [ 634.225798][T12595] bridge_slave_1: entered promiscuous mode [ 634.291334][T12595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.309449][T12595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.342631][T12590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.405419][T12590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.434069][T12592] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.441239][T12592] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.448795][T12592] bridge_slave_0: entered allmulticast mode [ 634.455422][T12592] bridge_slave_0: entered promiscuous mode [ 634.470201][T12596] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.477347][ T5830] Bluetooth: hci1: command tx timeout [ 634.477902][ T5830] Bluetooth: hci0: command tx timeout [ 634.490226][T12596] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.499661][T12596] bridge_slave_0: entered allmulticast mode [ 634.507191][T12596] bridge_slave_0: entered promiscuous mode [ 634.515784][T12596] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.528867][T12596] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.538845][T12596] bridge_slave_1: entered allmulticast mode [ 634.546653][T12596] bridge_slave_1: entered promiscuous mode [ 634.578972][T12590] team0: Port device team_slave_0 added [ 634.592033][T12595] team0: Port device team_slave_0 added [ 634.604495][T12595] team0: Port device team_slave_1 added [ 634.634724][T12592] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.642206][T12592] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.652662][T12592] bridge_slave_1: entered allmulticast mode [ 634.669384][T12592] bridge_slave_1: entered promiscuous mode [ 634.705503][T12590] team0: Port device team_slave_1 added [ 634.782702][T12599] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.786686][ T5830] Bluetooth: hci4: command tx timeout [ 634.794064][T12602] Bluetooth: hci5: command tx timeout [ 634.795988][ T5830] Bluetooth: hci3: command tx timeout [ 634.802140][T12599] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.814882][T12599] bridge_slave_0: entered allmulticast mode [ 634.824224][T12599] bridge_slave_0: entered promiscuous mode [ 634.843686][ T7411] hsr_slave_0: left promiscuous mode [ 634.850032][ T7411] hsr_slave_1: left promiscuous mode [ 634.858105][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.865572][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.875929][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.889827][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.914341][ T7411] veth1_macvtap: left promiscuous mode [ 634.920505][ T7411] veth0_macvtap: left promiscuous mode [ 634.926506][ T7411] veth1_vlan: left promiscuous mode [ 634.932814][ T7411] veth0_vlan: left promiscuous mode [ 635.276438][ T7411] team0 (unregistering): Port device team_slave_1 removed [ 635.309020][ T7411] team0 (unregistering): Port device team_slave_0 removed [ 635.622751][T12595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.630161][T12595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.660736][T12595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.671764][T12599] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.679110][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.687182][T12599] bridge_slave_1: entered allmulticast mode [ 635.693897][T12599] bridge_slave_1: entered promiscuous mode [ 635.727542][T12592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.739712][T12596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.750216][T12590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.759591][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.787674][T12590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.799997][T12590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.807031][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.833598][T12590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.850433][T12595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.857537][T12595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.884067][T12595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.932111][T12592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.942995][T12596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.983707][T12599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.033692][T12596] team0: Port device team_slave_0 added [ 636.044216][T12596] team0: Port device team_slave_1 added [ 636.059667][T12599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.075020][T12592] team0: Port device team_slave_0 added [ 636.133263][T12595] hsr_slave_0: entered promiscuous mode [ 636.139756][T12595] hsr_slave_1: entered promiscuous mode [ 636.145700][T12595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.154233][T12595] Cannot create hsr debugfs directory [ 636.177687][T12592] team0: Port device team_slave_1 added [ 636.188854][T12590] hsr_slave_0: entered promiscuous mode [ 636.194996][T12590] hsr_slave_1: entered promiscuous mode [ 636.204917][T12590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.213024][T12590] Cannot create hsr debugfs directory [ 636.280861][T12596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.288160][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.315548][T12596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.328521][T12596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.335457][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.361512][T12596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.385040][T12599] team0: Port device team_slave_0 added [ 636.407948][T12592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.414913][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.475134][T12592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.492298][T12592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.500124][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.526337][T12592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.546411][ T5150] Bluetooth: hci0: command tx timeout [ 636.551882][ T5830] Bluetooth: hci1: command tx timeout [ 636.579700][T12599] team0: Port device team_slave_1 added [ 636.611789][T12596] hsr_slave_0: entered promiscuous mode [ 636.620883][T12596] hsr_slave_1: entered promiscuous mode [ 636.628241][T12596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.636090][T12596] Cannot create hsr debugfs directory [ 636.814620][T12599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.824708][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.851000][T12599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.866083][ T5150] Bluetooth: hci5: command tx timeout [ 636.866096][T12602] Bluetooth: hci4: command tx timeout [ 636.871512][ T5830] Bluetooth: hci3: command tx timeout [ 636.914015][T12592] hsr_slave_0: entered promiscuous mode [ 636.920625][T12592] hsr_slave_1: entered promiscuous mode [ 636.928451][T12592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.936361][T12592] Cannot create hsr debugfs directory [ 636.962258][T12599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.971441][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.998279][T12599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.038291][ T7411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.178652][ T7411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.236520][T12599] hsr_slave_0: entered promiscuous mode [ 637.242752][T12599] hsr_slave_1: entered promiscuous mode [ 637.253207][T12599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.261199][T12599] Cannot create hsr debugfs directory [ 637.374972][ T7411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.472436][ T7411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.542499][T12595] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 637.597682][T12595] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 637.620553][T12595] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 637.680619][T12595] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 637.855594][T12590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 637.887167][ T7411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.898116][ T7411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.917008][T12590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 637.943348][T12590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 637.955555][T12590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 638.015392][ T7411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.028929][ T7411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.098668][T12596] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 638.159407][ T7411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.171058][ T7411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.193431][T12596] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 638.252023][T12596] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 638.286820][ T7411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.298349][ T7411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.338905][T12596] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 638.507459][T12599] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 638.523178][T12599] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 638.535334][T12599] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 638.583852][T12595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.594638][T12599] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 638.637029][ T5830] Bluetooth: hci1: command tx timeout [ 638.637036][T12602] Bluetooth: hci0: command tx timeout [ 638.661766][T12590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.702231][ T7411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.735757][T12592] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 638.769290][T12590] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.776987][T12592] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 638.803314][ T7411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.825571][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.832726][ T7410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.843788][T12592] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 638.854369][T12595] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.874307][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.881482][ T7410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.892891][T12592] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 638.909418][T12596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.930797][ T7411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.946718][ T5830] Bluetooth: hci4: command tx timeout [ 638.946788][T12602] Bluetooth: hci3: command tx timeout [ 638.952101][ T5150] Bluetooth: hci5: command tx timeout [ 638.974747][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.981842][ T7407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.994007][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.001148][ T7407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.035580][ T7411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.094527][T12596] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.154656][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.161793][ T7410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.180690][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.186024][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 639.187787][ T7407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.214257][T12599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.359391][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.384189][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.391390][ T7408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.443108][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.450289][ T7408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.712765][T12592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.847219][T12590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.005348][T12592] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.044765][T12595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.092212][ T7404] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.100282][ T7404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.169624][ T7404] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.176789][ T7404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.203289][T12596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.706318][ T5150] Bluetooth: hci0: command tx timeout [ 640.720224][ T5150] Bluetooth: hci1: command tx timeout [ 640.782582][ T7411] dvmrp1 (unregistering): left allmulticast mode [ 640.881855][ T7411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.892580][ T7411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.906832][ T7411] bond0 (unregistering): Released all slaves [ 641.000685][ T7411] bond1 (unregistering): Released all slaves [ 641.025872][ T5830] Bluetooth: hci4: command tx timeout [ 641.026191][T12602] Bluetooth: hci3: command tx timeout [ 641.031390][ T5150] Bluetooth: hci5: command tx timeout [ 641.143029][ T7411] dvmrp0 (unregistering): left allmulticast mode [ 641.264482][ T7411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.274776][ T7411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.284499][ T7411] bond0 (unregistering): Released all slaves [ 641.374360][ T7411] bond1 (unregistering): (slave veth5): Releasing active interface [ 641.383372][ T7411] bond1 (unregistering): Released all slaves [ 641.533992][ T7411] bond1 (unregistering): Released all slaves [ 641.630996][ T7411] bond2 (unregistering): Released all slaves [ 641.689430][ T7411] tipc: Disabling bearer [ 641.727815][ T7411] bond1 (unregistering): (slave gretap1): Releasing active interface [ 641.865422][ T7411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.874996][ T7411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.884841][ T7411] bond0 (unregistering): Released all slaves [ 641.964385][ T7411] bond1 (unregistering): Released all slaves [ 642.010539][T12590] veth0_vlan: entered promiscuous mode [ 642.092716][T12599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.140009][T12590] veth1_vlan: entered promiscuous mode [ 642.228769][ T7411] : left promiscuous mode [ 642.295418][T12590] veth0_macvtap: entered promiscuous mode [ 642.368344][T12590] veth1_macvtap: entered promiscuous mode [ 642.386705][ T7411] tipc: Left network mode [ 642.443216][T12592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.492200][T12596] veth0_vlan: entered promiscuous mode [ 642.569000][T12595] veth0_vlan: entered promiscuous mode [ 642.660672][T12590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.685584][T12590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.710066][T12596] veth1_vlan: entered promiscuous mode [ 642.788306][T12590] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.799083][T12590] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.825810][T12590] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.834540][T12590] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.864640][T12595] veth1_vlan: entered promiscuous mode [ 643.054398][T12596] veth0_macvtap: entered promiscuous mode [ 643.087897][T12596] veth1_macvtap: entered promiscuous mode [ 643.102148][T12595] veth0_macvtap: entered promiscuous mode [ 643.143823][T12596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.162468][T12595] veth1_macvtap: entered promiscuous mode [ 643.191222][T12596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.225292][T12599] veth0_vlan: entered promiscuous mode [ 643.233914][ T7402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.250502][ T7402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.271229][T12595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.304483][T12596] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.318870][T12596] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.327908][T12596] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.337205][T12596] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.351883][T12595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.374899][ T7402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.377532][T12592] veth0_vlan: entered promiscuous mode [ 643.393429][ T7402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.414555][T12599] veth1_vlan: entered promiscuous mode [ 643.433783][T12592] veth1_vlan: entered promiscuous mode [ 643.458770][T12595] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.475837][T12595] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.484632][T12595] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.498064][T12595] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.524830][T12592] veth0_macvtap: entered promiscuous mode [ 643.544852][ T30] audit: type=1400 audit(2000000039.342:655): avc: denied { mounton } for pid=12590 comm="syz-executor" path="/root/syzkaller.H5wooA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 643.559135][T12599] veth0_macvtap: entered promiscuous mode [ 643.582915][ T30] audit: type=1400 audit(2000000039.342:656): avc: denied { mounton } for pid=12590 comm="syz-executor" path="/root/syzkaller.H5wooA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 643.619616][ T30] audit: type=1400 audit(2000000039.382:657): avc: denied { mounton } for pid=12590 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 643.693821][T12592] veth1_macvtap: entered promiscuous mode [ 643.700910][T12804] binder: 12803:12804 ioctl c0306201 200000000300 returned -14 [ 643.733899][T12599] veth1_macvtap: entered promiscuous mode [ 643.921823][T12592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.132716][ T7409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.172565][T12592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.193152][ T7409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.218373][T12592] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.228506][T12592] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.239342][T12592] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.248322][T12592] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.263039][T12599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.303302][T12599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.335496][ T7404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.350133][ T7404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.386830][ T7411] hsr_slave_0: left promiscuous mode [ 644.392842][ T7411] hsr_slave_1: left promiscuous mode [ 644.405507][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.415864][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.436915][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.444367][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.484401][ T7411] hsr_slave_0: left promiscuous mode [ 644.502950][ T7411] hsr_slave_1: left promiscuous mode [ 644.518848][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.535640][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.566303][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.573720][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.600123][ T7411] hsr_slave_0: left promiscuous mode [ 644.612989][ T7411] hsr_slave_1: left promiscuous mode [ 644.622439][ T7411] hsr_slave_0: left promiscuous mode [ 644.630079][ T7411] hsr_slave_1: left promiscuous mode [ 644.636487][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.646895][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.720846][ T7411] veth1_macvtap: left promiscuous mode [ 644.726397][ T7411] veth0_macvtap: left promiscuous mode [ 644.731918][ T7411] veth1_vlan: left promiscuous mode [ 644.737683][ T7411] veth0_vlan: left promiscuous mode [ 644.748363][ T7411] veth1_macvtap: left promiscuous mode [ 644.753885][ T7411] veth0_macvtap: left promiscuous mode [ 644.759723][ T7411] veth1_vlan: left promiscuous mode [ 644.764983][ T7411] veth0_vlan: left promiscuous mode [ 644.771259][ T7411] veth1_macvtap: left promiscuous mode [ 644.776877][ T7411] veth0_macvtap: left promiscuous mode [ 644.782394][ T7411] veth1_vlan: left promiscuous mode [ 644.789318][ T7411] veth0_vlan: left promiscuous mode [ 645.244212][ T7411] team0 (unregistering): Port device team_slave_1 removed [ 645.281699][ T7411] team0 (unregistering): Port device team_slave_0 removed [ 645.618853][ T7411] pimreg (unregistering): left allmulticast mode [ 645.893019][ T7411] team0 (unregistering): Port device team_slave_1 removed [ 645.927112][ T7411] team0 (unregistering): Port device team_slave_0 removed [ 647.063757][ T7411] team0 (unregistering): Port device team_slave_1 removed [ 647.370824][T12599] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.380597][T12599] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.393532][T12599] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.403089][T12599] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.422616][T12823] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1731'. [ 647.436651][ T5882] hsr0 speed is unknown, defaulting to 1000 [ 647.442569][ T5882] infiniband syz1: ib_query_port failed (-19) [ 647.515174][ T7410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.537258][ T7410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.589876][ T7409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.621328][ T7409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.994976][ T7409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.088809][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1726'. [ 648.185556][ T7409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.253912][ T7404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.297901][ T7404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.315222][ T7413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.331735][ T7413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.514097][ T7402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.525013][ T7402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.826292][T12853] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 648.836262][T12853] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 648.851341][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1736'. [ 648.860342][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1736'. [ 650.383548][ T48] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 650.591271][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1739'. [ 650.632232][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.672544][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.729784][ T48] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 650.791590][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.861724][ T48] usb 6-1: config 0 descriptor?? [ 650.891153][ T48] usbhid 6-1:0.0: can't add hid device: -22 [ 650.911442][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1740'. [ 650.946428][ T48] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 650.963011][T12882] netlink: set zone limit has 8 unknown bytes [ 652.874958][T12891] xt_CT: No such helper "pptp" [ 652.886654][ T30] audit: type=1326 audit(2000000048.652:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.7.1742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58fdf8e929 code=0x0 [ 652.911903][T12780] usb 6-1: USB disconnect, device number 2 [ 653.668210][ T7411] IPVS: stop unused estimator thread 0... [ 653.698646][T12883] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 653.698646][T12883] program syz.8.1738 not setting count and/or reply_len properly [ 654.001815][T12780] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 654.110177][T12918] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.117741][T12918] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.219564][T12780] usb 6-1: Using ep0 maxpacket: 8 [ 654.296955][T12918] bridge0: entered allmulticast mode [ 654.302471][T12780] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 654.387379][T12780] usb 6-1: config 0 has no interface number 0 [ 654.486009][T12780] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 654.606933][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.614468][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.685342][T12780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.941554][T12920] bridge0: entered allmulticast mode [ 654.952305][T12780] usb 6-1: config 0 descriptor?? [ 655.020590][T12922] bridge_slave_1: left allmulticast mode [ 655.058887][T12922] bridge_slave_1: left promiscuous mode [ 655.064688][T12922] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.101737][T12780] viperboard 6-1:0.143: version 0.00 found at bus 006 address 003 [ 655.199672][T12908] fuse: Bad value for 'group_id' [ 655.228717][T12922] bridge_slave_0: left allmulticast mode [ 655.234368][T12922] bridge_slave_0: left promiscuous mode [ 655.266821][T12908] fuse: Bad value for 'group_id' [ 655.286896][T12879] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 655.305683][T12780] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 655.335340][T12922] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.368859][T12780] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 655.555025][T12879] usb 7-1: Using ep0 maxpacket: 16 [ 655.561702][T12879] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 655.571973][T12879] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 655.617060][T12879] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 655.658720][T12879] usb 7-1: config 0 interface 0 has no altsetting 0 [ 655.715446][T12879] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 655.725348][T12879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.734096][T12879] usb 7-1: Product: syz [ 655.738873][T12879] usb 7-1: Manufacturer: syz [ 655.744567][T12879] usb 7-1: SerialNumber: syz [ 655.770771][T12879] usb 7-1: config 0 descriptor?? [ 655.928365][T12947] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 656.056727][T12929] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 656.097222][T12923] bridge_slave_1: left allmulticast mode [ 656.105579][T12923] bridge_slave_1: left promiscuous mode [ 656.128238][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.160620][ T30] audit: type=1400 audit(2000000051.952:659): avc: denied { write } for pid=12953 comm="syz.9.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 656.208038][T12923] bridge_slave_0: left allmulticast mode [ 656.276947][T12923] bridge_slave_0: left promiscuous mode [ 656.296051][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.349316][T12929] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 656.387915][T12879] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input30 [ 656.689268][T12958] binder: 12927:12958 ioctl 541b 0 returned -22 [ 656.766755][ T5838] usb 6-1: USB disconnect, device number 3 [ 658.257277][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1753'. [ 658.397261][ T975] usb 7-1: USB disconnect, device number 2 [ 659.324358][T12988] netlink: 'syz.5.1759': attribute type 10 has an invalid length. [ 659.334028][ T30] audit: type=1326 audit(2000000055.103:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 659.373875][T12988] team0: Device ipvlan1 failed to register rx_handler [ 659.596113][ T30] audit: type=1326 audit(2000000055.113:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 659.713236][ T30] audit: type=1326 audit(2000000055.113:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 659.874808][ T30] audit: type=1326 audit(2000000055.113:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 659.899775][ T30] audit: type=1326 audit(2000000055.113:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 659.927254][ T30] audit: type=1326 audit(2000000055.113:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 659.984621][T12995] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1761'. [ 660.457453][ T30] audit: type=1326 audit(2000000055.113:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 660.481168][ T30] audit: type=1326 audit(2000000055.113:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 660.533272][ T30] audit: type=1326 audit(2000000055.113:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 660.595695][ T30] audit: type=1326 audit(2000000055.213:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.5.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a718e929 code=0x7ffc0000 [ 661.951244][T13012] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 662.019494][T13009] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1765'. [ 662.028568][T13009] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1765'. [ 665.115140][T13058] IPv4: Oversized IP packet from 127.202.26.0 [ 665.613548][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1775'. [ 667.196063][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1782'. [ 667.537880][ T48] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 667.795669][ T48] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 667.803584][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 667.874368][ T48] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 667.918313][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 667.942034][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.944429][ T5838] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 667.949577][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.978985][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 668.017150][T13105] bridge0: entered allmulticast mode [ 668.028316][ T48] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 668.044621][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 668.074378][ T48] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.093043][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 668.124333][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 668.144787][ T5838] usb 7-1: Using ep0 maxpacket: 32 [ 668.145575][ T48] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 668.160699][ T5838] usb 7-1: descriptor type invalid, skip [ 668.164284][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 668.169056][ T5838] usb 7-1: descriptor type invalid, skip [ 668.188086][T13109] bridge_slave_1: left allmulticast mode [ 668.197053][ T5838] usb 7-1: descriptor type invalid, skip [ 668.197508][ T48] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.202696][ T5838] usb 7-1: descriptor type invalid, skip [ 668.202710][ T5838] usb 7-1: descriptor type invalid, skip [ 668.202722][ T5838] usb 7-1: descriptor type invalid, skip [ 668.231539][T13109] bridge_slave_1: left promiscuous mode [ 668.234121][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 668.237197][ T975] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 668.266442][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.286090][ T5838] usb 7-1: config 6 has an invalid interface number: 170 but max is 0 [ 668.298616][ T5838] usb 7-1: config 6 has no interface number 0 [ 668.306362][ T5838] usb 7-1: config 6 interface 170 has no altsetting 0 [ 668.404389][ T975] usb 9-1: device descriptor read/64, error -71 [ 668.479018][ T5838] usb 7-1: New USB device found, idVendor=0499, idProduct=105d, bcdDevice=7f.3f [ 668.488608][T13109] bridge_slave_0: left allmulticast mode [ 668.491445][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.502779][T13109] bridge_slave_0: left promiscuous mode [ 668.510861][ T5838] usb 7-1: Product: syz [ 668.516865][ T5838] usb 7-1: Manufacturer: syz [ 668.519366][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 668.521494][ T5838] usb 7-1: SerialNumber: syz [ 668.550078][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.563820][ T48] usb 6-1: string descriptor 0 read error: -22 [ 668.572161][ T48] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 668.583400][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.641859][ T48] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 668.704865][ T975] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 668.792449][ T5838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 668.846518][ T975] usb 9-1: device descriptor read/64, error -71 [ 668.883282][ T5838] snd-usb-audio 7-1:6.170: probe with driver snd-usb-audio failed with error -2 [ 668.926499][ T5838] usb 7-1: USB disconnect, device number 3 [ 669.132699][ T975] usb usb9-port1: attempt power cycle [ 669.484392][ T975] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 669.627485][ T6344] udevd[6344]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:6.170/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.785516][ T975] usb 9-1: device descriptor read/8, error -71 [ 670.036757][ T975] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 670.081600][ T975] usb 9-1: device descriptor read/8, error -71 [ 670.204782][ T975] usb usb9-port1: unable to enumerate USB device [ 670.386615][T13152] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 673.845362][T12780] usb 6-1: USB disconnect, device number 4 [ 675.100959][T13178] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.109809][T13178] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.150068][ T48] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 675.153352][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 675.153365][ T30] audit: type=1400 audit(2000000070.943:687): avc: denied { execute } for pid=13175 comm="syz.7.1796" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 675.234550][T13178] bridge0: entered allmulticast mode [ 675.477899][ T48] usb 9-1: Using ep0 maxpacket: 8 [ 675.492170][ T48] usb 9-1: device descriptor read/all, error -71 [ 675.553082][ T30] audit: type=1400 audit(2000000071.343:688): avc: denied { setopt } for pid=13195 comm="syz.7.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 675.577482][T13196] x_tables: ip_tables: osf match: only valid for protocol 6 [ 675.601184][T13187] bridge_slave_1: left allmulticast mode [ 675.716674][T13187] bridge_slave_1: left promiscuous mode [ 675.748787][T13187] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.790659][ T30] audit: type=1400 audit(2000000071.584:689): avc: denied { map } for pid=13195 comm="syz.7.1800" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 675.832749][ T30] audit: type=1400 audit(2000000071.584:690): avc: denied { write execute } for pid=13195 comm="syz.7.1800" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 675.876703][T13187] bridge_slave_0: left allmulticast mode [ 675.912935][T13187] bridge_slave_0: left promiscuous mode [ 675.935524][T13187] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.178298][T13224] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 677.729747][T13223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 677.737064][T13223] IPv6: NLM_F_CREATE should be set when creating new route [ 677.744365][T13223] IPv6: NLM_F_CREATE should be set when creating new route [ 677.751543][T13223] IPv6: NLM_F_CREATE should be set when creating new route [ 677.951661][ T30] audit: type=1400 audit(2000000073.744:691): avc: denied { append } for pid=13222 comm="syz.8.1806" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 678.201287][ T30] audit: type=1800 audit(2000000073.994:692): pid=13223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1806" name="/" dev="9p" ino=2 res=0 errno=0 [ 679.477040][T13250] netlink: 'syz.7.1812': attribute type 4 has an invalid length. [ 679.633815][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 679.889503][ T30] audit: type=1400 audit(2000000075.624:693): avc: denied { remount } for pid=13256 comm="syz.9.1814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 680.052467][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 680.282524][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 680.303304][ T9] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 680.398448][ T9] usb 6-1: Product: syz [ 680.445396][ T9] usb 6-1: Manufacturer: syz [ 680.515036][ T9] usb 6-1: SerialNumber: syz [ 680.709743][ T9] usb 6-1: config 0 descriptor?? [ 680.748225][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 680.843062][T13272] netlink: 'syz.6.1816': attribute type 2 has an invalid length. [ 680.972555][ T9] gspca_zc3xx: reg_r err -32 [ 681.641842][ T9] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 681.822125][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1820'. [ 681.864133][ T9] usb 6-1: USB disconnect, device number 5 [ 682.013498][ T6006] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 682.188507][ T6006] usb 10-1: config 9 has an invalid interface number: 19 but max is 0 [ 682.331526][ T6006] usb 10-1: config 9 has 2 interfaces, different from the descriptor's value: 1 [ 682.389700][ T30] audit: type=1400 audit(2000000078.184:694): avc: denied { write } for pid=13292 comm="syz.7.1822" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 682.419450][ T6006] usb 10-1: config 9 has no interface number 1 [ 682.427127][ T6006] usb 10-1: config 9 interface 19 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 682.546441][ T30] audit: type=1400 audit(2000000078.214:695): avc: denied { open } for pid=13292 comm="syz.7.1822" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 683.629967][ T6006] usb 10-1: config 9 interface 19 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.645376][ T6006] usb 10-1: config 9 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 684.609025][ T6006] usb 10-1: config 9 interface 0 has no altsetting 0 [ 684.629716][ T6006] usb 10-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=16.3f [ 684.639080][ T6006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.647224][ T6006] usb 10-1: Product: syz [ 684.651479][ T6006] usb 10-1: Manufacturer: syz [ 684.659228][ T6006] usb 10-1: SerialNumber: syz [ 685.824262][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.895205][ T6006] usb 10-1: can't set config #9, error -71 [ 686.902208][ T6006] usb 10-1: USB disconnect, device number 2 [ 687.049375][ T30] audit: type=1400 audit(2000000082.844:696): avc: denied { connect } for pid=13304 comm="syz.6.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 687.257805][ T30] audit: type=1400 audit(2000000083.054:697): avc: denied { bind } for pid=13310 comm="syz.7.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 687.284094][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1828'. [ 687.876225][ T5890] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 688.763266][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 688.770378][ T5890] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 688.792300][ T5890] usb 6-1: config 0 has no interface number 0 [ 688.818358][ T5890] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 688.833199][ T30] audit: type=1400 audit(2000000084.614:698): avc: denied { bind } for pid=13332 comm="syz.8.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 688.873149][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.895804][T13332] block nbd8: shutting down sockets [ 688.913378][ T5890] usb 6-1: config 0 descriptor?? [ 688.914149][ T30] audit: type=1400 audit(2000000084.614:699): avc: denied { ioctl } for pid=13332 comm="syz.8.1832" path="socket:[38720]" dev="sockfs" ino=38720 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 689.053450][ T5890] viperboard 6-1:0.143: version 0.00 found at bus 006 address 006 [ 689.078094][ T5890] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 689.113195][ T5890] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 689.156521][T13324] fuse: Bad value for 'group_id' [ 689.166611][T13324] fuse: Bad value for 'group_id' [ 690.611444][ T30] audit: type=1326 audit(2000000086.394:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.9.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5cbd858e7 code=0x7ffc0000 [ 690.647830][ T6006] usb 6-1: USB disconnect, device number 6 [ 690.853101][ T30] audit: type=1326 audit(2000000086.394:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.9.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5cbd2ab19 code=0x7ffc0000 [ 690.985359][ T30] audit: type=1326 audit(2000000086.394:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.9.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cbd8e929 code=0x7ffc0000 [ 691.113987][ T30] audit: type=1326 audit(2000000086.434:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.9.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5cbd858e7 code=0x7ffc0000 [ 691.302006][ T30] audit: type=1326 audit(2000000086.434:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.9.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5cbd2ab19 code=0x7ffc0000 [ 691.325551][ T30] audit: type=1326 audit(2000000086.434:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.9.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5cbd858e7 code=0x7ffc0000 [ 691.388460][ T30] audit: type=1326 audit(2000000086.434:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.9.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5cbd2ab19 code=0x7ffc0000 [ 691.414362][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1840'. [ 691.445732][T13368] Bluetooth: MGMT ver 1.23 [ 691.533594][ T30] audit: type=1326 audit(2000000086.434:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.9.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5cbd858e7 code=0x7ffc0000 [ 694.771564][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 694.771575][ T30] audit: type=1400 audit(2000000090.565:770): avc: denied { create } for pid=13400 comm="syz.5.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 694.812900][ T30] audit: type=1400 audit(2000000090.605:771): avc: denied { getopt } for pid=13400 comm="syz.5.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 695.152901][ T30] audit: type=1400 audit(2000000090.725:772): avc: denied { read } for pid=13400 comm="syz.5.1849" path="socket:[38874]" dev="sockfs" ino=38874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 695.851140][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1852'. [ 695.872582][T13413] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.032821][ T6006] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 696.168567][T13417] program syz.8.1856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.394518][ T6006] usb 10-1: Using ep0 maxpacket: 32 [ 696.412391][ T6006] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 696.442417][ T6006] usb 10-1: config 0 has no interface number 0 [ 696.534585][ T6006] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 696.556673][ T6006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.565313][ T6006] usb 10-1: Product: syz [ 696.572702][ T6006] usb 10-1: Manufacturer: syz [ 696.577570][ T6006] usb 10-1: SerialNumber: syz [ 696.585997][ T6006] usb 10-1: config 0 descriptor?? [ 696.593246][ T6006] smsc95xx v2.0.0 [ 696.596930][ T6006] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 697.281316][ T6006] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 697.295877][ T6006] usb 10-1: USB disconnect, device number 3 [ 697.304940][T13424] ./cgroup: Can't lookup blockdev [ 697.363002][ T30] audit: type=1400 audit(2000000093.155:773): avc: denied { node_bind } for pid=13422 comm="syz.6.1858" saddr=2001::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 698.572603][T12780] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 698.580288][ T6006] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 698.874757][T13446] netlink: 'syz.6.1866': attribute type 1 has an invalid length. [ 698.912646][T12780] usb 10-1: Using ep0 maxpacket: 32 [ 698.917994][ T6006] usb 6-1: Using ep0 maxpacket: 8 [ 698.953744][T12780] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.959732][T13446] bond1: entered promiscuous mode [ 698.970987][T13446] bond1: entered allmulticast mode [ 698.977713][ T6006] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 698.981374][T13450] geneve2: entered allmulticast mode [ 698.994321][T13450] bond1: (slave geneve2): making interface the new active one [ 698.996466][ T6006] usb 6-1: config 0 has no interface number 0 [ 699.003024][T13450] geneve2: entered promiscuous mode [ 699.012080][T12780] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.015416][T13450] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 699.048420][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1866'. [ 699.055037][ T6006] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 699.076778][T12780] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 699.102522][T12780] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.110783][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.136001][T12780] usb 10-1: config 0 descriptor?? [ 699.153322][ T6006] usb 6-1: config 0 descriptor?? [ 699.168351][T12780] hub 10-1:0.0: USB hub found [ 699.286514][ T6006] viperboard 6-1:0.143: version 0.00 found at bus 006 address 007 [ 699.347535][ T6006] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 699.368689][T12780] hub 10-1:0.0: config failed, hub has too many ports! (err -19) [ 699.399429][T13436] fuse: Bad value for 'group_id' [ 699.410033][ T6006] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 699.426715][T13436] fuse: Bad value for 'group_id' [ 699.573543][T13438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.586782][T13438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.758480][ T5890] usb 6-1: USB disconnect, device number 7 [ 700.063195][T12780] usbhid 10-1:0.0: can't add hid device: -71 [ 700.084264][T12780] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 700.134309][T12780] usb 10-1: USB disconnect, device number 4 [ 701.466209][ T30] audit: type=1400 audit(2000000097.235:774): avc: denied { name_bind } for pid=13476 comm="syz.5.1874" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 701.843290][T13480] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1870'. [ 704.486348][T13510] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1879'. [ 704.497667][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1879'. [ 704.525384][T13506] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1880'. [ 704.537372][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1880'. [ 705.349102][ T30] audit: type=1400 audit(2000000101.145:775): avc: denied { create } for pid=13523 comm="syz.8.1885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 707.957279][T13518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.934113][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1892'. [ 709.460856][T13574] ALSA: mixer_oss: invalid index 40000 [ 709.767052][T13581] comedi comedi3: fl512: a I/O base address must be specified [ 710.354470][ T30] audit: type=1400 audit(2000000106.155:776): avc: denied { read write } for pid=13584 comm="syz.8.1900" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 710.407246][T13585] SELinux: failed to load policy [ 710.448802][ T30] audit: type=1400 audit(2000000106.155:777): avc: denied { open } for pid=13584 comm="syz.8.1900" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 710.521296][ T30] audit: type=1400 audit(2000000106.205:778): avc: denied { load_policy } for pid=13584 comm="syz.8.1900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 710.535563][T13586] mmap: syz.5.1901 (13586): VmData 37597184 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 710.581952][ T30] audit: type=1400 audit(2000000106.275:779): avc: denied { write } for pid=13586 comm="syz.5.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 710.644976][ T30] audit: type=1400 audit(2000000106.275:780): avc: denied { read } for pid=13586 comm="syz.5.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 710.772093][ T975] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 711.061997][ T975] usb 9-1: Using ep0 maxpacket: 8 [ 711.098320][ T975] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 711.201337][ T975] usb 9-1: config 0 has no interface number 0 [ 711.238509][ T975] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 711.248091][ T975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.454849][ T975] usb 9-1: config 0 descriptor?? [ 711.579877][ T975] viperboard 9-1:0.143: version 0.00 found at bus 009 address 008 [ 711.653185][ T975] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 711.706580][T13589] fuse: Bad value for 'group_id' [ 711.713379][T13589] fuse: Bad value for 'group_id' [ 711.764894][ T30] audit: type=1400 audit(2000000107.566:781): avc: denied { read } for pid=13603 comm="syz.9.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 712.031837][ T975] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 714.548152][T13121] usb 9-1: USB disconnect, device number 8 [ 714.750575][ T30] audit: type=1400 audit(2000000110.536:782): avc: denied { append } for pid=13638 comm="syz.8.1916" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 715.835736][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1918'. [ 717.021580][ T30] audit: type=1400 audit(2000000112.696:783): avc: denied { ioctl } for pid=13659 comm="syz.6.1923" path="socket:[41148]" dev="sockfs" ino=41148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 717.021693][T13663] netlink: 'syz.6.1923': attribute type 11 has an invalid length. [ 717.089043][ T30] audit: type=1400 audit(2000000112.886:784): avc: denied { name_bind 0x1000000 } for pid=13661 comm="syz.7.1922" path="socket:[41149]" dev="sockfs" ino=41149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 717.323843][ T30] audit: type=1400 audit(2000000113.116:785): avc: denied { watch watch_reads } for pid=13668 comm="syz.6.1925" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 718.402645][T13686] 9pnet_fd: Insufficient options for proto=fd [ 718.897135][T13681] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1928'. [ 718.920159][T13680] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1928'. [ 719.096243][ T30] audit: type=1800 audit(2000000114.896:786): pid=13691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1930" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 719.521491][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 719.530452][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1934'. [ 719.548565][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1931'. [ 719.753320][ T30] audit: type=1400 audit(2000000115.446:787): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.186 dest=34148 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 719.861840][ T5897] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 720.031782][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 720.119954][ T30] audit: type=1400 audit(2000000115.896:788): avc: denied { create } for pid=13711 comm="syz.7.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 720.152227][ T30] audit: type=1400 audit(2000000115.906:789): avc: denied { write } for pid=13711 comm="syz.7.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 720.152312][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.213324][ T30] audit: type=1400 audit(2000000115.906:790): avc: denied { setopt } for pid=13711 comm="syz.7.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 720.238464][ T5897] usb 10-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 720.279809][ T5897] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.303159][ T5897] usb 10-1: config 0 descriptor?? [ 720.536573][T13725] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 721.076481][ T5897] logitech 0003:046D:C211.0012: unknown main item tag 0x1 [ 721.091888][ T5890] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 721.092663][ T5897] logitech 0003:046D:C211.0012: hidraw0: USB HID v0.00 Device [HID 046d:c211] on usb-dummy_hcd.9-1/input0 [ 721.188750][ T5897] logitech 0003:046D:C211.0012: no inputs found [ 721.309381][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1944'. [ 721.352277][ T5897] usb 10-1: USB disconnect, device number 5 [ 721.352925][ T5890] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 721.406361][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.440689][ T5890] usb 6-1: config 0 descriptor?? [ 721.457249][ T5890] cp210x 6-1:0.0: cp210x converter detected [ 723.545518][ T5890] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 723.555785][ T5890] cp210x 6-1:0.0: querying part number failed [ 723.581268][ T5890] usb 6-1: cp210x converter now attached to ttyUSB0 [ 723.592646][ T5890] usb 6-1: USB disconnect, device number 8 [ 723.709994][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 723.721948][ T5890] cp210x 6-1:0.0: device disconnected [ 723.832761][T13758] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1951'. [ 723.846242][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1951'. [ 725.341224][T13121] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 725.505744][T13121] usb 6-1: config 0 has no interfaces? [ 725.513163][T13121] usb 6-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 725.522362][T13121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.538131][T13121] usb 6-1: Product: syz [ 725.548230][T13121] usb 6-1: Manufacturer: syz [ 725.555816][T13121] usb 6-1: SerialNumber: syz [ 725.573241][T13121] usb 6-1: config 0 descriptor?? [ 726.125870][ T30] audit: type=1400 audit(2000000121.636:791): avc: denied { setattr } for pid=13771 comm="syz.7.1956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 726.161110][T13121] IPVS: starting estimator thread 0... [ 726.271107][T13782] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 726.291684][ T30] audit: type=1400 audit(2000000122.066:792): avc: denied { mounton } for pid=13762 comm="syz.5.1953" path="/45/bus" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 726.329551][T13781] IPVS: using max 43 ests per chain, 103200 per kthread [ 726.400721][ T5897] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 726.442615][ T5838] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 726.621275][ T5897] usb 9-1: Using ep0 maxpacket: 32 [ 726.630725][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.649058][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.652825][ T5838] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 726.660042][ T5897] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 726.683651][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.699662][ T5897] usb 9-1: config 0 descriptor?? [ 726.714848][ T5838] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 726.719087][ T5897] hub 9-1:0.0: USB hub found [ 726.769343][ T5838] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 726.781877][ T5838] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 726.820425][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.865417][T12780] usb 6-1: USB disconnect, device number 9 [ 726.876518][T13778] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 726.889483][ T5838] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.920680][ T5897] hub 9-1:0.0: config failed, hub has too many ports! (err -19) [ 727.124535][T13777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.133210][T13777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.303950][ T5897] usbhid 9-1:0.0: can't add hid device: -71 [ 727.317302][ T5897] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 727.353797][ T5897] usb 9-1: USB disconnect, device number 9 [ 728.606622][T12780] usb 10-1: USB disconnect, device number 6 [ 728.980446][T13807] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1964'. [ 728.994273][T13807] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1964'. [ 729.630912][T12780] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 729.794398][T12780] usb 10-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 729.821891][T12780] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.839996][ T30] audit: type=1400 audit(2000000125.637:793): avc: denied { setopt } for pid=13817 comm="syz.5.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 729.860544][T12780] usb 10-1: Product: syz [ 729.865108][T12780] usb 10-1: Manufacturer: syz [ 729.869793][T12780] usb 10-1: SerialNumber: syz [ 729.892985][T12780] usb 10-1: config 0 descriptor?? [ 729.906384][T12780] gm12u320 10-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 729.946839][T12780] gm12u320 10-1:0.0: probe with driver gm12u320 failed with error -5 [ 729.972033][T12780] usb-storage 10-1:0.0: USB Mass Storage device detected [ 729.999954][T12780] usb-storage 10-1:0.0: device ignored [ 730.154919][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1971'. [ 730.535318][ T5897] usb 10-1: USB disconnect, device number 7 [ 730.547140][ T5150] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 730.558034][ T5150] Bluetooth: hci0: Injecting HCI hardware error event [ 730.567248][ T5150] Bluetooth: hci0: hardware error 0x00 [ 730.870883][T13845] FAULT_INJECTION: forcing a failure. [ 730.870883][T13845] name failslab, interval 1, probability 0, space 0, times 0 [ 730.883794][T13845] CPU: 0 UID: 0 PID: 13845 Comm: syz.7.1976 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 730.883819][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.883829][T13845] Call Trace: [ 730.883833][T13845] [ 730.883837][T13845] dump_stack_lvl+0x16c/0x1f0 [ 730.883858][T13845] should_fail_ex+0x512/0x640 [ 730.883875][T13845] should_failslab+0xc2/0x120 [ 730.883891][T13845] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 730.883908][T13845] ? skb_clone+0x190/0x3f0 [ 730.883925][T13845] skb_clone+0x190/0x3f0 [ 730.883940][T13845] dev_queue_xmit_nit+0x3e7/0xca0 [ 730.883960][T13845] dev_hard_start_xmit+0x5c3/0x740 [ 730.883973][T13845] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 730.883988][T13845] __dev_queue_xmit+0x7eb/0x43e0 [ 730.884006][T13845] ? __pfx___dev_queue_xmit+0x10/0x10 [ 730.884028][T13845] ? __asan_memcpy+0x3c/0x60 [ 730.884042][T13845] ? __asan_memcpy+0x3c/0x60 [ 730.884056][T13845] ? __skb_clone+0x570/0x760 [ 730.884071][T13845] netlink_deliver_tap+0xa87/0xd30 [ 730.884092][T13845] netlink_unicast+0x5df/0x7f0 [ 730.884104][T13845] ? __pfx_netlink_unicast+0x10/0x10 [ 730.884118][T13845] netlink_sendmsg+0x8d1/0xdd0 [ 730.884130][T13845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.884146][T13845] ____sys_sendmsg+0xa95/0xc70 [ 730.884157][T13845] ? copy_msghdr_from_user+0x10a/0x160 [ 730.884172][T13845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 730.884189][T13845] ___sys_sendmsg+0x134/0x1d0 [ 730.884204][T13845] ? __pfx____sys_sendmsg+0x10/0x10 [ 730.884217][T13845] ? __lock_acquire+0x622/0x1c90 [ 730.884243][T13845] __sys_sendmsg+0x16d/0x220 [ 730.884258][T13845] ? __pfx___sys_sendmsg+0x10/0x10 [ 730.884280][T13845] do_syscall_64+0xcd/0x4c0 [ 730.884301][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.884312][T13845] RIP: 0033:0x7f58fdf8e929 [ 730.884322][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.884332][T13845] RSP: 002b:00007f58fee72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.884342][T13845] RAX: ffffffffffffffda RBX: 00007f58fe1b5fa0 RCX: 00007f58fdf8e929 [ 730.884349][T13845] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 730.884355][T13845] RBP: 00007f58fee72090 R08: 0000000000000000 R09: 0000000000000000 [ 730.884361][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.884368][T13845] R13: 0000000000000000 R14: 00007f58fe1b5fa0 R15: 00007fff92a63a28 [ 730.884380][T13845] [ 731.267452][T13848] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1979'. [ 731.681390][T13859] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1980'. [ 731.741892][T13861] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1980'. [ 732.126817][T13848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.195412][T13848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.209296][T13848] bond0 (unregistering): Released all slaves [ 732.278631][ C1] sd 0:0:1:0: [sda] tag#4203 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 732.289053][ C1] sd 0:0:1:0: [sda] tag#4203 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 732.640885][ T5150] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 733.102402][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1984'. [ 733.335293][T13882] veth1_to_bond: entered allmulticast mode [ 733.394711][T13882] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1987'. [ 733.540705][ T6006] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 733.940642][ T6006] usb 10-1: Using ep0 maxpacket: 32 [ 733.971654][ T6006] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 733.979852][ T6006] usb 10-1: config 0 has no interface number 0 [ 734.019917][ T6006] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 734.045533][ T6006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.054013][ T6006] usb 10-1: Product: syz [ 734.092343][ T6006] usb 10-1: Manufacturer: syz [ 734.120178][ T6006] usb 10-1: SerialNumber: syz [ 734.248167][ T6006] usb 10-1: config 0 descriptor?? [ 734.336168][ T6006] smsc95xx v2.0.0 [ 734.378774][ T6006] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 734.709648][ T5150] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 734.720344][ T5150] CPU: 1 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 734.720363][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 734.720372][ T5150] Workqueue: hci4 hci_rx_work [ 734.720396][ T5150] Call Trace: [ 734.720400][ T5150] [ 734.720405][ T5150] dump_stack_lvl+0x16c/0x1f0 [ 734.720422][ T5150] sysfs_warn_dup+0x7f/0xa0 [ 734.720439][ T5150] sysfs_create_dir_ns+0x24b/0x2b0 [ 734.720469][ T5150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 734.720503][ T5150] ? find_held_lock+0x2b/0x80 [ 734.720531][ T5150] ? do_raw_spin_unlock+0x172/0x230 [ 734.720552][ T5150] kobject_add_internal+0x2c4/0x9b0 [ 734.720578][ T5150] kobject_add+0x16e/0x240 [ 734.720588][ T5150] ? __pfx_kobject_add+0x10/0x10 [ 734.720599][ T5150] ? do_raw_spin_unlock+0x172/0x230 [ 734.720611][ T5150] ? kobject_put+0xab/0x5a0 [ 734.720631][ T5150] device_add+0x288/0x1a70 [ 734.720643][ T5150] ? __pfx_dev_set_name+0x10/0x10 [ 734.720656][ T5150] ? __pfx_device_add+0x10/0x10 [ 734.720668][ T5150] ? mgmt_send_event_skb+0x2fb/0x460 [ 734.720687][ T5150] hci_conn_add_sysfs+0x17e/0x230 [ 734.720704][ T5150] le_conn_complete_evt+0x1075/0x1d70 [ 734.720723][ T5150] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 734.720738][ T5150] ? hci_event_packet+0x459/0x11c0 [ 734.720758][ T5150] hci_le_conn_complete_evt+0x23c/0x370 [ 734.720777][ T5150] hci_le_meta_evt+0x357/0x5e0 [ 734.720793][ T5150] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 734.720810][ T5150] hci_event_packet+0x682/0x11c0 [ 734.720825][ T5150] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 734.720842][ T5150] ? __pfx_hci_event_packet+0x10/0x10 [ 734.720858][ T5150] ? kcov_remote_start+0x3c9/0x6d0 [ 734.720871][ T5150] ? lockdep_hardirqs_on+0x7c/0x110 [ 734.720889][ T5150] hci_rx_work+0x2c5/0x16b0 [ 734.720906][ T5150] ? rcu_is_watching+0x12/0xc0 [ 734.720922][ T5150] process_one_work+0x9cf/0x1b70 [ 734.720938][ T5150] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 734.720954][ T5150] ? __pfx_process_one_work+0x10/0x10 [ 734.720970][ T5150] ? assign_work+0x1a0/0x250 [ 734.720988][ T5150] worker_thread+0x6c8/0xf10 [ 734.721006][ T5150] ? __pfx_worker_thread+0x10/0x10 [ 734.721018][ T5150] kthread+0x3c2/0x780 [ 734.721029][ T5150] ? __pfx_kthread+0x10/0x10 [ 734.721041][ T5150] ? rcu_is_watching+0x12/0xc0 [ 734.721055][ T5150] ? __pfx_kthread+0x10/0x10 [ 734.721067][ T5150] ret_from_fork+0x5d4/0x6f0 [ 734.721087][ T5150] ? __pfx_kthread+0x10/0x10 [ 734.721097][ T5150] ret_from_fork_asm+0x1a/0x30 [ 734.721117][ T5150] [ 734.772102][ T30] audit: type=1400 audit(2000000130.447:794): avc: denied { accept } for pid=13902 comm="syz.7.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 734.774962][ T5150] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 735.004329][ T5150] Bluetooth: hci4: failed to register connection device [ 735.016304][ T6006] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 735.074690][T13911] netlink: 176 bytes leftover after parsing attributes in process `syz.9.1986'. [ 735.084111][T13911] netlink: 176 bytes leftover after parsing attributes in process `syz.9.1986'. [ 735.163696][T13913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.179481][T13913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.653634][T13924] option changes via remount are deprecated (pid=13921 comm=syz.5.1996) [ 735.930037][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1997'. [ 736.692143][ T975] usb 10-1: USB disconnect, device number 8 [ 737.610505][T12780] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 737.856076][ T30] audit: type=1400 audit(2000000133.657:795): avc: denied { map } for pid=13954 comm="syz.8.2006" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 737.898601][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2005'. [ 738.070373][T12780] usb 6-1: device descriptor read/64, error -71 [ 739.304639][T12780] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 739.684046][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2009'. [ 739.700258][T12780] usb 6-1: device descriptor read/64, error -71 [ 739.820809][T12780] usb usb6-port1: attempt power cycle [ 739.872187][T13977] geneve2: entered promiscuous mode [ 740.172958][T12780] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 740.200128][ T30] audit: type=1400 audit(2000000135.997:796): avc: denied { append } for pid=13980 comm="syz.5.2013" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 740.368377][ T30] audit: type=1400 audit(2000000136.167:797): avc: denied { write } for pid=13983 comm="syz.7.2014" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 740.380468][ T5897] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 740.404355][T12780] usb 6-1: device not accepting address 12, error -71 [ 740.552479][ T30] audit: type=1400 audit(2000000136.357:798): avc: denied { create } for pid=13983 comm="syz.7.2014" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 740.790244][ T5897] usb 9-1: Using ep0 maxpacket: 8 [ 740.800053][ T5897] usb 9-1: config 5 has an invalid interface number: 151 but max is 0 [ 740.824512][ T5897] usb 9-1: config 5 has no interface number 0 [ 740.837078][ T5897] usb 9-1: config 5 interface 151 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 740.858560][ T5897] usb 9-1: config 5 interface 151 altsetting 0 endpoint 0x8 has invalid maxpacket 17409, setting to 64 [ 741.010769][ T5897] usb 9-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1e.b5 [ 741.080000][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.089863][ T5897] usb 9-1: Product: syz [ 741.097699][ T5897] usb 9-1: Manufacturer: syz [ 741.107372][ T5897] usb 9-1: SerialNumber: syz [ 741.157491][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2018'. [ 741.205672][T13998] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 741.263363][T13998] macsec1: entered allmulticast mode [ 741.268696][T13998] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 741.288177][T13998] mac80211_hwsim hwsim13 wlan0: left allmulticast mode [ 741.295278][T13998] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 741.345396][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.355520][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.376045][ T48] usb 9-1: USB disconnect, device number 10 [ 741.567865][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2022'. [ 742.025588][ T5897] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 742.240330][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 742.255618][ T5897] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 742.734057][ T5897] usb 7-1: config 0 has no interface number 0 [ 742.759853][ T5897] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 742.783322][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.806119][ T5897] usb 7-1: config 0 descriptor?? [ 742.920763][ T5897] viperboard 7-1:0.143: version 0.00 found at bus 007 address 004 [ 742.936868][ T5897] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 742.948447][ T5897] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 743.009646][T13121] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 743.024138][T14001] fuse: Bad value for 'group_id' [ 743.029110][T14001] fuse: Bad value for 'group_id' [ 743.060211][ T5838] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 743.170186][T13121] usb 10-1: Using ep0 maxpacket: 32 [ 743.179265][T13121] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.190702][T13121] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.200801][T13121] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 743.210287][T13121] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.220081][ T5838] usb 9-1: Using ep0 maxpacket: 32 [ 743.225316][T13121] usb 10-1: config 0 descriptor?? [ 743.232227][ T5838] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 743.242815][T13121] hub 10-1:0.0: USB hub found [ 743.249045][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.258805][ T5838] usb 9-1: config 0 descriptor?? [ 743.266238][ T5838] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 743.445076][T13121] hub 10-1:0.0: config failed, hub has too many ports! (err -19) [ 743.650071][T14019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.658913][T14019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.683564][T13121] usbhid 10-1:0.0: can't add hid device: -71 [ 743.695814][T13121] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 743.722984][T13121] usb 10-1: USB disconnect, device number 9 [ 744.623922][ T30] audit: type=1400 audit(2000000140.427:799): avc: denied { connect } for pid=14020 comm="syz.8.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 744.653557][ T48] usb 7-1: USB disconnect, device number 4 [ 744.691478][ T30] audit: type=1400 audit(2000000140.487:800): avc: denied { bind } for pid=14020 comm="syz.8.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 744.776812][ T30] audit: type=1400 audit(2000000140.487:801): avc: denied { listen } for pid=14020 comm="syz.8.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 744.801446][ T5838] gspca_nw80x: reg_w err -110 [ 744.801458][ T30] audit: type=1400 audit(2000000140.487:802): avc: denied { accept } for pid=14020 comm="syz.8.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 744.897059][ T5838] nw80x 9-1:0.0: probe with driver nw80x failed with error -110 [ 745.003869][T14056] sd 0:0:1:0: PR command failed: 1026 [ 745.009471][T14056] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 745.020694][T14056] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 745.104355][T14058] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 746.294841][ T5890] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 746.703287][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.706517][ T6006] usb 9-1: USB disconnect, device number 11 [ 746.728932][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.741407][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.760038][ T5890] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 746.778736][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.839323][ T5890] usb 7-1: config 0 descriptor?? [ 746.882784][T14081] overlay: filesystem on ./bus not supported as upperdir [ 747.050273][ T48] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 747.103905][T14070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.112525][T14070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.358620][ T5890] usbhid 7-1:0.0: can't add hid device: -71 [ 747.359800][ T48] usb 8-1: Using ep0 maxpacket: 32 [ 747.381265][ T48] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.385784][ T5890] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 747.397175][ T48] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.404083][ T5890] usb 7-1: USB disconnect, device number 5 [ 747.483201][ T48] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 747.492626][ T48] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.544754][T14102] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 747.842726][ T48] usb 8-1: config 0 descriptor?? [ 747.857739][ T48] hub 8-1:0.0: USB hub found [ 747.879996][ T975] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 748.203084][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 748.213849][ T48] hub 8-1:0.0: config failed, hub has too many ports! (err -19) [ 748.221671][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.221715][ T975] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 748.221736][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.225754][ T975] usb 6-1: config 0 descriptor?? [ 748.405402][T14117] netlink: 'syz.9.2051': attribute type 12 has an invalid length. [ 748.423135][T14085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.434767][T14085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.491678][ T48] usbhid 8-1:0.0: can't add hid device: -71 [ 748.499842][ T48] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 748.646169][ T48] usb 8-1: USB disconnect, device number 2 [ 748.662674][ T975] hid-generic 0003:04F3:0754.0013: failed to start in urb: -90 [ 748.672638][ T975] hid-generic 0003:04F3:0754.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.5-1/input0 [ 749.298057][ T6006] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 749.499764][ T6006] usb 10-1: Using ep0 maxpacket: 8 [ 749.599584][ T6006] usb 10-1: config 0 has an invalid interface number: 143 but max is 0 [ 749.785294][ T6006] usb 10-1: config 0 has no interface number 0 [ 749.869723][ T6006] usb 10-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 749.899367][ T6006] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.923264][ T6006] usb 10-1: config 0 descriptor?? [ 750.115621][ T6006] viperboard 10-1:0.143: version 0.00 found at bus 010 address 010 [ 750.408364][ T6006] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 750.447617][T14144] fuse: Bad value for 'fd' [ 750.675359][ T6006] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 750.908835][ T6006] usb 6-1: USB disconnect, device number 14 [ 751.621914][ T5150] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 751.974203][T13121] usb 10-1: USB disconnect, device number 10 [ 752.075703][T14168] overlayfs: failed to resolve './file0': -2 [ 759.019462][T12594] Bluetooth: hci3: command 0x0406 tx timeout [ 759.025519][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 759.036867][T12602] Bluetooth: hci5: command 0x0406 tx timeout [ 759.040599][T12594] Bluetooth: hci4: command 0x0406 tx timeout [ 777.426835][ T30] audit: type=1400 audit(2000000173.229:803): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 777.451434][ T30] audit: type=1400 audit(2000000173.229:804): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 808.141708][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.577025][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 899.011392][ T31] INFO: task kworker/1:1:48 blocked for more than 143 seconds. [ 899.018972][ T31] Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 [ 899.026624][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.035325][ T31] task:kworker/1:1 state:D stack:21944 pid:48 tgid:48 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 899.047366][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 899.054078][ T31] Call Trace: [ 899.057346][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 899.060256][ T31] __schedule+0x116a/0x5de0 [ 899.064811][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 899.069768][ T31] ? __pfx___schedule+0x10/0x10 [ 899.074189][ T30] audit: type=1400 audit(2000000294.876:805): avc: denied { recv } for pid=7409 comm="kworker/u8:28" saddr=10.128.0.169 src=38748 daddr=10.128.1.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 899.074836][ T31] ? find_held_lock+0x2b/0x80 [ 899.105538][ T31] ? schedule+0x2d7/0x3a0 [ 899.109885][ T31] schedule+0xe7/0x3a0 [ 899.113999][ T31] schedule_preempt_disabled+0x13/0x30 [ 899.119471][ T31] __mutex_lock+0x6c7/0xb90 [ 899.124043][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 899.141238][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 899.146306][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 899.185528][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 899.196110][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 899.202515][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 899.208884][ T31] process_one_work+0x9cf/0x1b70 [ 899.214118][ T31] ? __pfx_process_one_work+0x10/0x10 [ 899.219511][ T31] ? assign_work+0x1a0/0x250 [ 899.224165][ T31] worker_thread+0x6c8/0xf10 [ 899.230292][ T31] ? __pfx_worker_thread+0x10/0x10 [ 899.241163][ T31] kthread+0x3c2/0x780 [ 899.245512][ T31] ? __pfx_kthread+0x10/0x10 [ 899.250083][ T31] ? rcu_is_watching+0x12/0xc0 [ 899.255442][ T31] ? __pfx_kthread+0x10/0x10 [ 899.260058][ T31] ret_from_fork+0x5d4/0x6f0 [ 899.264651][ T31] ? __pfx_kthread+0x10/0x10 [ 899.269324][ T31] ret_from_fork_asm+0x1a/0x30 [ 899.274159][ T31] [ 899.277273][ T31] INFO: task kworker/1:2:12780 blocked for more than 143 seconds. [ 899.285126][ T31] Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 [ 899.292823][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.301919][ T31] task:kworker/1:2 state:D stack:22904 pid:12780 tgid:12780 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 899.313972][ T31] Workqueue: events rfkill_sync_work [ 899.319268][ T31] Call Trace: [ 899.322554][ T31] [ 899.325483][ T31] __schedule+0x116a/0x5de0 [ 899.329969][ T31] ? find_held_lock+0x2b/0x80 [ 899.334739][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 899.340565][ T31] ? __pfx___schedule+0x10/0x10 [ 899.345436][ T31] ? find_held_lock+0x2b/0x80 [ 899.350103][ T31] ? schedule+0x2d7/0x3a0 [ 899.354595][ T31] schedule+0xe7/0x3a0 [ 899.358678][ T31] schedule_preempt_disabled+0x13/0x30 [ 899.364320][ T31] __mutex_lock+0x6c7/0xb90 [ 899.368809][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 899.373840][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 899.378412][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 899.383446][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 899.388451][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 899.393049][ T31] ? mark_held_locks+0x49/0x80 [ 899.397800][ T31] nfc_dev_down+0x2d/0x2e0 [ 899.402708][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 899.407739][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 899.413805][ T31] rfkill_set_block+0x1fb/0x550 [ 899.418682][ T31] rfkill_sync+0x10a/0x1c0 [ 899.423133][ T31] rfkill_sync_work+0x27/0x40 [ 899.427815][ T31] process_one_work+0x9cf/0x1b70 [ 899.432806][ T31] ? __pfx_process_one_work+0x10/0x10 [ 899.438181][ T31] ? assign_work+0x1a0/0x250 [ 899.443300][ T31] worker_thread+0x6c8/0xf10 [ 899.447876][ T31] ? __pfx_worker_thread+0x10/0x10 [ 899.452991][ T31] kthread+0x3c2/0x780 [ 899.457050][ T31] ? __pfx_kthread+0x10/0x10 [ 899.461656][ T31] ? rcu_is_watching+0x12/0xc0 [ 899.466430][ T31] ? __pfx_kthread+0x10/0x10 [ 899.470997][ T31] ret_from_fork+0x5d4/0x6f0 [ 899.475622][ T31] ? __pfx_kthread+0x10/0x10 [ 899.480220][ T31] ret_from_fork_asm+0x1a/0x30 [ 899.485027][ T31] [ 899.488042][ T31] INFO: task syz.8.2054:14125 blocked for more than 143 seconds. [ 899.495786][ T31] Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 [ 899.503923][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.512628][ T31] task:syz.8.2054 state:D stack:24504 pid:14125 tgid:14125 ppid:12595 task_flags:0x400040 flags:0x00004004 [ 899.524564][ T31] Call Trace: [ 899.527820][ T31] [ 899.530730][ T31] __schedule+0x116a/0x5de0 [ 899.535236][ T31] ? __pfx___schedule+0x10/0x10 [ 899.540082][ T31] ? find_held_lock+0x2b/0x80 [ 899.544770][ T31] ? schedule+0x2d7/0x3a0 [ 899.549082][ T31] schedule+0xe7/0x3a0 [ 899.553189][ T31] schedule_timeout+0x257/0x290 [ 899.558039][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 899.563413][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 899.568588][ T31] __wait_for_common+0x2ff/0x4e0 [ 899.573545][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 899.578918][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 899.584382][ T31] ? find_held_lock+0x2b/0x80 [ 899.589037][ T31] ? __flush_work+0x938/0xcc0 [ 899.593715][ T31] ? __flush_work+0x4d0/0xcc0 [ 899.598368][ T31] __flush_work+0x7d7/0xcc0 [ 899.603486][ T31] ? __pfx___flush_work+0x10/0x10 [ 899.608525][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 899.613858][ T31] ? __pfx___might_resched+0x10/0x10 [ 899.619155][ T31] __cancel_work_sync+0x10c/0x130 [ 899.624182][ T31] rfkill_unregister+0x95/0x2c0 [ 899.629017][ T31] nfc_unregister_device+0x94/0x330 [ 899.634251][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 899.639967][ T31] virtual_ncidev_close+0x4b/0xa0 [ 899.645014][ T31] __fput+0x402/0xb70 [ 899.648979][ T31] task_work_run+0x150/0x240 [ 899.653758][ T31] ? __pfx_task_work_run+0x10/0x10 [ 899.658867][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 899.664618][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 899.669886][ T31] do_syscall_64+0x3f6/0x4c0 [ 899.674504][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.680376][ T31] RIP: 0033:0x7fc85538e929 [ 899.684800][ T31] RSP: 002b:00007ffc69ce1b58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 899.693263][ T31] RAX: 0000000000000000 RBX: 00007fc8555b7ba0 RCX: 00007fc85538e929 [ 899.701262][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 899.709692][ T31] RBP: 00007fc8555b7ba0 R08: 0000000000005fa4 R09: 0000001c69ce1e4f [ 899.717693][ T31] R10: 00000000003f9e38 R11: 0000000000000246 R12: 00000000000b73fd [ 899.725661][ T31] R13: 00007fc8555b6240 R14: ffffffffffffffff R15: 00007ffc69ce1c70 [ 899.733721][ T31] [ 899.736737][ T31] INFO: task syz.7.2058:14151 blocked for more than 144 seconds. [ 899.748054][ T31] Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 [ 899.755700][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.764388][ T31] task:syz.7.2058 state:D stack:25912 pid:14151 tgid:14150 ppid:12596 task_flags:0x400140 flags:0x00004004 [ 899.776315][ T31] Call Trace: [ 899.779572][ T31] [ 899.782506][ T31] __schedule+0x116a/0x5de0 [ 899.786994][ T31] ? psi_task_switch+0x111/0x8e0 [ 899.791945][ T31] ? __lock_acquire+0x622/0x1c90 [ 899.796900][ T31] ? __pfx___schedule+0x10/0x10 [ 899.801833][ T31] ? find_held_lock+0x2b/0x80 [ 899.806511][ T31] ? schedule+0x2d7/0x3a0 [ 899.811307][ T31] schedule+0xe7/0x3a0 [ 899.815393][ T31] schedule_preempt_disabled+0x13/0x30 [ 899.820829][ T31] __mutex_lock+0x6c7/0xb90 [ 899.825341][ T31] ? misc_open+0x63/0x420 [ 899.829674][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 899.834715][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 899.840338][ T31] ? __pfx_misc_open+0x10/0x10 [ 899.845113][ T31] ? misc_open+0x63/0x420 [ 899.849450][ T31] misc_open+0x63/0x420 [ 899.853775][ T31] ? __pfx_misc_open+0x10/0x10 [ 899.858514][ T31] chrdev_open+0x234/0x6a0 [ 899.862932][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 899.867852][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 899.874616][ T31] do_dentry_open+0x744/0x1c10 [ 899.879361][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 899.884341][ T31] vfs_open+0x82/0x3f0 [ 899.888399][ T31] path_openat+0x1de4/0x2cb0 [ 899.893039][ T31] ? __pfx_path_openat+0x10/0x10 [ 899.897987][ T31] do_filp_open+0x20b/0x470 [ 899.902513][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 899.907557][ T31] ? alloc_fd+0x471/0x7d0 [ 899.912649][ T31] do_sys_openat2+0x11b/0x1d0 [ 899.917333][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 899.922547][ T31] ? __pfx___schedule+0x10/0x10 [ 899.927386][ T31] __x64_sys_openat+0x174/0x210 [ 899.932245][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 899.937616][ T31] do_syscall_64+0xcd/0x4c0 [ 899.942122][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.948013][ T31] RIP: 0033:0x7f58fdf8e929 [ 899.952467][ T31] RSP: 002b:00007f58fee72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 899.960890][ T31] RAX: ffffffffffffffda RBX: 00007f58fe1b5fa0 RCX: 00007f58fdf8e929 [ 899.968881][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 899.976917][ T31] RBP: 00007f58fe010b39 R08: 0000000000000000 R09: 0000000000000000 [ 899.984888][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.992860][ T31] R13: 0000000000000000 R14: 00007f58fe1b5fa0 R15: 00007fff92a63a28 [ 900.000840][ T31] [ 900.003875][ T31] INFO: task syz.7.2058:14160 blocked for more than 144 seconds. [ 900.011605][ T31] Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 [ 900.019700][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 900.028425][ T31] task:syz.7.2058 state:D stack:28600 pid:14160 tgid:14150 ppid:12596 task_flags:0x400040 flags:0x00004004 [ 900.040379][ T31] Call Trace: [ 900.043699][ T31] [ 900.046644][ T31] __schedule+0x116a/0x5de0 [ 900.051167][ T31] ? __lock_acquire+0x622/0x1c90 [ 900.056099][ T31] ? __pfx___schedule+0x10/0x10 [ 900.060934][ T31] ? find_held_lock+0x2b/0x80 [ 900.065685][ T31] ? schedule+0x2d7/0x3a0 [ 900.070008][ T31] schedule+0xe7/0x3a0 [ 900.074068][ T31] schedule_preempt_disabled+0x13/0x30 [ 900.079506][ T31] __mutex_lock+0x6c7/0xb90 [ 900.084016][ T31] ? rfkill_fop_open+0x136/0x750 [ 900.088933][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 900.093963][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 900.099315][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 900.104682][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 900.109946][ T31] ? rfkill_fop_open+0x136/0x750 [ 900.115580][ T31] rfkill_fop_open+0x136/0x750 [ 900.120354][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 900.126160][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 900.131616][ T31] misc_open+0x35a/0x420 [ 900.135863][ T31] ? __pfx_misc_open+0x10/0x10 [ 900.140609][ T31] chrdev_open+0x234/0x6a0 [ 900.145093][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 900.150031][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 900.156864][ T31] do_dentry_open+0x744/0x1c10 [ 900.162118][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 900.167072][ T31] vfs_open+0x82/0x3f0 [ 900.171217][ T31] path_openat+0x1de4/0x2cb0 [ 900.175823][ T31] ? __pfx_path_openat+0x10/0x10 [ 900.180758][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 900.185744][ T31] do_filp_open+0x20b/0x470 [ 900.190250][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 900.195284][ T31] ? alloc_fd+0x471/0x7d0 [ 900.199600][ T31] do_sys_openat2+0x11b/0x1d0 [ 900.204413][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 900.209598][ T31] ? find_held_lock+0x2b/0x80 [ 900.214297][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 900.219452][ T31] __x64_sys_openat+0x174/0x210 [ 900.224326][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 900.229675][ T31] ? do_user_addr_fault+0x843/0x1370 [ 900.234973][ T31] do_syscall_64+0xcd/0x4c0 [ 900.239898][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.245797][ T31] RIP: 0033:0x7f58fdf8e929 [ 900.250187][ T31] RSP: 002b:00007f58fee51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 900.258605][ T31] RAX: ffffffffffffffda RBX: 00007f58fe1b6080 RCX: 00007f58fdf8e929 [ 900.266615][ T31] RDX: 0000000000000180 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 900.274666][ T31] RBP: 00007f58fe010b39 R08: 0000000000000000 R09: 0000000000000000 [ 900.282668][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.290630][ T31] R13: 0000000000000001 R14: 00007f58fe1b6080 R15: 00007fff92a63a28 [ 900.306133][ T31] [ 900.310996][ T31] INFO: task syz.5.2061:14164 blocked for more than 144 seconds. [ 900.319112][ T31] Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 [ 900.327003][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 900.335711][ T31] task:syz.5.2061 state:D stack:28888 pid:14164 tgid:14163 ppid:12590 task_flags:0x400040 flags:0x00004004 [ 900.347620][ T31] Call Trace: [ 900.350877][ T31] [ 900.353899][ T31] __schedule+0x116a/0x5de0 [ 900.358422][ T31] ? __lock_acquire+0x622/0x1c90 [ 900.363393][ T31] ? __pfx___schedule+0x10/0x10 [ 900.368247][ T31] ? find_held_lock+0x2b/0x80 [ 900.373031][ T31] ? schedule+0x2d7/0x3a0 [ 900.377362][ T31] schedule+0xe7/0x3a0 [ 900.381472][ T31] schedule_preempt_disabled+0x13/0x30 [ 900.386929][ T31] __mutex_lock+0x6c7/0xb90 [ 900.391448][ T31] ? misc_open+0x63/0x420 [ 900.395775][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 900.400838][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 900.405934][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 900.411651][ T31] ? __pfx_misc_open+0x10/0x10 [ 900.416444][ T31] ? misc_open+0x63/0x420 [ 900.420755][ T31] misc_open+0x63/0x420 [ 900.425513][ T31] ? __pfx_misc_open+0x10/0x10 [ 900.430289][ T31] chrdev_open+0x234/0x6a0 [ 900.434718][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 900.439638][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 900.446426][ T31] do_dentry_open+0x744/0x1c10 [ 900.451489][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 900.456459][ T31] vfs_open+0x82/0x3f0 [ 900.460536][ T31] path_openat+0x1de4/0x2cb0 [ 900.465161][ T31] ? __pfx_path_openat+0x10/0x10 [ 900.470085][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 900.475042][ T31] do_filp_open+0x20b/0x470 [ 900.479544][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 900.484612][ T31] ? alloc_fd+0x471/0x7d0 [ 900.488939][ T31] do_sys_openat2+0x11b/0x1d0 [ 900.493641][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 900.498826][ T31] __x64_sys_openat+0x174/0x210 [ 900.503704][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 900.509060][ T31] do_syscall_64+0xcd/0x4c0 [ 900.513569][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.519442][ T31] RIP: 0033:0x7f80a718e929 [ 900.523851][ T31] RSP: 002b:00007f80a804c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 900.532973][ T31] RAX: ffffffffffffffda RBX: 00007f80a73b5fa0 RCX: 00007f80a718e929 [ 900.540953][ T31] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 900.548978][ T31] RBP: 00007f80a7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 900.556961][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.564936][ T31] R13: 0000000000000000 R14: 00007f80a73b5fa0 R15: 00007ffd7dba8998 [ 900.572935][ T31] [ 900.575980][ T31] INFO: task syz.9.2062:14166 blocked for more than 144 seconds. [ 900.584223][ T31] Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 [ 900.591939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 900.600594][ T31] task:syz.9.2062 state:D stack:28584 pid:14166 tgid:14165 ppid:12599 task_flags:0x400140 flags:0x00004004 [ 900.612542][ T31] Call Trace: [ 900.615809][ T31] [ 900.618725][ T31] __schedule+0x116a/0x5de0 [ 900.623299][ T31] ? __lock_acquire+0x622/0x1c90 [ 900.628479][ T31] ? __pfx___schedule+0x10/0x10 [ 900.633361][ T31] ? find_held_lock+0x2b/0x80 [ 900.638018][ T31] ? schedule+0x2d7/0x3a0 [ 900.642485][ T31] schedule+0xe7/0x3a0 [ 900.646535][ T31] schedule_preempt_disabled+0x13/0x30 [ 900.652016][ T31] __mutex_lock+0x6c7/0xb90 [ 900.656521][ T31] ? misc_open+0x63/0x420 [ 900.660830][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 900.665860][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 900.670865][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 900.676496][ T31] ? __pfx_misc_open+0x10/0x10 [ 900.681288][ T31] ? misc_open+0x63/0x420 [ 900.685611][ T31] misc_open+0x63/0x420 [ 900.689746][ T31] ? __pfx_misc_open+0x10/0x10 [ 900.694527][ T31] chrdev_open+0x234/0x6a0 [ 900.698927][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 900.703890][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 900.710652][ T31] do_dentry_open+0x744/0x1c10 [ 900.715457][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 900.720402][ T31] vfs_open+0x82/0x3f0 [ 900.724485][ T31] path_openat+0x1de4/0x2cb0 [ 900.729509][ T31] ? __pfx_path_openat+0x10/0x10 [ 900.734501][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 900.739457][ T31] do_filp_open+0x20b/0x470 [ 900.743999][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 900.749015][ T31] ? alloc_fd+0x471/0x7d0 [ 900.753504][ T31] do_sys_openat2+0x11b/0x1d0 [ 900.758161][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 900.763541][ T31] __x64_sys_openat+0x174/0x210 [ 900.768369][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 900.773771][ T31] do_syscall_64+0xcd/0x4c0 [ 900.778271][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.784160][ T31] RIP: 0033:0x7fc5cbd8e929 [ 900.788552][ T31] RSP: 002b:00007fc5ccb2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 900.796953][ T31] RAX: ffffffffffffffda RBX: 00007fc5cbfb5fa0 RCX: 00007fc5cbd8e929 [ 900.804960][ T31] RDX: 0000000000008400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 900.812968][ T31] RBP: 00007fc5cbe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 900.820919][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.828912][ T31] R13: 0000000000000000 R14: 00007fc5cbfb5fa0 R15: 00007fff204ecd08 [ 900.837112][ T31] [ 900.840134][ T31] INFO: task syz.6.2065:14177 blocked for more than 145 seconds. [ 900.847914][ T31] Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 [ 900.855683][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 900.864517][ T31] task:syz.6.2065 state:D stack:25784 pid:14177 tgid:14174 ppid:12592 task_flags:0x400140 flags:0x00004004 [ 900.876442][ T31] Call Trace: [ 900.879700][ T31] [ 900.882641][ T31] __schedule+0x116a/0x5de0 [ 900.887154][ T31] ? __pfx___schedule+0x10/0x10 [ 900.892011][ T31] ? schedule+0xe0/0x3a0 [ 900.896236][ T31] ? schedule+0xe0/0x3a0 [ 900.900455][ T31] ? preempt_count_add+0x76/0x150 [ 900.905559][ T31] schedule+0xe7/0x3a0 [ 900.909651][ T31] schedule_preempt_disabled+0x13/0x30 [ 900.915155][ T31] __mutex_lock+0x6c7/0xb90 [ 900.919652][ T31] ? misc_open+0x63/0x420 [ 900.924026][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 900.929073][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 900.934814][ T31] ? preempt_schedule_common+0x44/0xc0 [ 900.940288][ T31] ? __pfx_misc_open+0x10/0x10 [ 900.945081][ T31] ? misc_open+0x63/0x420 [ 900.949392][ T31] misc_open+0x63/0x420 [ 900.953551][ T31] ? __pfx_misc_open+0x10/0x10 [ 900.958299][ T31] chrdev_open+0x234/0x6a0 [ 900.962728][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 900.967650][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 900.974645][ T31] do_dentry_open+0x744/0x1c10 [ 900.979415][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 900.984376][ T31] vfs_open+0x82/0x3f0 [ 900.988425][ T31] path_openat+0x1de4/0x2cb0 [ 900.993019][ T31] ? __pfx_path_openat+0x10/0x10 [ 900.997940][ T31] do_filp_open+0x20b/0x470 [ 901.002456][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 901.007478][ T31] ? __might_fault+0xe3/0x190 [ 901.012182][ T31] ? alloc_fd+0x471/0x7d0 [ 901.016498][ T31] do_sys_openat2+0x11b/0x1d0 [ 901.021185][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 901.026396][ T31] ? __pfx___schedule+0x10/0x10 [ 901.031301][ T31] __x64_sys_openat+0x174/0x210 [ 901.036147][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 901.041994][ T31] do_syscall_64+0xcd/0x4c0 [ 901.046485][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.052372][ T31] RIP: 0033:0x7f8e9a18e929 [ 901.056762][ T31] RSP: 002b:00007f8e9b06d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 901.065171][ T31] RAX: ffffffffffffffda RBX: 00007f8e9a3b6160 RCX: 00007f8e9a18e929 [ 901.073147][ T31] RDX: 0000000000000042 RSI: 0000200000002080 RDI: ffffffffffffff9c [ 901.081364][ T31] RBP: 00007f8e9a210b39 R08: 0000000000000000 R09: 0000000000000000 [ 901.089348][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.097342][ T31] R13: 0000000000000000 R14: 00007f8e9a3b6160 R15: 00007ffe500db118 [ 901.105329][ T31] [ 901.108337][ T31] [ 901.108337][ T31] Showing all locks held in the system: [ 901.116055][ T31] 1 lock held by khungtaskd/31: [ 901.120890][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 901.130726][ T31] 3 locks held by kworker/1:1/48: [ 901.135746][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 901.146420][ T31] #1: ffffc90000b87d10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 901.159363][ T31] #2: ffffffff90803088 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 901.170830][ T31] 2 locks held by getty/5585: [ 901.175505][ T31] #0: ffff888032acd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 901.185252][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 901.195478][ T31] 2 locks held by kworker/u8:27/7408: [ 901.200825][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 901.211993][ T31] #1: ffffc90003defd10 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 901.224176][ T31] 4 locks held by kworker/1:2/12780: [ 901.229439][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 901.239885][ T31] #1: ffffc90000127d10 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 901.251839][ T31] #2: ffffffff90803088 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 901.261927][ T31] #3: ffff88807926d100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 901.270954][ T31] 1 lock held by syz.8.2054/14125: [ 901.276086][ T31] #0: ffff88807926d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 901.285852][ T31] 1 lock held by syz.7.2058/14151: [ 901.290947][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.299391][ T31] 2 locks held by syz.7.2058/14160: [ 901.304707][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.313182][ T31] #1: ffffffff90803088 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x136/0x750 [ 901.323213][ T31] 1 lock held by syz.5.2061/14164: [ 901.328329][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.337051][ T31] 1 lock held by syz.9.2062/14166: [ 901.342920][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.351613][ T31] 1 lock held by syz.6.2065/14177: [ 901.356729][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.365174][ T31] 1 lock held by syz-executor/14181: [ 901.370431][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.378889][ T31] 1 lock held by syz-executor/14183: [ 901.384182][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.392626][ T31] 1 lock held by syz-executor/14186: [ 901.397881][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.406317][ T31] 1 lock held by syz-executor/14187: [ 901.411766][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.420219][ T31] 1 lock held by syz-executor/14189: [ 901.425572][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.434029][ T31] 1 lock held by syz-executor/14191: [ 901.439284][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.447926][ T31] 1 lock held by syz-executor/14193: [ 901.453251][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.461743][ T31] 1 lock held by syz-executor/14196: [ 901.467025][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.475469][ T31] 1 lock held by syz-executor/14197: [ 901.480726][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.489153][ T31] 1 lock held by syz-executor/14199: [ 901.494471][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.502955][ T31] 1 lock held by syz-executor/14201: [ 901.508237][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.516704][ T31] 1 lock held by syz-executor/14203: [ 901.521984][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.530398][ T31] 1 lock held by syz-executor/14206: [ 901.535809][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.544240][ T31] 1 lock held by syz-executor/14207: [ 901.549687][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.558185][ T31] 1 lock held by syz-executor/14209: [ 901.563454][ T31] #0: ffffffff8f3022a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 901.571899][ T31] [ 901.574211][ T31] ============================================= [ 901.574211][ T31] [ 901.582640][ T31] NMI backtrace for cpu 0 [ 901.582654][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 901.582675][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.582685][ T31] Call Trace: [ 901.582692][ T31] [ 901.582699][ T31] dump_stack_lvl+0x116/0x1f0 [ 901.582727][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 901.582747][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 901.582772][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 901.582792][ T31] watchdog+0xf70/0x12c0 [ 901.582818][ T31] ? __pfx_watchdog+0x10/0x10 [ 901.582835][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.582858][ T31] ? __kthread_parkme+0x19e/0x250 [ 901.582884][ T31] ? __pfx_watchdog+0x10/0x10 [ 901.582903][ T31] kthread+0x3c2/0x780 [ 901.582921][ T31] ? __pfx_kthread+0x10/0x10 [ 901.582940][ T31] ? rcu_is_watching+0x12/0xc0 [ 901.582962][ T31] ? __pfx_kthread+0x10/0x10 [ 901.582980][ T31] ret_from_fork+0x5d4/0x6f0 [ 901.583003][ T31] ? __pfx_kthread+0x10/0x10 [ 901.583019][ T31] ret_from_fork_asm+0x1a/0x30 [ 901.583049][ T31] [ 901.583055][ T31] Sending NMI from CPU 0 to CPUs 1: [ 901.701521][ C1] NMI backtrace for cpu 1 [ 901.701534][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 901.701552][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.701560][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 901.701583][ C1] Code: ab 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b0 21 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 901.701596][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 901.701608][ C1] RAX: 000000000280ae15 RBX: 0000000000000001 RCX: ffffffff8b885c69 [ 901.701618][ C1] RDX: 0000000000000000 RSI: ffffffff8de30576 RDI: ffffffff8c158060 [ 901.701627][ C1] RBP: ffffed1003c55488 R08: 0000000000000001 R09: ffffed10170a6645 [ 901.701636][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 901.701645][ C1] R13: ffff88801e2aa440 R14: ffffffff90a96a50 R15: 0000000000000000 [ 901.701654][ C1] FS: 0000000000000000(0000) GS:ffff888124817000(0000) knlGS:0000000000000000 [ 901.701668][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 901.701677][ C1] CR2: 0000555816207b40 CR3: 000000000e382000 CR4: 00000000003526f0 [ 901.701687][ C1] Call Trace: [ 901.701691][ C1] [ 901.701697][ C1] default_idle+0x13/0x20 [ 901.701709][ C1] default_idle_call+0x6d/0xb0 [ 901.701721][ C1] do_idle+0x391/0x510 [ 901.701742][ C1] ? __pfx_do_idle+0x10/0x10 [ 901.701758][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 901.701779][ C1] cpu_startup_entry+0x4f/0x60 [ 901.701796][ C1] start_secondary+0x21d/0x2b0 [ 901.701815][ C1] ? __pfx_start_secondary+0x10/0x10 [ 901.701835][ C1] common_startup_64+0x13e/0x148 [ 901.701853][ C1] [ 901.702573][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 901.881310][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 901.893108][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.903150][ T31] Call Trace: [ 901.906418][ T31] [ 901.909338][ T31] dump_stack_lvl+0x3d/0x1f0 [ 901.913924][ T31] panic+0x71c/0x800 [ 901.917811][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 901.923696][ T31] ? __pfx_panic+0x10/0x10 [ 901.928108][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 901.933473][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 901.939442][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 901.944804][ T31] ? watchdog+0xdda/0x12c0 [ 901.949206][ T31] ? watchdog+0xdcd/0x12c0 [ 901.953611][ T31] watchdog+0xdeb/0x12c0 [ 901.957849][ T31] ? __pfx_watchdog+0x10/0x10 [ 901.962522][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.967730][ T31] ? __kthread_parkme+0x19e/0x250 [ 901.972745][ T31] ? __pfx_watchdog+0x10/0x10 [ 901.977420][ T31] kthread+0x3c2/0x780 [ 901.981475][ T31] ? __pfx_kthread+0x10/0x10 [ 901.986047][ T31] ? rcu_is_watching+0x12/0xc0 [ 901.990798][ T31] ? __pfx_kthread+0x10/0x10 [ 901.995371][ T31] ret_from_fork+0x5d4/0x6f0 [ 901.999949][ T31] ? __pfx_kthread+0x10/0x10 [ 902.004523][ T31] ret_from_fork_asm+0x1a/0x30 [ 902.009281][ T31] [ 902.012465][ T31] Kernel Offset: disabled [ 902.016768][ T31] Rebooting in 86400 seconds..