last executing test programs: 6m10.227283212s ago: executing program 3 (id=2094): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x1}, 0x50) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) read(r1, &(0x7f00000000c0)=""/163, 0xd0140f23) 6m9.815484994s ago: executing program 3 (id=2096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) setgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x0, 0x2, 0x1d, &(0x7f0000000500)=""/29, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xb, 0x85a, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 6m8.758228219s ago: executing program 3 (id=2104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) setgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x0, 0x2, 0x1d, &(0x7f0000000500)=""/29, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xb, 0x85a, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 6m7.630889102s ago: executing program 3 (id=2108): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_uring_setup(0x5c7, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930121c575963f", 0x10}, {&(0x7f0000000140)="fb49b8a4b02d81", 0x7}], 0x2) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r5, &(0x7f0000000740)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000580)=""/124, 0x7c}], 0x3, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x10202) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 6m5.834828309s ago: executing program 3 (id=2111): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0x1, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) mincore(&(0x7f00002d1000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/153) 6m1.577303509s ago: executing program 3 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x180) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4844}, 0x4) r8 = dup(r4) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f0000000000)={0xb, 0x8, 0x4, 0x80800}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r10, 0x1269, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffd, 0x10000, 0x5}}) 5m45.215015627s ago: executing program 32 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x180) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4844}, 0x4) r8 = dup(r4) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f0000000000)={0xb, 0x8, 0x4, 0x80800}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r10, 0x1269, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffd, 0x10000, 0x5}}) 2m52.399152772s ago: executing program 0 (id=2662): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0040001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000000000001c0012800b00010062726964676500000c00028005002a0001000000"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xfffffee2) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000480)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) socket(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019540)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044001}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) 2m50.074266889s ago: executing program 0 (id=2665): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4, 0x34014c40, 0xffff, 0xfb85, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$VHOST_SET_VRING_KICK(r2, 0xc0046686, &(0x7f0000000000)={0x3}) 2m49.046444197s ago: executing program 0 (id=2667): connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xfeff, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100ff5d", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, 0x0, 0x0) r8 = userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6f) r10 = dup2(r9, r9) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r10, &(0x7f00000063c0)={0x2020}, 0x2020) syz_pidfd_open(r3, 0x0) 2m45.751207169s ago: executing program 0 (id=2676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'ip6tnl0\x00', @remote}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r15, r14, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000001080)=ANY=[], 0x0) 2m45.650146608s ago: executing program 0 (id=2677): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x3f, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c200000000000000000008004503003100674000002f90780000000032ffffff0000883e001d9078420018d55c5862c0154a14b73ee0b4"], 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0012008000006900000000e0ffff1f0000000000000000000000000000b7c49f7e9ffb517ab0f60a2f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x6000b20c, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x89b, 0x53}, {}, {}, @raw32}, {0x0, 0x0, 0xff, 0x0, @time, {0x81}, {0x2}, @note={0x1}}], 0x38) r6 = socket$can_raw(0x1d, 0x3, 0x1) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bind$can_raw(r6, &(0x7f0000000000), 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) read(r6, &(0x7f00000027c0)=""/4073, 0xfe9) 2m45.439148999s ago: executing program 5 (id=2678): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0xfe, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x43}}, {{0xeff5, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x90, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x5, 0x7, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1634, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mount$nfs(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0xc6088, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 2m43.667941575s ago: executing program 5 (id=2686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m42.055673066s ago: executing program 0 (id=2691): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000040000fcffffef1000000008000600000000001800018014000200776c616e310000000000000000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) munlockall() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, 0x0, 0x0, 0x200) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) ioctl$SNDCTL_TMR_START(r0, 0x5402) r7 = socket(0x29, 0x3, 0x3a) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f0000000180)={0x6, 0xfd6, 0x1, 0x8000, 0x19, 0x1ce6a64e}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x980000, 0x1, 0xa97d, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x6, '\x00', @ptr}}) ioctl$UFFDIO_POISON(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 2m38.093624846s ago: executing program 5 (id=2697): connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x10}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xd}}, './file0\x00'}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m37.526044035s ago: executing program 5 (id=2700): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x24}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x25, {0x25, 0x7, "6273a90406310a0223e68a00accb6a298439cb8c8350408b97866357c13541f4b089f0"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000380)={0x34, &(0x7f00000000c0)={0x0, 0x3, 0xab, "506c3a41935cc76cd4242d830dcafff27957466454746e239f263a797412f8b9322368797092f277f1c68c04c867abe44df58a454bd92ea7871385c5b3c4c97ed15408fbfa106756653d3cbe38d4485a2e3b33e30c48f93b645bb8df1af9a024300881bdae744516d39406fd7cd2a15f74dc8b95dcfcae593381e26baea0b05ba72aa38da4a863c8dbb750911174f5728d928b9b5d705bf5d223011a237657450ffb6adf6cc98954eba535"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x7ff}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "6ffa50b19c06162216dfb673d0aa057e1e882b474a405b3d1e54c892b75734da140a4bd473534cbd0e528686e5aab7"}}) 2m33.759397548s ago: executing program 5 (id=2705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x7, 0x20, 0xa6, 0x1, 0x5, 0xd, 0xce}, {0xfffffff9, 0xfffa, 0x7f, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x4, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000007}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m33.419460858s ago: executing program 5 (id=2706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0) r6 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1c, 0x2, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x4, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x5b0, [0x100, 0xfffffffa]}}) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000001400)=""/119, 0x77}, {&(0x7f0000001480)=""/31, 0x1f}, {&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/204, 0xcc}, {&(0x7f0000001680)=""/18, 0x12}, {&(0x7f00000016c0)=""/155, 0x9b}], 0xa}, 0x120) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) writev(r1, &(0x7f0000001840)=[{&(0x7f0000000000)="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", 0x167}], 0x1) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2m25.526283094s ago: executing program 33 (id=2691): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000040000fcffffef1000000008000600000000001800018014000200776c616e310000000000000000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) munlockall() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, 0x0, 0x0, 0x200) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) ioctl$SNDCTL_TMR_START(r0, 0x5402) r7 = socket(0x29, 0x3, 0x3a) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f0000000180)={0x6, 0xfd6, 0x1, 0x8000, 0x19, 0x1ce6a64e}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x980000, 0x1, 0xa97d, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x6, '\x00', @ptr}}) ioctl$UFFDIO_POISON(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 2m17.010617591s ago: executing program 34 (id=2706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0) r6 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1c, 0x2, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x4, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x5b0, [0x100, 0xfffffffa]}}) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000001400)=""/119, 0x77}, {&(0x7f0000001480)=""/31, 0x1f}, {&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/204, 0xcc}, {&(0x7f0000001680)=""/18, 0x12}, {&(0x7f00000016c0)=""/155, 0x9b}], 0xa}, 0x120) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) writev(r1, &(0x7f0000001840)=[{&(0x7f0000000000)="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", 0x167}], 0x1) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 32.144054581s ago: executing program 1 (id=3018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0xfc, 0x7, 0x553f}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r3) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000040)={0x8000000000000001, 0x2, 0x7, 0x3, 0x10001}) r4 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRESHEX=r3, @ANYRES8=r4, @ANYBLOB="00000000000000000000000000000000000000340200000000000000000044a4b5c434d87a8719052dec8db973154eb3f100b80a97f882a9dde808a164e9b61315fe57673afa53e2e6d24fd657544a088c877f8ed4811bba82cdfddf60baef3087f2c5842e3eaa70f4d8cce2fc876aff70a552e844b10e0df2178e30ef9f1ed2661f863e1fd5547941e3fc189977b3e070d64d6175ac8dc2bcf4d54d9dcf243bd72f7f406790bfe798634e7a8e13b29e348cfc60ffea5905c535d8bd979e913930f96ec5ee41e3f8b85eb603460583e78e50aae6b27ecd09983c5d54"], 0x50) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) dup(r6) r7 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c2"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000080)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000340)) 30.895433479s ago: executing program 1 (id=3023): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x0, 0x0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x3, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff8, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x3ff, 0x144, 0x2, 0xfffffffc, 0x40000002, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x801, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x400, 0xfd3, 0x2, 0x3, 0x9, 0x14, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x7ffd, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x6, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x8, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x5, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x3, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x4c, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x62, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80010001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0x40, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x1009, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x8, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000900000084"], 0x48) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$KDSKBSENT(r8, 0x4b49, &(0x7f0000000600)={0xc, "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"}) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) 29.874689967s ago: executing program 1 (id=3025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x7, 0x20, 0xa6, 0x1, 0x5, 0xd, 0xce}, {0xfffffff9, 0xfffa, 0x7f, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x4, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000007}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffc, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.489837097s ago: executing program 1 (id=3027): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000a80)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x3, 0x10000, 0x7fff, 0x6, 0x1007, 0xc72d, 0x4, 0xf, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x101, 0xed, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8927, &(0x7f0000000180)={'ip6gretap0\x00', @ifru_hwaddr=@local}) syz_usb_control_io(r1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000580)=0x7) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) socket$inet(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0xb0, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x360beee03d3ef5f6, 0xc, 0x50, 0x6}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x310, 0xe, 0x9, 0x40, 0x40, 0x5}, 0x1e6, &(0x7f0000000600)={0x5, 0xf, 0x1e6, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x101, 0xf, 0x8, [0xff0000, 0xc0a0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x0, 0x5, 0xfffb, 0x80}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x1, 0xf00, 0xf, [0x0, 0xff00, 0x3f00, 0xff0000, 0xc000]}, @generic={0xce, 0x10, 0x1, "153134588d3ac1fd83437ee40ed77ccffc19c22ce3e3b15832be9d535d9d2d0270084d0c3bf8d28a44ea5465c1ba983898bfbde85147bd4450f402ccb02841a131c86d8ab6901d3d76b875498c464a2bb28e23e1f02fd26ee4fc19a0ab0e147a746b84efbaf169eab82b822faaf15bfa1531e28b556c660e4344d8da437690db854c42d4cf4bf978a0fdc4567580ae5c03ebca905cbfaa44c7c6266530d3fc453c24f75c4ff409dd6eaebd400500861a6fb753ee65fe9a9bce5bdff52b00aee32665c5405e052e2ac39255"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0x0, 0x3}, @generic={0xcd, 0x10, 0x4, "54f4370de5a918f33f60400ce0731db4cfeaeae54eb43cb1e7dd76a0888c68a3ebcef407cdcbeaf8386ee19b998340326fbc1635dd4d7fca803075b027ef9c326dd9579046a1a455d33acaa480322ccb286429c5d0244db045e5472a6ad6cee621140f012a28359036d6f8320de72f7f510a9c8685f66446a5ff3196f50ff6ae5bcd05582f86bb4d0afb8a39c4933556e39b70c57280183fa9e2859fc5df46ad6d7e20e0218e3f97b525d33243bbd2127bc669494256f77cee69d8ba78efe3f077cdb618998c2c2f404e"}]}, 0x4, [{0xa2, &(0x7f0000000800)=@string={0xa2, 0x3, "f4a21b3c21fea221c64cefb741be007272e924a5037af7df726dc54ae95643fb09a437dc5875fe82dac545fcbd8924a9314caa660c3f9d123128211af3c970931da707bf9f526b8fd92eff3bdc4db2f1b0a6a0f1f9944adbd1ad8bdd4c28a8e98ec687b901f97d2fcdf8612cd359ec3b3c017460dd45bbcdec0e2c4836ab472dd19417dd0b3cd9973e1c2997d449b177450696adbf41fab2d92330edf6d2f373"}}, {0x80, &(0x7f00000008c0)=@string={0x80, 0x3, "b762f68dba1976161bbfac4e4e245fb368da169ed7becfe953ad23b1ccd653646a7f8ed84fe6de9f864dce8f7b5a2eaec4c7d584f9d6876c7607884e9e478e6ad71e5cd52bdd487bd0021c3e2d558d2a3385c9ead365f15b24fef76bec383a08547e9619f879b53182aca4020ad4fec8766a09300a90c7918535914df735"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x4ff}}]}) r5 = io_uring_setup(0x21e9, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x383}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400104000000"], 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080)=0xfffffffc, 0x4) 26.720763116s ago: executing program 1 (id=3032): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_uring_setup(0x5c7, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930121", 0xc}, {&(0x7f0000000140)="fb49b8a4b02d81", 0x7}], 0x2) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r5, &(0x7f0000000740)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000580)=""/124, 0x7c}], 0x3, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x10202) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 24.461038703s ago: executing program 1 (id=3035): io_uring_setup(0x30df, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ftruncate(0xffffffffffffffff, 0x2) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019380)={&(0x7f0000019300)=@getsa={0x54, 0x12, 0x800, 0x3, 0x25dfdbfd, {@in=@multicast2, 0x4d2, 0xa, 0x33}, [@proto={0x5, 0x19, 0x33}, @lifetime_val={0x24, 0x9, {0x0, 0x79, 0x2, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x44010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000019500)={&(0x7f0000019400)=""/248, 0xf8}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f00000000c0)={0x2, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r2, 0xc010644f, &(0x7f0000000240)={{0x18, 0x0, 0x0}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) unshare(0xe060400) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.993650629s ago: executing program 6 (id=3071): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000a80)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], 0x0) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x3, 0x10000, 0x7fff, 0x6, 0x1007, 0xc72d, 0x4, 0xf, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x101, 0xed, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8927, &(0x7f0000000180)={'ip6gretap0\x00', @ifru_hwaddr=@local}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000580)=0x7) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) socket$inet(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) mount$9p_rdma(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,timmout=0x0000000000000000,\x00']) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0xb0, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x360beee03d3ef5f6, 0xc, 0x50, 0x6}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x310, 0xe, 0x9, 0x40, 0x40, 0x5}, 0x1e6, &(0x7f0000000600)={0x5, 0xf, 0x1e6, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x101, 0xf, 0x8, [0xff0000, 0xc0a0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x0, 0x5, 0xfffb, 0x80}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x1, 0xf00, 0xf, [0x0, 0xff00, 0x3f00, 0xff0000, 0xc000]}, @generic={0xce, 0x10, 0x1, "153134588d3ac1fd83437ee40ed77ccffc19c22ce3e3b15832be9d535d9d2d0270084d0c3bf8d28a44ea5465c1ba983898bfbde85147bd4450f402ccb02841a131c86d8ab6901d3d76b875498c464a2bb28e23e1f02fd26ee4fc19a0ab0e147a746b84efbaf169eab82b822faaf15bfa1531e28b556c660e4344d8da437690db854c42d4cf4bf978a0fdc4567580ae5c03ebca905cbfaa44c7c6266530d3fc453c24f75c4ff409dd6eaebd400500861a6fb753ee65fe9a9bce5bdff52b00aee32665c5405e052e2ac39255"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0x0, 0x3}, @generic={0xcd, 0x10, 0x4, "54f4370de5a918f33f60400ce0731db4cfeaeae54eb43cb1e7dd76a0888c68a3ebcef407cdcbeaf8386ee19b998340326fbc1635dd4d7fca803075b027ef9c326dd9579046a1a455d33acaa480322ccb286429c5d0244db045e5472a6ad6cee621140f012a28359036d6f8320de72f7f510a9c8685f66446a5ff3196f50ff6ae5bcd05582f86bb4d0afb8a39c4933556e39b70c57280183fa9e2859fc5df46ad6d7e20e0218e3f97b525d33243bbd2127bc669494256f77cee69d8ba78efe3f077cdb618998c2c2f404e"}]}, 0x4, [{0xa2, &(0x7f0000000800)=@string={0xa2, 0x3, "f4a21b3c21fea221c64cefb741be007272e924a5037af7df726dc54ae95643fb09a437dc5875fe82dac545fcbd8924a9314caa660c3f9d123128211af3c970931da707bf9f526b8fd92eff3bdc4db2f1b0a6a0f1f9944adbd1ad8bdd4c28a8e98ec687b901f97d2fcdf8612cd359ec3b3c017460dd45bbcdec0e2c4836ab472dd19417dd0b3cd9973e1c2997d449b177450696adbf41fab2d92330edf6d2f373"}}, {0x80, &(0x7f00000008c0)=@string={0x80, 0x3, "b762f68dba1976161bbfac4e4e245fb368da169ed7becfe953ad23b1ccd653646a7f8ed84fe6de9f864dce8f7b5a2eaec4c7d584f9d6876c7607884e9e478e6ad71e5cd52bdd487bd0021c3e2d558d2a3385c9ead365f15b24fef76bec383a08547e9619f879b53182aca4020ad4fec8766a09300a90c7918535914df735"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x4ff}}]}) r5 = io_uring_setup(0x21e9, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x383}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 11.728494467s ago: executing program 2 (id=3074): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x114a021, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRES16=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) r1 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r1, &(0x7f0000003ac0)={0x2020}, 0x2023) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000000c0)="b95d77ad55cbbe17f1b50f815ff7ceb2183cc01588050b74afc86689a1d8a1ff08000000db6c902c77c7addc23d3be2c30144196983df419a801f47ae3edfbd0657b8d36c08c907da315d2b0f61b524ececf680463b0a1c53632b79ac9a4b6f8f1ce00f2b194ce2556c3733cc2826f56036304f437f2031f22112807b7d497a0a3bcefa388aac844d656d86e9252e2d393812c5788546f8e2a7e2d1e75830b00", 0xa0, 0xfffffffffffffffe) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000012c0)={0x14, &(0x7f0000000140)={0x40, 0x27, 0x58, {0x58, 0x29, "953891ce2198b198e18f991cc40545858fa829ef8d3ab01292adab450d1736f8e5be1571a532b0207788df74fd90c19728555924bcd463abc1eafa22de0ab05e0819f8da145ade0c9714412de18882f64d4a7818b292"}}, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x200) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000080)={0x7, 0x80, "2ab0ee8e3856fa7625e7b1ebcad47391cde542078c460a9c", {0x8, 0x5}, 0x400}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200001004000000080000000f00000000000000317469bc95502b2746c7104ccd681c6ed70ac31174d2b5db9cc2f9d99ad77a4f5e984110a39f98af40f4a0b6468cbc1da3ad04bb6cf6741f5e6b78cdf21daed903", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r4}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601080000f4000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0x29) 10.646516888s ago: executing program 6 (id=3077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0xd000, 0x0, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x3, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x4}, {0x5000, 0x54000, 0x0, 0x7, 0x4, 0x1, 0x7, 0x6, 0x0, 0x6, 0x2}, {0xffff1000, 0x10000, 0xe, 0x2, 0x1, 0x3, 0x10, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x7000, 0x30000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x8, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x6, 0x4, 0x1, 0x1, 0x0, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x9, 0xe1}, {0xf000, 0x2, 0x0, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 9.366571508s ago: executing program 6 (id=3079): socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006ee000/0x1000)=nil, &(0x7f0000459000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00005e2000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e0000008"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000040)={0x0, 0x88359, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000b40)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.017927627s ago: executing program 35 (id=3035): io_uring_setup(0x30df, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ftruncate(0xffffffffffffffff, 0x2) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019380)={&(0x7f0000019300)=@getsa={0x54, 0x12, 0x800, 0x3, 0x25dfdbfd, {@in=@multicast2, 0x4d2, 0xa, 0x33}, [@proto={0x5, 0x19, 0x33}, @lifetime_val={0x24, 0x9, {0x0, 0x79, 0x2, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x44010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000019500)={&(0x7f0000019400)=""/248, 0xf8}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f00000000c0)={0x2, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r2, 0xc010644f, &(0x7f0000000240)={{0x18, 0x0, 0x0}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) unshare(0xe060400) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.995328596s ago: executing program 4 (id=3084): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2000000000000134}) socket$inet_sctp(0x2, 0x0, 0x84) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x30, 0x4, @tid=r1}, &(0x7f0000000180)) timer_create(0x4, &(0x7f0000000380)={0x0, 0x21, 0x0, @thr={&(0x7f00000001c0)="bf0f9190650bbf3da10ab48f155d6d5d229485217aa071230d88a66b72acda8fa08d2be02be21af8731140f3860d36f146baa257d896d4a6dd7de76f2010bce97b2fb6e47d558c0f810adf096cdfc990c1fd4351f9362cd3fa4cf0bbc66d2c58a14a79153e8c8c9f1b", &(0x7f0000000240)="be7cc736baa28a9a438d8e55dfe2fea14e198772061ad78f387d05ccf74146f703e66549b74102a105a2d175b8c237f21c51ca15a1294789372f792d364694af6d6eafe7c086063f7d01c862e38778d38bf4237a89a53f112f816962f537674e0fc6a1ba6ce792759bd2451dd2cd83674782c6ef54cb7490866421625d6564581685716a791ff6497796b47fd364498c0b998b0b2f86235d08d161d3e226e0201831c5e6e36364c24fa2c1ab79413835df5545e1f148b76c54b8a7bd6f6ed01552320987894b95"}}, &(0x7f00000003c0)=0x0) timer_getoverrun(r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) tkill(r1, 0x31) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r5 = dup2(r4, r4) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) sched_setattr(r1, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000002c40), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000200)={0xa, 0x0, 0x5, {0x3, 0x0, 0x80081, 0x403}}) read$char_usb(r5, &(0x7f00000000c0)=""/192, 0xc0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0d0000000a00000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) fsopen(&(0x7f0000000000)='pvfs2\x00', 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r5, 0xc0386447, &(0x7f0000000440)={{0x8, 0x1, &(0x7f0000000400)=[{0x3, 0x0, 0x867}]}, 0x8, 0xc, 0x7a, 0x2, 0x0, 0x8000000000000001, 0xfff, 0xfffffffffffffffb, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r5, 0xc010644a, &(0x7f0000000480)={r8}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 7.539267004s ago: executing program 2 (id=3086): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0xc8) sendfile(r2, r2, 0x0, 0x101) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) dup(r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) (fail_nth: 2) socket$nl_generic(0x10, 0x3, 0x10) 7.078690349s ago: executing program 4 (id=3088): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001"], 0x8c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) 6.983593828s ago: executing program 7 (id=3089): syz_usb_connect(0x0, 0x371, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x31) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) listen(r4, 0x0) accept4$vsock_stream(r4, &(0x7f00000020c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) write(0xffffffffffffffff, 0x0, 0x0) signalfd4(r1, 0x0, 0x0, 0x80000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048004}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) 6.434104336s ago: executing program 4 (id=3090): syz_usb_connect(0x0, 0x371, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x31) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) listen(r4, 0x0) accept4$vsock_stream(r4, &(0x7f00000020c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) write(0xffffffffffffffff, 0x0, 0x0) signalfd4(r1, 0x0, 0x0, 0x80000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048004}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) 6.149921474s ago: executing program 2 (id=3091): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000089000000aaaabb88a810008100000086dd6300000000383aff00000000000000000000ffff7f000001fe8000000000000000000000000000aa040090780000004860fd3a8500ff8900fe8000000000000000000000000000bbfe8004000000000000000000000000aa85e7d2e1a48a75fc"], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'ip_vti0\x00', {}, 0x9}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) r2 = syz_open_dev$video(&(0x7f00000003c0), 0x7fff, 0x40) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket(0x2, 0x80805, 0x0) r4 = dup(r3) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000300)=@fd={0xfffffff9, 0x1, 0x4, 0x1, 0x35d, {0x77359400}, {0x1, 0x2, 0xa, 0x5, 0x81, 0xe2, "fb0d5c94"}, 0x2, 0x4, {}, 0x7, 0x0, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) sendmmsg(r0, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f000000a300)=[{&(0x7f0000007f40)="45442384fba766eb9c06221de78884f02c22fc234826d0725ac1959a92e1016664e0d5955a533e3caf2499a7acf6c62a7c43c30d0590d9e162db6fd8dac5f38add0450e492b1d32e66b51287a338bd7e8f611b6a196d106f08a648ae8316b8a5a07229028b7cbd2b75de1d1f7c57f5984ea9fe80f8c166fd17f8d555069676cda5200edfaed89d2c1bcb0d236f53d95c7b221f16f4e044a2ec0ff49743b212ea30340c725a9ec5a1e51d7c733da6e7a8faa37c066bd065aebc2e121da88267df85b4568ee6be3d22b48cdb5093ecd2814e06817cfa0d2d264632c3e66239a27b153be96b06", 0xe5}, {&(0x7f0000008100)="3df0842ddcdb35a48bf102d77741d0f170ee6c06c37a313fdf8aab3507434beddc8e4e6af5dfff1b0669b8843d92d03759013463050253884e2212a8a874f340044620c0c617f27f2506996c3e3ecfe53564782366a3c6352b51666d4ec0726c9fc8a520466b152abf72556ba8b5418372da2d7d0fe0e4c988bca751e7b0777d77229990fd75173d3e988274e7ac1dbfe9aae6226a0917c3c45fc33fedfbf0032ef1e37a15951a105f92b7843539fc4ba3f754840b8cc210bd83a0fd7e1576e3e81dedbbba7628256a16", 0xca}, {&(0x7f0000009100)="c94ef5758ccf473828d9bb258578faa9c102", 0x12}, {&(0x7f0000009180)="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", 0x237}], 0x4}}], 0xff80, 0x40) 4.578408343s ago: executing program 2 (id=3092): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x80084d17, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffd, 0x10000, 0x5}}) 4.520779419s ago: executing program 6 (id=3093): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000089000000aaaabb88a810008100000086dd6300000000383aff00000000000000000000ffff7f000001fe8000000000000000000000000000aa040090780000004860fd3a8500ff8900fe8000000000000000000000000000bbfe8004000000000000000000000000aa85e7d2e1a48a75fc"], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'ip_vti0\x00', {}, 0x9}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) r2 = syz_open_dev$video(&(0x7f00000003c0), 0x7fff, 0x40) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket(0x2, 0x80805, 0x0) r4 = dup(r3) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000300)=@fd={0xfffffff9, 0x1, 0x4, 0x1, 0x35d, {0x77359400}, {0x1, 0x2, 0xa, 0x5, 0x81, 0xe2, "fb0d5c94"}, 0x2, 0x4, {}, 0x7, 0x0, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) sendmmsg(r0, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f000000a300)=[{&(0x7f0000007f40)="45442384fba766eb9c06221de78884f02c22fc234826d0725ac1959a92e1016664e0d5955a533e3caf2499a7acf6c62a7c43c30d0590d9e162db6fd8dac5f38add0450e492b1d32e66b51287a338bd7e8f611b6a196d106f08a648ae8316b8a5a07229028b7cbd2b75de1d1f7c57f5984ea9fe80f8c166fd17f8d555069676cda5200edfaed89d2c1bcb0d236f53d95c7b221f16f4e044a2ec0ff49743b212ea30340c725a9ec5a1e51d7c733da6e7a8faa37c066bd065aebc2e121da88267df85b4568ee6be3d22b48cdb5093ecd2814e06817cfa0d2d264632c3e66239a27b153be96b06", 0xe5}, {&(0x7f0000008100)="3df0842ddcdb35a48bf102d77741d0f170ee6c06c37a313fdf8aab3507434beddc8e4e6af5dfff1b0669b8843d92d03759013463050253884e2212a8a874f340044620c0c617f27f2506996c3e3ecfe53564782366a3c6352b51666d4ec0726c9fc8a520466b152abf72556ba8b5418372da2d7d0fe0e4c988bca751e7b0777d77229990fd75173d3e988274e7ac1dbfe9aae6226a0917c3c45fc33fedfbf0032ef1e37a15951a105f92b7843539fc4ba3f754840b8cc210bd83a0fd7e1576e3e81dedbbba7628256a16", 0xca}, {&(0x7f0000009100)="c94ef5758ccf473828d9bb258578faa9c102", 0x12}, {&(0x7f0000009180)="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", 0x237}], 0x4}}], 0xff80, 0x40) 4.422183404s ago: executing program 7 (id=3094): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000880)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000001000000090001007379"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x84, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) r7 = userfaultfd(0x1) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000780)={{&(0x7f00001ef000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x715}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x10, 0x2, 0x1, [0xfffc, 0xff, 0x6, 0x7, 0x7, 0x4b9, 0x8, 0x5, 0x6, 0x1130, 0x2, 0x4bd, 0x750d, 0xffff, 0x1, 0x4], 0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], [0x0, 0xff, 0x0, 0xff0000ff], 'vlan0\x00', 'wlan0\x00', {}, {0xff}, 0x11, 0xfd, 0x0, 0x21}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x0, 0x0, [0x0, 0x1, 0x55da, 0x1, 0x0, 0xb, 0x768b, 0x3d0, 0x6, 0x21c4, 0x9, 0x9, 0x17, 0xb, 0x1fe, 0xa2], 0xb}}, @common=@dst={{0x48}, {0xe, 0x2, 0x0, [0x7f, 0xe3, 0xd3ac, 0xc4d, 0x400, 0x2, 0x1, 0x8ca, 0x0, 0x2, 0xbafa, 0x7, 0x6, 0xffff, 0x3ff, 0x200], 0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x6, 0x4}, {0x0, 0x6, 0x2}, 0xfffff801, 0xe92}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f0000000040)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r11 = memfd_create(&(0x7f0000000000)='/dev/\xd2\x9aO\x00\x00\x00\xd7\x02\xca\xd2\xcb\xd2\xb1\xcap\x15loop#\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&\xe9\x16\x82\xc8c\xf0\xc0\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\x00'/389, 0x7) fallocate(r11, 0x0, 0x0, 0x200401) fallocate(r11, 0x0, 0x0, 0x200401) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x7d, 0x5, r10, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800}) 4.346823818s ago: executing program 4 (id=3095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x7, 0x20, 0xa6, 0x1, 0x5, 0xd, 0xce}, {0xfffffff9, 0xfffa, 0x7f, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x4, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000007}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffc, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.176147517s ago: executing program 4 (id=3096): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x24}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x25, {0x25, 0x7, "6273a90406310a0223e68a00accb6a298439cb8c8350408b97866357c13541f4b089f0"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000380)={0x34, &(0x7f00000000c0)={0x0, 0x3, 0xab, "506c3a41935cc76cd4242d830dcafff27957466454746e239f263a797412f8b9322368797092f277f1c68c04c867abe44df58a454bd92ea7871385c5b3c4c97ed15408fbfa106756653d3cbe38d4485a2e3b33e30c48f93b645bb8df1af9a024300881bdae744516d39406fd7cd2a15f74dc8b95dcfcae593381e26baea0b05ba72aa38da4a863c8dbb750911174f5728d928b9b5d705bf5d223011a237657450ffb6adf6cc98954eba535"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x7ff}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "6ffa50b19c06162216dfb673d0aa057e1e882b474a405b3d1e54c892b75734da140a4bd473534cbd0e528686e5aab7"}}) 3.894615678s ago: executing program 7 (id=3097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0xf, 0xafc}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="50100000457e48beadae56fc30888ff5364b2387bf0d95ab081e9fa1001ceffa2f5c12586a7c2c032f3093d3d9d3ac3ca2d7a38b62607997f21239b55bdac73576c17f87e1d774397608cb8ee515fe72284d5e4b19daac5f8a0dda94fa57187adcaf1d0b3748d6be7ce835f6a0251134ee97d2125c815a80161bbbec658f9526fe69e1bae86b5650cf7b4d7fc15ea46f6a06d81cfd8a7008d5f1ac7df32a7d9034502aa2be9d494736bf7b4a234e0e1bd5b3057a64d99b3e8c19a73a9ce1e00996527b42ab537692a1a027fd01053de2e1784fe9c8e8b935dc32db0af961737cde0d450d4b73d0", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf253400000008000300", @ANYRES32=r3, @ANYBLOB="0a000600c2c874b8d9d700001400550099eb50714ca9154d55155c255dc4570d1400fe000934a74b03e7caeba348bb692d215a46"], 0x50}, 0x1, 0x0, 0x0, 0x24040010}, 0xc850) 3.755270373s ago: executing program 7 (id=3098): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000016000000060001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001300)={r2, &(0x7f00000002c0), 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000}) r4 = syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c24030402030103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) 3.527687216s ago: executing program 2 (id=3099): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x3}, [], {0x4, 0x3}, [{0x8, 0x3}, {0x8, 0x4}, {0x8, 0x4}], {0x10, 0x5}}, 0x3c, 0x1) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r8, 0xc01, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20004000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x448000, 0x0) 2.033575371s ago: executing program 7 (id=3100): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x220, 0x260, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') socket(0x2b, 0xa, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x6bb3d4ee) read$eventfd(r2, &(0x7f0000000080), 0x8) 1.838859166s ago: executing program 6 (id=3101): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000089000000aaaabb88a810008100000086dd6300000000383aff00000000000000000000ffff7f000001fe8000000000000000000000000000aa040090780000004860fd3a8500ff8900fe8000000000000000000000000000bbfe8004000000000000000000000000aa85e7d2e1a48a75fc"], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'ip_vti0\x00', {}, 0x9}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) r2 = syz_open_dev$video(&(0x7f00000003c0), 0x7fff, 0x40) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket(0x2, 0x80805, 0x0) r4 = dup(r3) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000300)=@fd={0xfffffff9, 0x1, 0x4, 0x1, 0x35d, {0x77359400}, {0x1, 0x2, 0xa, 0x5, 0x81, 0xe2, "fb0d5c94"}, 0x2, 0x4, {}, 0x7, 0x0, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) sendmmsg(r0, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f000000a300)=[{&(0x7f0000007f40)="45442384fba766eb9c06221de78884f02c22fc234826d0725ac1959a92e1016664e0d5955a533e3caf2499a7acf6c62a7c43c30d0590d9e162db6fd8dac5f38add0450e492b1d32e66b51287a338bd7e8f611b6a196d106f08a648ae8316b8a5a07229028b7cbd2b75de1d1f7c57f5984ea9fe80f8c166fd17f8d555069676cda5200edfaed89d2c1bcb0d236f53d95c7b221f16f4e044a2ec0ff49743b212ea30340c725a9ec5a1e51d7c733da6e7a8faa37c066bd065aebc2e121da88267df85b4568ee6be3d22b48cdb5093ecd2814e06817cfa0d2d264632c3e66239a27b153be96b06", 0xe5}, {&(0x7f0000008100)="3df0842ddcdb35a48bf102d77741d0f170ee6c06c37a313fdf8aab3507434beddc8e4e6af5dfff1b0669b8843d92d03759013463050253884e2212a8a874f340044620c0c617f27f2506996c3e3ecfe53564782366a3c6352b51666d4ec0726c9fc8a520466b152abf72556ba8b5418372da2d7d0fe0e4c988bca751e7b0777d77229990fd75173d3e988274e7ac1dbfe9aae6226a0917c3c45fc33fedfbf0032ef1e37a15951a105f92b7843539fc4ba3f754840b8cc210bd83a0fd7e1576e3e81dedbbba7628256a16", 0xca}, {&(0x7f0000009100)="c94ef5758ccf473828d9bb258578faa9c102", 0x12}, {&(0x7f0000009180)="d54de38970972e94626c59272e35a943a9d24f138870e3aceb136c110069f3548420440e592073acab9080e87eb5d1f9e3b02ae2a828f8685588cff8ee82c7a99d4065c17d651d1eda2d29e9ddd46c73f6acb94c8aa73309f16f6d13cac006d87302e6b24ca0f29f6e3cb3f0f51aa8ecb2cc7d289200ea4d9134232528290e4ac7ebb13604d44cc7749abb7cf0475eee31669ba32c40d7bd4431e7d3c4d8e0a82ac3f30392324570ac54d0ca1f8d9da48778873aa268ed910ce1569ae5e644393d3f0fc4ee696bac6fd1fb4ffc1c781381fdaab93eff3e114ab0c429b9ebee4062c2a78bf033d130815ee9e91d589699fdcd7a529d75a12fa1cf7cf894f51492bd5832084d7a0535be0bcad28e10ed32bee11bcb9e495376ac7572df1ebaf809738e0346e65556ead02426bb805a8db0e73132200454f8af05603bbd566b245cdf3c0ec9f3b9cd80f25847e3faacda6b4a0b0dab2c75ec8bf620edeae2398110d170548a057f7ccfb2f3971608946eb14a776f572eae60d5d9fdf50b6edc91c0e9c9facacde9193bcb10219334cc866ad2f62c47ebd0d8254898d712fc3561266f980dfeacad434088072d40e04a3d4624239363ab1d8920e751c84017f11a852347eb54fea597febe54e753353f5e95a07d400fed2363266bc4fab6e20b8ad884410e7cde18cf7d69bd7a131f2e77bd879aeb814616b8492a2b1fecf043df0eabf566a5783c901ae4859e6e1bed20379f68c40f4a46e447d59e3bbe0f581020ded2288b0fc39b5af5b2bd1049d002edd34db0c5e9481c", 0x237}], 0x4}}], 0xff80, 0x40) 1.634889935s ago: executing program 7 (id=3102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101024fc08f08c016df0585b0010203010902120001c292407e090404e20003"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001"], 0x6c}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x8864000000000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000000000000280012800b00010062726964676500001800028005001900020000000c002300070000000000001a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x20000040}, 0x20008000) 638.330486ms ago: executing program 6 (id=3103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000022f0ffffffffffff0180c200000e8100350008004500001c0068000000119078ac1e010100000000000017c100690f78f19fc3241b7ad95375786b925c1ed0a341bf5078a1b06dc236872201bf37ab"], 0x32) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f00000000c0)='@#\\\x00', 0x121280, &(0x7f00000002c0)={@align, {0x5, 0x3b84, 0xd, 0x8fcc}}, 0xffff, &(0x7f00000003c0), &(0x7f0000000400)=0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0xe6f61000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) fsopen(&(0x7f0000000100)='ocfs2\x00', 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x1, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x9, 0x1, 0xffff, 0xbed, 0xb}}}, 0x14) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x7fffefff) syz_io_uring_setup(0x379a, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe, 0x0, r9}, &(0x7f0000000180), &(0x7f0000ffe000), 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r10, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 633.117953ms ago: executing program 4 (id=3104): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400104000000"], 0x0, 0x0, 0x0, 0x0}) 152.886423ms ago: executing program 8 (id=3083): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x7d, 0x5, r1, 0x80000, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800}) 92.952237ms ago: executing program 2 (id=3105): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400104000000"], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=3106): r0 = socket(0x1e, 0x4, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000200)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000004000000080000000a"], 0x50) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="040e07070220"], 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000280)="400f01c52c00b9800000c00f3235000100000f30c4a17bf069bc440f3a0f3601c7442400aa000000c74424020e2d0000ff1c24b9630900000f320f20d835080000000f22d8b9a00d00000f32670f01c4", 0x50}], 0x1, 0x28, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) io_uring_enter(r3, 0x2f4, 0x16e6, 0x0, &(0x7f0000000080)={[0xe]}, 0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x44440) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) kernel console output (not intermixed with test programs): 886.979923][T14731] usb 7-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.40 [ 886.999601][T14731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.015352][T14731] usb 7-1: Product: syz [ 887.023439][T14731] usb 7-1: Manufacturer: syz [ 887.036824][T14731] usb 7-1: SerialNumber: syz [ 887.214429][T16992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.258247][T16992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 887.380511][T16992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.406966][T16992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 887.826905][ T5618] Bluetooth: hci0: command tx timeout [ 888.030775][T16992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.114911][T16992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 888.863844][T16992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.916160][ T29] kauditd_printk_skb: 1005 callbacks suppressed [ 888.916190][ T29] audit: type=1400 audit(2000000647.926:42817): avc: denied { search } for pid=17070 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.956652][T16992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 889.079415][ T29] audit: type=1400 audit(2000000647.926:42818): avc: denied { read } for pid=17070 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 889.080416][T17076] FAULT_INJECTION: forcing a failure. [ 889.080416][T17076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.195520][T16992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 889.205440][ T29] audit: type=1400 audit(2000000647.926:42819): avc: denied { read open } for pid=17070 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 889.215142][T17076] CPU: 0 UID: 0 PID: 17076 Comm: syz.2.2936 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.215167][T17076] Tainted: [L]=SOFTLOCKUP [ 889.215173][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 889.215182][T17076] Call Trace: [ 889.215187][T17076] [ 889.215192][T17076] dump_stack_lvl+0x100/0x190 [ 889.215214][T17076] should_fail_ex.cold+0x5/0xa [ 889.215232][T17076] _copy_from_user+0x2e/0xd0 [ 889.215249][T17076] copy_msghdr_from_user+0x9f/0x4c0 [ 889.215268][T17076] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 889.215288][T17076] ? kstrtouint+0xdf/0x130 [ 889.215308][T17076] ___sys_recvmsg+0xdd/0x1a0 [ 889.215330][T17076] ? __pfx____sys_recvmsg+0x10/0x10 [ 889.215354][T17076] do_recvmmsg+0x2f3/0x740 [ 889.215372][T17076] ? __pfx_do_recvmmsg+0x10/0x10 [ 889.215388][T17076] ? rcu_is_watching+0x12/0xc0 [ 889.215406][T17076] ? lock_release+0x24d/0x310 [ 889.215422][T17076] ? __mutex_unlock_slowpath+0x350/0x910 [ 889.215444][T17076] ? __fget_files+0x21f/0x3d0 [ 889.215460][T17076] __x64_sys_recvmmsg+0x22a/0x280 [ 889.215483][T17076] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 889.215506][T17076] ? rcu_is_watching+0x12/0xc0 [ 889.215525][T17076] do_syscall_64+0x115/0x870 [ 889.215543][T17076] ? clear_bhb_loop+0x40/0x90 [ 889.215560][T17076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.215575][T17076] RIP: 0033:0x7fb1de39ce59 [ 889.215588][T17076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.215602][T17076] RSP: 002b:00007fb1df1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 889.215618][T17076] RAX: ffffffffffffffda RBX: 00007fb1de615fa0 RCX: 00007fb1de39ce59 [ 889.215628][T17076] RDX: 0000000000000001 RSI: 0000200000009680 RDI: 0000000000000003 [ 889.215637][T17076] RBP: 00007fb1df1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 889.215646][T17076] R10: 0000000000010103 R11: 0000000000000246 R12: 0000000000000001 [ 889.215655][T17076] R13: 00007fb1de616038 R14: 00007fb1de615fa0 R15: 00007ffdb49ce728 [ 889.215669][T17076] [ 889.387521][T16917] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 889.545510][T16992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 889.575093][T16992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 889.602412][T16992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.639894][ T29] audit: type=1400 audit(2000000647.926:42820): avc: denied { search } for pid=17070 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.671637][T16992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 889.711127][ T29] audit: type=1400 audit(2000000647.926:42821): avc: denied { search } for pid=17070 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.726332][T14731] usbhid 7-1:1.0: can't add hid device: -71 [ 889.741726][T16992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 890.118186][T16917] usb 8-1: Using ep0 maxpacket: 8 [ 890.133362][ T5618] Bluetooth: hci0: command tx timeout [ 890.138070][T16917] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 890.157343][T17077] audit: audit_backlog=65 > audit_backlog_limit=64 [ 890.157354][T16917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.170972][T17085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 890.178392][T17085] audit: audit_lost=2532 audit_rate_limit=0 audit_backlog_limit=64 [ 890.186437][T17085] audit: backlog limit exceeded [ 890.193139][T17085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 890.212388][T17085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.283016][T16992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 890.427595][T16917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 890.449012][T14731] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 890.456858][T16917] pvrusb2: ********** [ 890.463133][T16992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 890.469620][T16917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 890.495049][T14731] usb 7-1: USB disconnect, device number 14 [ 890.528097][T16917] pvrusb2: Important functionality might not be entirely working. [ 890.575343][T16917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 890.622528][T16917] pvrusb2: ********** [ 890.664883][ T2355] pvrusb2: Invalid write control endpoint [ 890.881608][ T2355] pvrusb2: Invalid write control endpoint [ 890.910951][ T2355] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 890.935078][T17077] netlink: 'syz.7.2937': attribute type 21 has an invalid length. [ 890.950180][ T2355] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 890.957947][T17077] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2937'. [ 890.967072][ T2355] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 890.980910][T16992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.984793][ T2355] pvrusb2: Device being rendered inoperable [ 891.016568][ T2355] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 891.060935][ T2355] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 891.093020][ T2355] pvrusb2: Attached sub-driver cx25840 [ 891.117475][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 891.142312][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 891.162061][T16992] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.226041][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.233252][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.288807][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.295893][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.414034][ T5618] Bluetooth: hci0: command tx timeout [ 892.532101][T16466] usb 8-1: USB disconnect, device number 14 [ 892.954242][T17134] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 892.962488][T17134] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 892.978450][T17134] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 893.115870][ T5732] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 894.129015][ T5732] usb 7-1: unable to get BOS descriptor or descriptor too short [ 894.172450][ T5732] usb 7-1: not running at top speed; connect to a high speed hub [ 894.203124][ T5732] usb 7-1: config 194 has an invalid interface number: 4 but max is 0 [ 894.207657][T17132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17132 comm=syz.2.2942 [ 894.227381][ T5732] usb 7-1: config 194 has no interface number 0 [ 894.252192][ T5732] usb 7-1: config 194 interface 4 has no altsetting 0 [ 894.306654][ T5732] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 894.328603][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.344071][ T29] kauditd_printk_skb: 696 callbacks suppressed [ 894.344086][ T29] audit: type=1400 audit(2000000652.955:43478): avc: denied { ioctl } for pid=17144 comm="syz.7.2947" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 894.354421][ T5732] usb 7-1: Product: syz [ 894.447275][ T5732] usb 7-1: Manufacturer: syz [ 894.450318][ T29] audit: type=1400 audit(2000000652.964:43479): avc: denied { name_bind } for pid=17129 comm="syz.2.2942" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 894.482226][ T5732] usb 7-1: SerialNumber: syz [ 894.520579][ T29] audit: type=1400 audit(2000000653.019:43480): avc: denied { sys_module } for pid=16992 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 894.577069][ T29] audit: type=1400 audit(2000000653.019:43481): avc: denied { module_request } for pid=16992 comm="syz-executor" kmod="caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 894.589671][T16917] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 894.629114][ T29] audit: type=1400 audit(2000000653.056:43482): avc: denied { ioctl } for pid=17144 comm="syz.7.2947" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 894.690862][ T29] audit: type=1400 audit(2000000653.112:43483): avc: denied { module_request } for pid=16992 comm="syz-executor" kmod="netdev-caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 894.741885][ T29] audit: type=1400 audit(2000000653.121:43484): avc: denied { ioctl } for pid=17126 comm="syz.6.2946" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 894.748033][T17128] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2946'. [ 894.785093][ T29] audit: type=1400 audit(2000000653.121:43485): avc: denied { ioctl } for pid=17126 comm="syz.6.2946" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 894.795541][T16917] usb 8-1: Using ep0 maxpacket: 32 [ 894.833430][ T29] audit: type=1400 audit(2000000653.121:43486): avc: denied { ioctl } for pid=17126 comm="syz.6.2946" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 894.842948][T16917] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.876748][T16917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 894.889971][T16917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 894.903102][T16917] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 894.908734][ T29] audit: type=1400 audit(2000000653.130:43487): avc: denied { ioctl } for pid=17144 comm="syz.7.2947" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 894.913861][T16917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.951533][T17153] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2946'. [ 894.963235][T17153] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2946'. [ 894.977394][T16992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.001978][T16917] usb 8-1: config 0 descriptor?? [ 895.035165][T16917] hub 8-1:0.0: USB hub found [ 895.038595][T17155] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 895.254442][T16917] hub 8-1:0.0: 1 port detected [ 895.403838][T16992] veth0_vlan: entered promiscuous mode [ 895.429251][T16992] veth1_vlan: entered promiscuous mode [ 895.507964][T16992] veth0_macvtap: entered promiscuous mode [ 895.535333][T16992] veth1_macvtap: entered promiscuous mode [ 895.586393][T16992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.613835][T16992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.648175][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.657956][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.672741][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.687128][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.826231][T13438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.834340][T13438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.885915][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.898687][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.250837][T16917] hub 8-1:0.0: activate --> -90 [ 896.729764][T17146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.743472][ T5732] usbhid 7-1:194.4: couldn't find an input interrupt endpoint [ 896.911443][T17146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.957460][ T5732] usb 7-1: USB disconnect, device number 15 [ 897.156462][T16466] usb 8-1: USB disconnect, device number 15 [ 897.187697][T16917] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 897.699498][T17176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.894457][T17179] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 897.905213][T17179] qnx6: wrong signature (magic) in superblock #1. [ 897.911643][T17179] qnx6: unable to read the first superblock [ 898.272466][ T5732] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 898.551391][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 898.630353][ T5732] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 898.680130][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 898.749588][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 898.759823][ T5732] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 898.768948][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.886130][ T5732] usb 2-1: config 0 descriptor?? [ 898.899351][ T5732] hub 2-1:0.0: USB hub found [ 899.963487][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 899.963504][ T29] audit: type=1400 audit(2000000658.140:43736): avc: denied { read } for pid=17190 comm="syz.7.2956" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 900.171107][ T29] audit: type=1400 audit(2000000658.140:43737): avc: denied { read open } for pid=17190 comm="syz.7.2956" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 901.186578][T17188] audit: audit_backlog=66 > audit_backlog_limit=64 [ 901.210367][T17193] audit: audit_backlog=66 > audit_backlog_limit=64 [ 901.216904][T17193] audit: audit_lost=2557 audit_rate_limit=0 audit_backlog_limit=64 [ 901.224813][T17193] audit: backlog limit exceeded [ 901.254638][T17194] audit: audit_backlog=66 > audit_backlog_limit=64 [ 901.267103][ T5732] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 901.279318][ T29] audit: type=1400 audit(2000000658.223:43738): avc: denied { write } for pid=17187 comm="syz.2.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 901.306748][T16782] audit: audit_backlog=65 > audit_backlog_limit=64 [ 901.309579][T17188] audit: audit_lost=2558 audit_rate_limit=0 audit_backlog_limit=64 [ 901.321214][ T5339] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 901.347406][ T5732] usbhid 2-1:0.0: can't add hid device: -71 [ 901.349807][T17195] [U] [ 901.362455][ T5732] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 901.369669][T17195] [U] ÿÿÿÿ [ 901.391765][T17195] [U] D­Dp¬% [ 901.395506][T17195] [U]  [ 901.421292][ T5732] usb 2-1: USB disconnect, device number 10 [ 901.432078][T17195] [U]  [ 901.434952][T17195] [U] [ 901.437633][T17195] [U] [ 902.545712][T17195] [U] [ 902.548436][T17195] [U] [ 902.551127][T17195] [U] [ 902.553811][T17195] [U] [ 902.654231][T17189] [U] [ 902.804868][ T5339] usb 8-1: device not accepting address 16, error -71 [ 903.250564][ T5339] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 903.433813][ T5339] usb 8-1: Using ep0 maxpacket: 32 [ 903.615129][ T5339] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 903.765889][ T5339] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 903.817653][ T5732] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 903.849982][ T5339] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 903.917235][ T5339] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 903.967851][ T5339] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.037547][ T5339] usb 8-1: config 0 descriptor?? [ 904.175199][ T5339] hub 8-1:0.0: USB hub found [ 904.265999][T17215] 8021q: VLANs not supported on ip_vti0 [ 904.730308][T17219] vivid-000: ================= START STATUS ================= [ 904.738017][T17219] vivid-000: Test Pattern: 75% Colorbar [ 904.743566][T17219] vivid-000: Fill Percentage of Frame: 100 [ 904.749431][T17219] vivid-000: Horizontal Movement: No Movement [ 904.755513][T17219] vivid-000: Vertical Movement: No Movement [ 904.761401][T17219] vivid-000: OSD Text Mode: None [ 904.766346][T17219] vivid-000: Show Border: false [ 904.771192][T17219] vivid-000: Show Square: false [ 904.776038][T17219] vivid-000: Sensor Flipped Horizontally: false [ 904.782805][T17219] vivid-000: Sensor Flipped Vertically: false [ 904.788924][T17219] vivid-000: Insert SAV Code in Image: false [ 904.794897][T17219] vivid-000: Insert EAV Code in Image: false [ 904.800889][T17219] vivid-000: Insert Video Guard Band: false [ 904.806778][T17219] vivid-000: Reduced Framerate: false [ 904.812169][T17219] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 003-0 [ 904.819364][T17219] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 904.827425][T17219] vivid-000: Enable Capture Cropping: true [ 904.836991][T17219] vivid-000: Enable Capture Composing: true [ 904.843036][T17219] vivid-000: Enable Capture Scaler: true [ 904.848670][T17219] vivid-000: Timestamp Source: End of Frame [ 904.854571][T17219] vivid-000: Colorspace: SMPTE 170M [ 904.859977][T17219] vivid-000: Transfer Function: Default [ 904.865571][T17219] vivid-000: Y'CbCr Encoding: Default [ 904.870935][T17219] vivid-000: HSV Encoding: Hue 0-179 [ 904.876269][T17219] vivid-000: Quantization: Default [ 904.881386][T17219] vivid-000: Apply Alpha To Red Only: true [ 904.887722][T17219] vivid-000: Standard Aspect Ratio: 4x3 [ 904.893288][T17219] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 904.901029][T17219] vivid-000: DV Timings: 640x480p59 inactive [ 904.907014][T17219] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 904.914320][T17219] vivid-000: Maximum EDID Blocks: 2 [ 904.919534][T17219] vivid-000: Limited RGB Range (16-235): false [ 904.925683][T17219] vivid-000: Rx RGB Quantization Range: Automatic [ 904.932110][T17219] vivid-000: Power Present: 0x00000001 [ 904.937612][T17219] tpg source WxH: 720x576 (Y'CbCr) [ 905.021225][T17219] tpg field: 4 [ 905.024632][T17219] tpg crop: (0,0)/720x64 [ 905.028891][T17219] tpg compose: (0,0)/720x16 [ 905.033381][T17219] tpg colorspace: 1 [ 905.037176][T17219] tpg transfer function: 0/1 [ 905.041768][T17219] tpg Y'CbCr encoding: 0/1 [ 905.046181][T17219] tpg quantization: 0/2 [ 905.050356][T17219] tpg RGB range: 0/2 [ 905.054238][T17219] vivid-000: ================== END STATUS ================== [ 905.148661][ T5339] hub 8-1:0.0: 1 port detected [ 905.236139][ T5732] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 905.267388][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.310159][ T5732] usb 3-1: Product: syz [ 905.330537][ T5732] usb 3-1: Manufacturer: syz [ 905.354536][ T5732] usb 3-1: SerialNumber: syz [ 905.383525][ T5732] usb 3-1: config 0 descriptor?? [ 905.393068][ T29] kauditd_printk_skb: 860 callbacks suppressed [ 905.393082][ T29] audit: type=1400 audit(2000000663.151:44030): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 905.428651][T17223] nbd2: detected capacity change from 0 to 63 [ 905.444735][ T5618] block nbd2: Receive control failed (result -32) [ 905.473109][ T5890] block nbd2: Dead connection, failed to find a fallback [ 905.481384][ T29] audit: type=1400 audit(2000000663.151:44031): avc: denied { read write open } for pid=16992 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 905.518676][ T5890] block nbd2: shutting down sockets [ 905.522143][ T29] audit: type=1400 audit(2000000663.151:44032): avc: denied { ioctl } for pid=16992 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 905.532156][ T5890] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.592648][ T29] audit: type=1400 audit(2000000663.197:44033): avc: denied { ioctl } for pid=17205 comm="syz.2.2960" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 905.610983][ T5890] buffer_io_error: 6 callbacks suppressed [ 905.610996][ T5890] Buffer I/O error on dev nbd2, logical block 0, async page read [ 905.633776][ T29] audit: type=1400 audit(2000000663.197:44034): avc: denied { ioctl } for pid=17205 comm="syz.2.2960" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 905.633810][ T29] audit: type=1400 audit(2000000663.197:44035): avc: denied { ioctl } for pid=17205 comm="syz.2.2960" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 905.633841][ T29] audit: type=1400 audit(2000000663.261:44036): avc: denied { read write } for pid=16782 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 905.633892][ T29] audit: type=1400 audit(2000000663.261:44037): avc: denied { read write open } for pid=16782 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 905.633924][ T29] audit: type=1400 audit(2000000663.270:44038): avc: denied { ioctl } for pid=17224 comm="syz.6.2966" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 905.633953][ T29] audit: type=1400 audit(2000000663.270:44039): avc: denied { ioctl } for pid=16782 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 905.662651][T14683] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 905.662807][ T5890] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.665274][ T5890] Buffer I/O error on dev nbd2, logical block 1, async page read [ 905.665329][ T5890] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.665376][ T5890] Buffer I/O error on dev nbd2, logical block 2, async page read [ 905.665413][ T5890] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.665453][ T5890] Buffer I/O error on dev nbd2, logical block 3, async page read [ 905.665495][ T5890] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.665541][ T5890] Buffer I/O error on dev nbd2, logical block 0, async page read [ 905.665571][ T5890] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.665621][ T5890] Buffer I/O error on dev nbd2, logical block 1, async page read [ 905.665652][ T5890] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.665694][ T5890] Buffer I/O error on dev nbd2, logical block 2, async page read [ 905.665734][ T5890] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.666553][ T5890] Buffer I/O error on dev nbd2, logical block 3, async page read [ 905.666611][ T5890] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.666657][ T5890] Buffer I/O error on dev nbd2, logical block 0, async page read [ 905.666707][ T5890] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.666750][ T5890] Buffer I/O error on dev nbd2, logical block 1, async page read [ 905.667863][ T5890] ldm_validate_partition_table(): Disk read failed. [ 905.668640][ T5890] Dev nbd2: unable to read RDB block 0 [ 905.669486][ T5890] nbd2: unable to read partition table [ 905.722365][ T5890] ldm_validate_partition_table(): Disk read failed. [ 905.723390][ T5890] Dev nbd2: unable to read RDB block 0 [ 905.724409][ T5890] nbd2: unable to read partition table [ 905.831466][T14683] usb 7-1: Using ep0 maxpacket: 32 [ 905.860591][ T5339] hub 8-1:0.0: activate --> -90 [ 905.879793][T14683] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 905.879822][T14683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 905.879845][T14683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 905.879871][T14683] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 905.879884][T14683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.889820][T14683] usb 7-1: config 0 descriptor?? [ 905.898032][T14683] hub 7-1:0.0: USB hub found [ 905.969954][T14731] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 906.103356][T17203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.146883][T14731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 906.194255][T17203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.204031][T14683] hub 7-1:0.0: 1 port detected [ 906.227041][ T5339] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 906.227264][ T5794] usb 8-1: USB disconnect, device number 17 [ 906.243414][T14731] usb 2-1: not running at top speed; connect to a high speed hub [ 906.257691][ T5732] usb 3-1: Firmware version (0.0) predates our first public release. [ 906.266812][ T5732] usb 3-1: Please update to version 0.2 or newer [ 906.274263][T14731] usb 2-1: config 194 has an invalid interface number: 4 but max is 0 [ 906.283457][T14731] usb 2-1: config 194 has no interface number 0 [ 906.297163][T14731] usb 2-1: config 194 interface 4 has no altsetting 0 [ 906.312445][T14731] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 906.323319][ T5732] usb 3-1: USB disconnect, device number 22 [ 906.329382][T14731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.340656][T14731] usb 2-1: Product: syz [ 906.344868][T14731] usb 2-1: Manufacturer: syz [ 906.350769][T14731] usb 2-1: SerialNumber: syz [ 906.817291][T17229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2968'. [ 906.888021][T17241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2968'. [ 906.901431][T17241] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 906.922357][T17241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2968'. [ 906.963652][T17241] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 906.987829][T14683] hub 7-1:0.0: activate --> -90 [ 907.162330][T13442] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 907.332193][T17225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.363297][T17225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.610033][ T5339] usb 7-1: USB disconnect, device number 16 [ 907.855427][T14683] usb 7-1-port1: config error [ 907.910029][ T5710] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 908.136972][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 908.229290][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 908.244757][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 908.259078][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 908.277413][ T5710] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 908.354735][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.392798][ T5710] usb 5-1: config 0 descriptor?? [ 908.423108][ T5710] hub 5-1:0.0: USB hub found [ 908.489721][T17258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.625401][T17260] can: request_module (can-proto-4) failed. [ 908.669764][ T5710] hub 5-1:0.0: 1 port detected [ 908.678797][ T5339] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 908.841411][ T5339] usb 3-1: Using ep0 maxpacket: 16 [ 908.850082][ T5339] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 908.860317][ T5339] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 908.878599][ T5339] usb 3-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 908.901752][T14731] usbhid 2-1:194.4: couldn't find an input interrupt endpoint [ 908.945664][T14683] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 908.946241][T14731] usb 2-1: USB disconnect, device number 11 [ 908.973509][ T5339] usb 3-1: config 166 has no interface number 0 [ 908.996204][ T5339] usb 3-1: config 166 has no interface number 1 [ 909.015058][ T5339] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 909.043089][ T5339] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 909.078620][ T5339] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 909.124903][ T5339] usb 3-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 909.153283][ T5339] usb 3-1: config 166 interface 177 has no altsetting 0 [ 909.153364][T14683] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 909.170302][ T5339] usb 3-1: config 166 interface 34 has no altsetting 0 [ 909.178687][T14683] usb 7-1: config 0 has no interface number 0 [ 909.185613][T14683] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 909.204180][ T5339] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 909.214855][T14683] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 909.225816][ T5339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.235637][T14683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.245284][ T5339] usb 3-1: Product: syz [ 909.249469][T14683] usb 7-1: Product: syz [ 909.255838][ T5339] usb 3-1: Manufacturer: syz [ 909.260475][T14683] usb 7-1: Manufacturer: syz [ 909.265174][ T5339] usb 3-1: SerialNumber: syz [ 909.269973][T14683] usb 7-1: SerialNumber: syz [ 909.284708][T14683] usb 7-1: config 0 descriptor?? [ 909.317514][T14683] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 909.834784][T17270] SET target dimension over the limit! [ 910.178748][T14683] hub 5-1:0.0: activate --> -90 [ 910.250448][T14731] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 910.278592][ T5339] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 910.341043][ T5339] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 910.356852][ T5732] usb 7-1: USB disconnect, device number 17 [ 910.364018][T17260] yurex 7-1:0.50: yurex_write - failed to send bulk msg, error -19 [ 910.377257][ T5732] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 910.393886][ T5339] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 910.405204][T17250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.415838][ T5339] uvcvideo 3-1:166.34: No valid video chain found. [ 910.419680][T17250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.438442][T14731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 910.441566][ T5339] usb 3-1: USB disconnect, device number 23 [ 910.467394][T14731] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 910.488952][T14731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.497624][T14683] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 910.499762][ T5794] usb 5-1: USB disconnect, device number 124 [ 910.520782][T14731] usb 2-1: config 0 descriptor?? [ 910.551424][T14731] smsusb:smsusb_probe: board id=8, interface number 0 [ 910.574948][T14731] smsusb:smsusb_probe: Device initialized with return code -19 [ 910.798375][ T5794] usb 2-1: USB disconnect, device number 12 [ 910.856475][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 910.856490][ T29] audit: type=1400 audit(2000000668.188:44493): avc: denied { read write } for pid=16153 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 910.898973][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2981'. [ 910.914647][ T29] audit: type=1400 audit(2000000668.188:44494): avc: denied { read write open } for pid=16153 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 911.000917][ T29] audit: type=1400 audit(2000000668.188:44495): avc: denied { ioctl } for pid=16153 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 911.013662][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2982'. [ 911.050684][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2982'. [ 911.061007][ T29] audit: type=1400 audit(2000000668.225:44496): avc: denied { create } for pid=17278 comm="syz.7.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 911.463515][ T29] audit: type=1400 audit(2000000668.225:44497): avc: denied { write } for pid=17278 comm="syz.7.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 911.484492][ T29] audit: type=1400 audit(2000000668.244:44498): avc: denied { read write } for pid=16153 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 911.521439][T17287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.750107][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2982'. [ 911.778959][ T29] audit: type=1400 audit(2000000668.244:44499): avc: denied { read write open } for pid=16153 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 911.831244][T17281] netlink: 'syz.7.2982': attribute type 10 has an invalid length. [ 911.843574][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2982'. [ 911.856146][ T29] audit: type=1400 audit(2000000668.244:44500): avc: denied { ioctl } for pid=16153 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 911.883833][ T5794] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 911.906826][T17281] veth0_vlan: left promiscuous mode [ 911.913095][T17281] veth0_vlan: entered promiscuous mode [ 911.918705][ T29] audit: type=1400 audit(2000000668.299:44501): avc: denied { read write } for pid=16041 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 911.949468][T17281] team0: Device veth0_vlan failed to register rx_handler [ 911.960457][ T29] audit: type=1400 audit(2000000668.299:44502): avc: denied { read write open } for pid=16041 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 912.512171][ T5794] usb 3-1: config 8 has an invalid interface number: 137 but max is 0 [ 912.520923][ T5794] usb 3-1: config 8 has no interface number 0 [ 912.533356][ T5794] usb 3-1: string descriptor 0 read error: -22 [ 912.541677][ T5794] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 912.554386][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.604737][ T5794] ttusb_dec_send_command: command bulk message failed: error -22 [ 912.621369][ T5794] ttusb-dec 3-1:8.137: probe with driver ttusb-dec failed with error -22 [ 912.653327][T17300] 8021q: VLANs not supported on ip_vti0 [ 912.743956][T17300] vivid-000: ================= START STATUS ================= [ 912.751607][T17300] vivid-000: Test Pattern: 75% Colorbar [ 912.757283][T17300] vivid-000: Fill Percentage of Frame: 100 [ 912.763088][T17300] vivid-000: Horizontal Movement: No Movement [ 912.770004][T17300] vivid-000: Vertical Movement: No Movement [ 912.775911][T17300] vivid-000: OSD Text Mode: None [ 912.780831][T17300] vivid-000: Show Border: false [ 912.785668][T17300] vivid-000: Show Square: false [ 912.790542][T17300] vivid-000: Sensor Flipped Horizontally: false [ 912.796785][T17300] vivid-000: Sensor Flipped Vertically: false [ 912.803148][T17300] vivid-000: Insert SAV Code in Image: false [ 912.809165][T17300] vivid-000: Insert EAV Code in Image: false [ 912.815142][T17300] vivid-000: Insert Video Guard Band: false [ 912.821051][T17300] vivid-000: Reduced Framerate: false [ 912.826420][T17300] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 003-0 [ 912.833629][T17300] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 912.841559][T17300] vivid-000: Enable Capture Cropping: true [ 912.847360][T17300] vivid-000: Enable Capture Composing: true [ 912.853265][T17300] vivid-000: Enable Capture Scaler: true [ 912.858890][T17300] vivid-000: Timestamp Source: End of Frame [ 912.864807][T17300] vivid-000: Colorspace: SMPTE 170M [ 912.869983][T17300] vivid-000: Transfer Function: Default [ 912.875521][T17300] vivid-000: Y'CbCr Encoding: Default [ 912.881322][T17300] vivid-000: HSV Encoding: Hue 0-179 [ 912.886813][T17300] vivid-000: Quantization: Default [ 912.891909][T17300] vivid-000: Apply Alpha To Red Only: true [ 912.897741][T17300] vivid-000: Standard Aspect Ratio: 4x3 [ 912.903286][T17300] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 912.911023][T17300] vivid-000: DV Timings: 640x480p59 inactive [ 912.917031][T17300] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 912.924311][T17300] vivid-000: Maximum EDID Blocks: 2 [ 912.929550][T17300] vivid-000: Limited RGB Range (16-235): false [ 912.935702][T17300] vivid-000: Rx RGB Quantization Range: Automatic [ 912.942105][T17300] vivid-000: Power Present: 0x00000001 [ 912.947540][T17300] tpg source WxH: 720x576 (Y'CbCr) [ 912.952645][T17300] tpg field: 4 [ 912.955987][T17300] tpg crop: (0,0)/720x64 [ 912.960214][T17300] tpg compose: (0,0)/720x16 [ 912.964685][T17300] tpg colorspace: 1 [ 912.968458][T17300] tpg transfer function: 0/1 [ 912.973038][T17300] tpg Y'CbCr encoding: 0/1 [ 912.977419][T17300] tpg quantization: 0/2 [ 912.981554][T17300] tpg RGB range: 0/2 [ 912.985425][T17300] vivid-000: ================== END STATUS ================== [ 913.070575][ T5794] usb 3-1: USB disconnect, device number 24 [ 914.042171][T17319] SELinux: syz.6.2994 (17319) wrote to user. This is no longer supported. [ 914.598811][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2993'. [ 914.683001][ T5339] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 914.824816][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'. [ 914.841596][ T5618] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 914.880309][ T5339] usb 2-1: Using ep0 maxpacket: 8 [ 914.918649][ T5339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 914.951827][ T5339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 915.023032][ T5339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.047489][ T5339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.062020][T17329] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.069308][T17329] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.073009][ T5339] usb 2-1: Product: syz [ 915.169331][T17335] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 916.089494][ T5339] usb 2-1: Manufacturer: à ¬ [ 916.095197][ T5339] usb 2-1: SerialNumber: syz [ 916.284991][ T29] kauditd_printk_skb: 870 callbacks suppressed [ 916.285013][ T29] audit: type=1400 audit(2000000673.199:44890): avc: denied { read } for pid=17338 comm="syz.2.3002" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 916.464671][T14683] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 916.523465][ T29] audit: type=1400 audit(2000000673.199:44891): avc: denied { read open } for pid=17338 comm="syz.2.3002" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 916.589439][T17344] 8021q: VLANs not supported on ip_vti0 [ 916.608925][ T29] audit: type=1400 audit(2000000673.199:44892): avc: denied { ioctl } for pid=17336 comm="syz.4.3001" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 916.626221][T17321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.736612][T17344] vivid-000: ================= START STATUS ================= [ 916.744320][T17344] vivid-000: Test Pattern: 75% Colorbar [ 916.749861][T17344] vivid-000: Fill Percentage of Frame: 100 [ 916.755700][T17344] vivid-000: Horizontal Movement: No Movement [ 916.761781][T17344] vivid-000: Vertical Movement: No Movement [ 916.768186][T17344] vivid-000: OSD Text Mode: None [ 916.773115][T17344] vivid-000: Show Border: false [ 916.777964][T17344] vivid-000: Show Square: false [ 916.782791][T17344] vivid-000: Sensor Flipped Horizontally: false [ 916.789057][T17344] vivid-000: Sensor Flipped Vertically: false [ 916.795105][T17344] vivid-000: Insert SAV Code in Image: false [ 916.797722][T17345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 916.801104][T17344] vivid-000: Insert EAV Code in Image: false [ 916.807591][T17345] audit: audit_lost=2910 audit_rate_limit=0 audit_backlog_limit=64 [ 916.813533][T17344] vivid-000: Insert Video Guard Band: [ 916.821414][T17345] audit: backlog limit exceeded [ 916.821803][T17345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 916.826851][T17344] false [ 916.831695][T17345] audit: audit_lost=2911 audit_rate_limit=0 audit_backlog_limit=64 [ 916.831708][T17345] audit: backlog limit exceeded [ 916.831978][T17345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 916.838223][T17344] [ 916.838230][T17344] vivid-000: Reduced Framerate: false [ 916.867885][T17344] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 003-0 [ 916.876100][T17344] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 916.884011][T17344] vivid-000: Enable Capture Cropping: true [ 916.889808][T17344] vivid-000: Enable Capture Composing: true [ 916.895718][T17344] vivid-000: Enable Capture Scaler: true [ 916.901341][T17344] vivid-000: Timestamp Source: End of Frame [ 916.907248][T17344] vivid-000: Colorspace: SMPTE 170M [ 916.912446][T17344] vivid-000: Transfer Function: Default [ 916.918012][T17344] vivid-000: Y'CbCr Encoding: Default [ 916.923380][T17344] vivid-000: HSV Encoding: Hue 0-179 [ 916.928699][T17344] vivid-000: Quantization: Default [ 916.933803][T17344] vivid-000: Apply Alpha To Red Only: true [ 916.939630][T17344] vivid-000: Standard Aspect Ratio: 4x3 [ 916.945172][T17344] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 916.952922][T17344] vivid-000: DV Timings: 640x480p59 inactive [ 916.958921][T17344] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 916.966200][T17344] vivid-000: Maximum EDID Blocks: 2 [ 916.971411][T17344] vivid-000: Limited RGB Range (16-235): false [ 916.977550][T17344] vivid-000: Rx RGB Quantization Range: Automatic [ 916.984649][T17344] vivid-000: Power Present: 0x00000001 [ 916.990088][T17344] tpg source WxH: 720x576 (Y'CbCr) [ 916.995187][T17344] tpg field: 4 [ 916.998547][T17344] tpg crop: (0,0)/720x64 [ 917.002776][T17344] tpg compose: (0,0)/720x16 [ 917.007245][T17344] tpg colorspace: 1 [ 917.011028][T17344] tpg transfer function: 0/1 [ 917.015674][T17344] tpg Y'CbCr encoding: 0/1 [ 917.020076][T17344] tpg quantization: 0/2 [ 917.024224][T17344] tpg RGB range: 0/2 [ 917.028084][T17344] vivid-000: ================== END STATUS ================== [ 917.035875][T14683] usb 5-1: Using ep0 maxpacket: 32 [ 917.066818][ T5339] cdc_ncm 2-1:1.0: bind() failure [ 917.088860][T14683] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 917.100050][ T5339] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 917.107738][ T5339] cdc_ncm 2-1:1.1: bind() failure [ 917.123889][T14683] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 917.141406][T14683] usb 5-1: config 0 has no interface number 0 [ 917.148687][ T5339] usb 2-1: USB disconnect, device number 13 [ 917.170215][T14683] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 917.179233][ T5711] hid-generic 0000:0000:0000.001E: item fetching failed at offset 0/2 [ 917.209031][ T5711] hid-generic 0000:0000:0000.001E: probe with driver hid-generic failed with error -22 [ 917.218689][T14683] usb 5-1: config 0 has no interface number 0 [ 917.237939][T14683] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 917.267968][T14683] usb 5-1: config 0 has no interface number 0 [ 917.301669][T14683] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 917.319173][T14683] usb 5-1: config 0 has no interface number 0 [ 917.332087][T14683] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 917.342143][T14683] usb 5-1: config 0 has no interface number 0 [ 917.399846][T14683] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 917.410377][T14683] usb 5-1: config 0 has no interface number 0 [ 917.451443][T14683] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 917.489680][T14683] usb 5-1: config 0 has no interface number 0 [ 917.504207][T14683] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 917.527040][T14683] usb 5-1: config 0 has no interface number 0 [ 917.543639][T14683] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 917.556740][T14683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.587285][T14683] usb 5-1: Product: syz [ 917.597860][T14683] usb 5-1: Manufacturer: syz [ 917.612170][T17357] blktrace: Concurrent blktraces are not allowed on nullb0 [ 917.623452][T14683] usb 5-1: SerialNumber: syz [ 917.639297][T14683] usb 5-1: config 0 descriptor?? [ 917.653574][T14683] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 917.773886][T17364] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3009'. [ 917.836857][ T5794] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 918.038287][ T5794] usb 2-1: Using ep0 maxpacket: 32 [ 918.081224][ T5794] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 918.098745][ T5794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 918.105480][ T5794] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 918.124172][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.149849][ T5794] usb 2-1: config 0 descriptor?? [ 918.194326][T14731] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 918.285685][T14683] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 918.381733][T14731] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 918.402234][T14731] usb 8-1: config 0 has no interface number 0 [ 918.429658][T14731] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x7B, changing to 0xB [ 918.457708][T14731] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 918.481448][T14731] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 918.499145][T14731] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 918.509661][T14731] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 918.517805][T14731] usb 8-1: Product: syz [ 918.523506][T14731] usb 8-1: SerialNumber: syz [ 918.568187][T14731] usb 8-1: config 0 descriptor?? [ 918.584000][T14731] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 918.736465][ T5794] hid_parser_main: 74 callbacks suppressed [ 918.736491][ T5794] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 918.750069][ T5794] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 918.757471][ T5794] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 918.770876][ T5794] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 918.784124][ T5794] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 918.804060][ T5794] corsair-psu 0003:1B1C:1C09.001F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 918.894336][T14683] usb 8-1: USB disconnect, device number 18 [ 919.082230][T17391] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 919.237236][ T5794] corsair-psu 0003:1B1C:1C09.001F: unable to initialize device (-110) [ 919.308868][ T5794] corsair-psu 0003:1B1C:1C09.001F: probe with driver corsair-psu failed with error -110 [ 919.328525][ T5794] usb 2-1: USB disconnect, device number 14 [ 919.584055][ T5268] etas_es58x 5-1:0.2 can0: bit-timing not yet defined [ 919.591039][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 919.600177][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 919.609308][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 919.618454][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 919.627595][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 919.655273][ T5339] usb 5-1: USB disconnect, device number 125 [ 919.662053][ T5339] etas_es58x 5-1:0.2: Disconnecting syz syz [ 919.675030][ T5268] etas_es58x 5-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 919.822791][T17406] FAULT_INJECTION: forcing a failure. [ 919.822791][T17406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.850175][T17406] CPU: 0 UID: 0 PID: 17406 Comm: syz.1.3017 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.850203][T17406] Tainted: [L]=SOFTLOCKUP [ 919.850209][T17406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 919.850219][T17406] Call Trace: [ 919.850224][T17406] [ 919.850231][T17406] dump_stack_lvl+0x100/0x190 [ 919.850255][T17406] should_fail_ex.cold+0x5/0xa [ 919.850276][T17406] _copy_to_user+0x32/0xd0 [ 919.850295][T17406] __rhtab_map_lookup_and_delete_batch+0x9f7/0xf40 [ 919.850322][T17406] ? __pfx_rhtab_map_lookup_batch+0x10/0x10 [ 919.850342][T17406] bpf_map_do_batch+0x5b2/0x6d0 [ 919.850359][T17406] ? bpf_lsm_bpf+0x9/0x10 [ 919.850383][T17406] __sys_bpf+0xe98/0x4e80 [ 919.850408][T17406] ? kstrtouint_from_user+0xa0/0x1d0 [ 919.850430][T17406] ? __pfx___sys_bpf+0x10/0x10 [ 919.850456][T17406] ? rcu_is_watching+0x12/0xc0 [ 919.850477][T17406] ? get_pid_task+0xfc/0x250 [ 919.850498][T17406] ? rcu_is_watching+0x12/0xc0 [ 919.850517][T17406] ? get_pid_task+0xfc/0x250 [ 919.850544][T17406] ? lock_release+0x24d/0x310 [ 919.850564][T17406] ? ksys_write+0x12a/0x250 [ 919.850587][T17406] ? rcu_is_watching+0x12/0xc0 [ 919.850609][T17406] ? preempt_count_add+0x76/0x150 [ 919.850626][T17406] ? ksys_write+0x190/0x250 [ 919.850648][T17406] ? rcu_is_watching+0x12/0xc0 [ 919.850668][T17406] ? ksys_write+0x190/0x250 [ 919.850690][T17406] ? lock_release+0x24d/0x310 [ 919.850711][T17406] ? fput+0x79/0x100 [ 919.850734][T17406] ? __x64_sys_bpf+0xce/0x140 [ 919.850759][T17406] __x64_sys_bpf+0xce/0x140 [ 919.850787][T17406] ? trace_irq_enable.constprop.0+0x122/0x160 [ 919.850813][T17406] do_syscall_64+0x115/0x870 [ 919.850833][T17406] ? clear_bhb_loop+0x40/0x90 [ 919.850855][T17406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.850872][T17406] RIP: 0033:0x7f1710f9ce59 [ 919.850886][T17406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.850902][T17406] RSP: 002b:00007f1711da5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 919.850919][T17406] RAX: ffffffffffffffda RBX: 00007f1711215fa0 RCX: 00007f1710f9ce59 [ 919.850931][T17406] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 0000000000000018 [ 919.850942][T17406] RBP: 00007f1711da5090 R08: 0000000000000000 R09: 0000000000000000 [ 919.850952][T17406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.850962][T17406] R13: 00007f1711216038 R14: 00007f1711215fa0 R15: 00007ffdadb649b8 [ 919.850979][T17406] [ 920.221211][T14731] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 920.420731][T14731] usb 7-1: unable to get BOS descriptor or descriptor too short [ 920.785458][T14731] usb 7-1: not running at top speed; connect to a high speed hub [ 921.191516][T14731] usb 7-1: config 1 has an invalid descriptor of length 12, skipping remainder of the config [ 921.226970][T14731] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 921.266141][T14731] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 921.287900][T14731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.302659][T14731] usb 7-1: Product: syz [ 921.315402][T14731] usb 7-1: Manufacturer: syz [ 921.321308][T14731] usb 7-1: SerialNumber: syz [ 921.582870][T17401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3015'. [ 921.606108][T17429] blktrace: Concurrent blktraces are not allowed on nullb0 [ 921.868292][ T29] kauditd_printk_skb: 1646 callbacks suppressed [ 921.868334][ T29] audit: type=1400 audit(2000000678.191:45934): avc: denied { map_create } for pid=17428 comm="syz.1.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 921.868443][ T29] audit: type=1400 audit(2000000678.191:45935): avc: denied { map_create } for pid=17428 comm="syz.1.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 921.868549][ T29] audit: type=1400 audit(2000000678.200:45936): avc: denied { map_read map_write } for pid=17428 comm="syz.1.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 921.868656][ T29] audit: type=1400 audit(2000000678.227:45937): avc: denied { prog_load } for pid=17428 comm="syz.1.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 921.868741][ T29] audit: type=1400 audit(2000000678.227:45938): avc: denied { bpf } for pid=17428 comm="syz.1.3023" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 921.868832][ T29] audit: type=1400 audit(2000000678.237:45939): avc: denied { prog_load } for pid=17428 comm="syz.1.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 921.868939][ T29] audit: type=1400 audit(2000000678.237:45940): avc: denied { perfmon } for pid=17428 comm="syz.1.3023" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 921.869013][ T29] audit: type=1400 audit(2000000678.237:45941): avc: denied { perfmon } for pid=17428 comm="syz.1.3023" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 921.869120][ T29] audit: type=1400 audit(2000000678.246:45942): avc: denied { perfmon } for pid=17428 comm="syz.1.3023" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 921.869231][ T29] audit: type=1400 audit(2000000678.246:45943): avc: denied { perfmon } for pid=17428 comm="syz.1.3023" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 921.965835][T14683] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 922.143301][T17439] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3024'. [ 922.175653][T17436] libceph: resolve '0' (ret=-3): failed [ 922.963058][T16466] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 923.157984][T16466] usb 5-1: Using ep0 maxpacket: 32 [ 923.168225][T16466] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.168855][T16917] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 923.210753][T16466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 923.243152][T16466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 923.272276][T16466] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 923.293767][T16466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.316449][T16466] usb 5-1: config 0 descriptor?? [ 923.332584][T16466] hub 5-1:0.0: USB hub found [ 923.374991][T16917] usb 2-1: Using ep0 maxpacket: 32 [ 923.410858][T16917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.459254][T16917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 923.489352][T16917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 923.522351][T16917] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 923.560273][T16917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.594978][T16917] usb 2-1: config 0 descriptor?? [ 923.621436][T16917] hub 2-1:0.0: USB hub found [ 923.661787][T16466] hub 5-1:0.0: 1 port detected [ 923.815610][T14731] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 923.851577][T14731] usb 7-1: 1:1 : sample bitwidth 253 in over sample bytes 16 [ 923.867039][T16917] hub 2-1:0.0: 1 port detected [ 923.881481][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 923.885257][T14731] usb 7-1: 1:1 : unsupported sample bitwidth 253 in 16 bytes [ 923.896898][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 923.904200][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 923.914924][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 923.927857][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 923.982051][T14731] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 924.134999][T14731] usb 7-1: USB disconnect, device number 18 [ 924.333738][ T6408] udevd[6408]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.544555][T17459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.597423][T17459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.662983][T16466] hub 5-1:0.0: activate --> -90 [ 924.935165][ T5794] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 924.942614][T14731] usb 2-1: USB disconnect, device number 15 [ 924.948663][T17452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.961108][T17452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.016601][T16466] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 925.016720][ T5794] usb 5-1: USB disconnect, device number 126 [ 925.044453][T16917] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 925.229599][T16917] usb 7-1: Using ep0 maxpacket: 32 [ 925.248442][T16917] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 925.288538][T16917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 925.312220][T16917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 925.324416][T16917] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 925.335070][T16917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.351709][T16917] usb 7-1: config 0 descriptor?? [ 925.361750][T16917] hub 7-1:0.0: USB hub found [ 925.482974][T17474] lo speed is unknown, defaulting to 1000 [ 925.597503][T16917] hub 7-1:0.0: 1 port detected [ 926.242621][T17513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.400603][ T5604] Bluetooth: hci3: command tx timeout [ 926.810289][ T5732] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 927.264899][ T5732] usb 8-1: config 8 has an invalid interface number: 137 but max is 0 [ 927.302258][ T29] kauditd_printk_skb: 939 callbacks suppressed [ 927.302291][ T29] audit: type=1400 audit(2000000683.367:46883): avc: denied { ioctl } for pid=17486 comm="syz.6.3030" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 927.302573][T17487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.359493][ T29] audit: type=1400 audit(2000000683.413:46884): avc: denied { ioctl } for pid=17524 comm="syz.4.3034" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 927.425663][T17527] FAULT_INJECTION: forcing a failure. [ 927.425663][T17527] name failslab, interval 1, probability 0, space 0, times 0 [ 927.438496][T17527] CPU: 0 UID: 0 PID: 17527 Comm: syz.4.3034 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.438523][T17527] Tainted: [L]=SOFTLOCKUP [ 927.438532][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 927.438543][T17527] Call Trace: [ 927.438549][T17527] [ 927.438555][T17527] dump_stack_lvl+0x100/0x190 [ 927.438577][T17527] should_fail_ex.cold+0x5/0xa [ 927.438597][T17527] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 927.438620][T17527] should_failslab+0xc2/0x120 [ 927.438645][T17527] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 927.438666][T17527] ? do_getname+0x35/0x390 [ 927.438686][T17527] ? __schedule+0x31d8/0x6730 [ 927.438707][T17527] do_getname+0x35/0x390 [ 927.438727][T17527] do_sys_openat2+0xc7/0x1e0 [ 927.438746][T17527] ? __pfx_do_sys_openat2+0x10/0x10 [ 927.438766][T17527] __x64_sys_creat+0xcc/0x120 [ 927.438782][T17527] ? __pfx___x64_sys_creat+0x10/0x10 [ 927.438801][T17527] ? rcu_is_watching+0x12/0xc0 [ 927.438821][T17527] ? trace_irq_enable.constprop.0+0x122/0x160 [ 927.438840][T17527] do_syscall_64+0x115/0x870 [ 927.438860][T17527] ? clear_bhb_loop+0x40/0x90 [ 927.438878][T17527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.438895][T17527] RIP: 0033:0x7f3f9719ce59 [ 927.438909][T17527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.438932][T17527] RSP: 002b:00007f3f980b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 927.438949][T17527] RAX: ffffffffffffffda RBX: 00007f3f97416090 RCX: 00007f3f9719ce59 [ 927.438961][T17527] RDX: 0000000000000000 RSI: d931d3864d39dcda RDI: 0000200000000100 [ 927.438972][T17527] RBP: 00007f3f980b7090 R08: 0000000000000000 R09: 0000000000000000 [ 927.438982][T17527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.438992][T17527] R13: 00007f3f97416128 R14: 00007f3f97416090 R15: 00007ffe18c7bef8 [ 927.439009][T17527] [ 927.658319][T17527] 9p: Bad value for 'rfdno' [ 927.673718][T17487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.824098][ T5732] usb 8-1: config 8 has no interface number 0 [ 927.836376][ T29] audit: type=1400 audit(2000000683.699:46885): avc: denied { mounton } for pid=17524 comm="syz.4.3034" path="/15" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 927.860573][ T5732] usb 8-1: string descriptor 0 read error: -22 [ 927.867303][ T5732] usb 8-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 927.876375][ T5732] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.885230][ T29] audit: type=1400 audit(2000000683.791:46886): avc: denied { allowed } for pid=17486 comm="syz.6.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 927.905615][ T29] audit: type=1400 audit(2000000683.819:46887): avc: denied { read write } for pid=16782 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 927.933146][ T5732] ttusb_dec_send_command: command bulk message failed: error -22 [ 927.955914][ T5732] ttusb-dec 8-1:8.137: probe with driver ttusb-dec failed with error -22 [ 927.978939][T14683] usb 7-1: USB disconnect, device number 19 [ 927.990593][T16917] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 927.999733][T17474] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.010019][ T29] audit: type=1400 audit(2000000683.819:46888): avc: denied { read write open } for pid=16782 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 928.021152][T17474] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.035321][ T29] audit: type=1400 audit(2000000683.819:46889): avc: denied { ioctl } for pid=16782 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 928.071820][ T29] audit: type=1400 audit(2000000683.856:46890): avc: denied { ioctl } for pid=17508 comm="syz.7.3031" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 928.081120][T17474] bridge_slave_0: entered allmulticast mode [ 928.097562][ T29] audit: type=1400 audit(2000000683.856:46891): avc: denied { ioctl } for pid=17508 comm="syz.7.3031" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 928.128654][ T29] audit: type=1400 audit(2000000683.856:46892): avc: denied { ioctl } for pid=17508 comm="syz.7.3031" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 928.197576][T17474] bridge_slave_0: entered promiscuous mode [ 928.215515][T17474] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.232860][T16917] usb 8-1: USB disconnect, device number 19 [ 928.272183][T17474] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.283047][T17474] bridge_slave_1: entered allmulticast mode [ 928.322855][T17474] bridge_slave_1: entered promiscuous mode [ 928.357736][T17474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.385243][T17474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.418889][T17540] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3037'. [ 928.439758][T17474] team0: Port device team_slave_0 added [ 928.455901][T17474] team0: Port device team_slave_1 added [ 928.481595][T17474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.488570][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.514982][T17474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.541568][T17474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.548656][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.592241][ T5604] Bluetooth: hci3: command tx timeout [ 928.631482][T17474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.712994][T17474] hsr_slave_0: entered promiscuous mode [ 928.722799][T17474] hsr_slave_1: entered promiscuous mode [ 928.731477][T17474] debugfs: 'hsr0' already exists in 'hsr' [ 928.737319][T17474] Cannot create hsr debugfs directory [ 929.124615][T17474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.166455][T17474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.385386][T17474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.759592][T17474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.180104][T17474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 930.330043][T17474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 930.341843][T17474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 930.375045][T17474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 930.471022][T17474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 930.485606][T17474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 930.494843][T17474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 930.503491][T17474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 930.516819][ T5732] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 930.871490][ T5604] Bluetooth: hci3: command tx timeout [ 931.031797][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3043'. [ 931.058685][ T5732] usb 7-1: Using ep0 maxpacket: 32 [ 931.615042][T17474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.678711][ T5732] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 931.717010][ T5732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 931.748498][T17474] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.755213][ T5732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 931.773363][T14970] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.780485][T14970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.799907][ T5732] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 931.816903][T14970] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.824015][T14970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.870169][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.010632][ T5732] usb 7-1: config 0 descriptor?? [ 932.200687][ T5732] hub 7-1:0.0: USB hub found [ 932.476270][T17578] FAULT_INJECTION: forcing a failure. [ 932.476270][T17578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.516022][ T5732] hub 7-1:0.0: 1 port detected [ 932.525136][T17578] CPU: 1 UID: 0 PID: 17578 Comm: syz.4.3046 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.525158][T17578] Tainted: [L]=SOFTLOCKUP [ 932.525164][T17578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 932.525174][T17578] Call Trace: [ 932.525180][T17578] [ 932.525186][T17578] dump_stack_lvl+0x100/0x190 [ 932.525208][T17578] should_fail_ex.cold+0x5/0xa [ 932.525228][T17578] _copy_from_user+0x2e/0xd0 [ 932.525245][T17578] copy_msghdr_from_user+0x9f/0x4c0 [ 932.525259][T17578] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 932.525273][T17578] ? kstrtouint_from_user+0x13c/0x1d0 [ 932.525288][T17578] ___sys_sendmsg+0x106/0x1e0 [ 932.525300][T17578] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.525317][T17578] ? get_pid_task+0x106/0x250 [ 932.525341][T17578] ? rcu_is_watching+0x12/0xc0 [ 932.525368][T17578] __sys_sendmsg+0x160/0x210 [ 932.525391][T17578] ? __pfx___sys_sendmsg+0x10/0x10 [ 932.525408][T17578] ? rcu_is_watching+0x12/0xc0 [ 932.525421][T17578] do_syscall_64+0x115/0x870 [ 932.525434][T17578] ? clear_bhb_loop+0x40/0x90 [ 932.525446][T17578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.525459][T17578] RIP: 0033:0x7f3f9719ce59 [ 932.525477][T17578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.525493][T17578] RSP: 002b:00007f3f980d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.525509][T17578] RAX: ffffffffffffffda RBX: 00007f3f97415fa0 RCX: 00007f3f9719ce59 [ 932.525520][T17578] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 932.525529][T17578] RBP: 00007f3f980d8090 R08: 0000000000000000 R09: 0000000000000000 [ 932.525538][T17578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.525544][T17578] R13: 00007f3f97416038 R14: 00007f3f97415fa0 R15: 00007ffe18c7bef8 [ 932.525554][T17578] [ 932.733853][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 932.733869][ T29] audit: type=1400 audit(2000000688.377:47080): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 932.859424][ T29] audit: type=1400 audit(2000000688.377:47081): avc: denied { read write open } for pid=16992 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 932.887730][ T29] audit: type=1400 audit(2000000688.377:47082): avc: denied { ioctl } for pid=16992 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 932.917752][ T29] audit: type=1400 audit(2000000688.414:47083): avc: denied { read } for pid=17550 comm="syz.6.3042" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 932.944537][ T29] audit: type=1400 audit(2000000688.414:47084): avc: denied { read open } for pid=17550 comm="syz.6.3042" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 932.972339][ T29] audit: type=1400 audit(2000000688.423:47085): avc: denied { write } for pid=17550 comm="syz.6.3042" name="comedi2" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 932.997306][ T29] audit: type=1400 audit(2000000688.423:47086): avc: denied { write open } for pid=17550 comm="syz.6.3042" path="/dev/comedi2" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 933.024398][ T29] audit: type=1400 audit(2000000688.442:47087): avc: denied { ioctl } for pid=17550 comm="syz.6.3042" path="/dev/comedi2" dev="devtmpfs" ino=1277 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 933.051014][ T29] audit: type=1400 audit(2000000688.451:47088): avc: denied { create } for pid=17581 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 933.078162][ T29] audit: type=1400 audit(2000000688.460:47089): avc: denied { ioctl } for pid=17550 comm="syz.6.3042" path="/dev/comedi2" dev="devtmpfs" ino=1277 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 933.108709][ T5604] Bluetooth: hci3: command tx timeout [ 933.200918][T17474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.251423][T17474] veth0_vlan: entered promiscuous mode [ 933.271214][T17474] veth1_vlan: entered promiscuous mode [ 933.321285][T17474] veth0_macvtap: entered promiscuous mode [ 933.356614][T17474] veth1_macvtap: entered promiscuous mode [ 933.366378][ T5732] hub 7-1:0.0: activate --> -90 [ 933.394806][T17474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.409369][T17474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.423565][T14970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.432766][T14970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.441518][T14970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.455025][T14970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.520965][T13438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.546399][T13438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.600711][T17551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.614665][T14970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.618090][T17551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.634137][T14970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.657800][ T5732] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 933.665713][ T13] usb 7-1: Failed to suspend device, error -71 [ 933.673509][ T5732] usb 7-1: USB disconnect, device number 20 [ 933.744710][T17596] serio: Serial port ptm0 [ 933.855020][T14731] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 934.106960][T14731] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 934.116094][T14731] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 934.124495][T14731] usb 8-1: Product: syz [ 934.128808][T14731] usb 8-1: SerialNumber: syz [ 934.140336][T14731] usb 8-1: config 0 descriptor?? [ 934.417402][T14731] hso 8-1:0.0: Failed to find BULK eps [ 935.017612][ T5711] usb 8-1: USB disconnect, device number 20 [ 935.491460][ T5732] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 935.653943][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 935.678150][ T5732] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 935.703779][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 935.721169][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 935.732442][ T5732] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 935.744796][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.762612][ T5732] usb 3-1: config 0 descriptor?? [ 935.777636][ T5732] hub 3-1:0.0: USB hub found [ 935.787192][T17616] Option ' ' to dns_resolver key: bad/missing value [ 935.892186][T17618] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3056'. [ 936.006759][T17621] netlink: 'syz.7.3057': attribute type 50 has an invalid length. [ 936.015898][ T5732] hub 3-1:0.0: 1 port detected [ 936.175826][T17625] fuse: Unknown parameter 'group_i00000000000000000000' [ 937.063158][ T5732] hub 3-1:0.0: activate --> -90 [ 937.298160][T17610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.306977][T17610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.352250][ T5732] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 937.374023][T13439] usb 3-1: Failed to suspend device, error -71 [ 937.383299][ T5732] usb 3-1: USB disconnect, device number 26 [ 937.442564][ T5711] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 937.737987][T14683] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 937.748870][ T5711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 937.771377][ T5711] usb 5-1: not running at top speed; connect to a high speed hub [ 937.795291][ T5711] usb 5-1: config 194 has an invalid interface number: 4 but max is 0 [ 937.819419][ T5711] usb 5-1: config 194 has no interface number 0 [ 937.843680][ T5711] usb 5-1: config 194 interface 4 has no altsetting 0 [ 937.873917][ T5711] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 937.891998][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.904925][ T5711] usb 5-1: Product: syz [ 937.910312][ T5711] usb 5-1: Manufacturer: syz [ 937.914985][ T5711] usb 5-1: SerialNumber: syz [ 937.926539][T14683] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 937.938129][T14683] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 937.946870][T14683] usb 8-1: Product: syz [ 937.951078][T14683] usb 8-1: SerialNumber: syz [ 937.960473][T14683] usb 8-1: config 0 descriptor?? [ 938.168315][ T5339] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 938.180015][ T29] kauditd_printk_skb: 989 callbacks suppressed [ 938.180030][ T29] audit: type=1400 audit(2000000693.406:48079): avc: denied { ioctl } for pid=17650 comm="syz.6.3068" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 938.195718][T17640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3063'. [ 938.233115][ T29] audit: type=1400 audit(2000000693.415:48080): avc: denied { create } for pid=17639 comm="syz.4.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 938.254580][ T29] audit: type=1400 audit(2000000693.415:48081): avc: denied { write } for pid=17639 comm="syz.4.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 938.275765][T14683] hso 8-1:0.0: Failed to find BULK eps [ 938.281399][T16466] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 938.293557][ T29] audit: type=1400 audit(2000000693.434:48082): avc: denied { ioctl } for pid=17650 comm="syz.6.3068" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 938.310543][T17654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3063'. [ 938.320918][ T29] audit: type=1400 audit(2000000693.434:48083): avc: denied { ioctl } for pid=17650 comm="syz.6.3068" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 938.355352][T17655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3063'. [ 938.374345][ T29] audit: type=1400 audit(2000000693.434:48084): avc: denied { create } for pid=17643 comm="syz.7.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 938.395678][ T5339] usb 7-1: Using ep0 maxpacket: 8 [ 938.409625][ T29] audit: type=1400 audit(2000000693.434:48085): avc: denied { create } for pid=17643 comm="syz.7.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 938.429413][ T5339] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 938.437752][ T5339] usb 7-1: config 0 has no interface number 0 [ 938.439261][ T29] audit: type=1400 audit(2000000693.434:48086): avc: denied { create } for pid=17643 comm="syz.7.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 938.445037][ T5339] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 938.465516][ T29] audit: type=1400 audit(2000000693.452:48087): avc: denied { ioctl } for pid=17652 comm="syz.2.3069" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 938.477273][ T5339] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 938.502418][ T29] audit: type=1400 audit(2000000693.452:48088): avc: denied { create } for pid=17643 comm="syz.7.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 938.517659][ T5703] usb 8-1: USB disconnect, device number 21 [ 938.538883][T16466] usb 3-1: Using ep0 maxpacket: 32 [ 938.551388][T16466] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 938.563838][T17655] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 938.582300][T16466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 938.596428][ T5339] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 938.608696][T16466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 938.618762][ T5339] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 938.632806][T16466] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 938.642215][T16466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.650247][ T5339] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 938.660653][ T5339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.669192][T16466] usb 3-1: config 0 descriptor?? [ 938.677782][T16466] hub 3-1:0.0: USB hub found [ 938.682864][ T5339] usb 7-1: config 0 descriptor?? [ 938.700947][ T5339] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 938.914571][T16466] hub 3-1:0.0: 1 port detected [ 939.100736][ T5339] usb 7-1: USB disconnect, device number 21 [ 939.106725][ C1] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 939.155789][ T5339] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 939.155810][T17657] ldusb: No device or device unplugged -19 [ 939.199074][T17651] ldusb: No device or device unplugged -19 [ 939.513148][ T5794] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 939.674747][ T5794] usb 8-1: Using ep0 maxpacket: 32 [ 939.683710][ T5794] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.695836][ T5794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 939.698078][ T5339] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 939.707069][ T5794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 939.724472][ T5794] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 939.727427][T17653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.745247][T17653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.747837][ T5794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.775714][ T5794] usb 8-1: config 0 descriptor?? [ 939.778117][T16466] usb 3-1: USB disconnect, device number 27 [ 939.787632][ T5703] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 939.790934][ T5794] hub 8-1:0.0: USB hub found [ 939.946046][ T5339] usb 7-1: Using ep0 maxpacket: 32 [ 939.954253][ T5339] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.968282][ T5339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 939.979245][ T5339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 939.989053][ T5339] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 939.998088][ T5339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.009372][ T5339] usb 7-1: config 0 descriptor?? [ 940.028001][ T5339] hub 7-1:0.0: USB hub found [ 940.046906][ T5794] hub 8-1:0.0: 1 port detected [ 940.257235][ T5339] hub 7-1:0.0: 1 port detected [ 940.434321][ T5711] usbhid 5-1:194.4: couldn't find an input interrupt endpoint [ 940.450704][ T5711] usb 5-1: USB disconnect, device number 127 [ 940.570700][T17660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.608269][T17660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.640245][T17666] fuse: Unknown parameter 'group_i00000000000000000000' [ 940.663199][T17668] No control pipe specified [ 940.920933][ T5794] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 940.921140][T16466] usb 8-1: USB disconnect, device number 22 [ 940.935338][ T5711] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 941.011438][T17662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.020625][T17662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.037203][ T5339] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 941.037752][ T5794] usb 7-1: USB disconnect, device number 22 [ 941.105735][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 941.113217][ T5711] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 941.122965][ T5711] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 941.131654][ T5711] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 941.140659][ T5711] usb 3-1: config 1 has no interface number 0 [ 941.146748][ T5711] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 941.158009][ T5711] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 941.171071][ T5711] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 941.181242][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.195679][ T5711] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 941.415677][ T5711] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 941.855312][T13438] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 942.385040][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3074'. [ 942.536009][T16466] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 943.262522][T17694] netlink: 212336 bytes leftover after parsing attributes in process `syz.6.3079'. [ 943.409150][T17696] FAULT_INJECTION: forcing a failure. [ 943.409150][T17696] name failslab, interval 1, probability 0, space 0, times 0 [ 943.422338][T17696] CPU: 1 UID: 0 PID: 17696 Comm: syz.4.3080 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.422367][T17696] Tainted: [L]=SOFTLOCKUP [ 943.422376][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 943.422387][T17696] Call Trace: [ 943.422393][T17696] [ 943.422399][T17696] dump_stack_lvl+0x100/0x190 [ 943.422423][T17696] should_fail_ex.cold+0x5/0xa [ 943.422443][T17696] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 943.422464][T17696] should_failslab+0xc2/0x120 [ 943.422490][T17696] __kmalloc_cache_noprof+0x7a/0x6e0 [ 943.422508][T17696] ? htb_change_class+0xfc2/0x3460 [ 943.422536][T17696] ? __nla_parse+0x40/0x60 [ 943.422560][T17696] htb_change_class+0xfc2/0x3460 [ 943.422589][T17696] ? do_raw_spin_lock+0x128/0x260 [ 943.422610][T17696] ? __pfx_htb_change_class+0x10/0x10 [ 943.422637][T17696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 943.422666][T17696] ? __nla_validate_parse+0x1e7/0x28b0 [ 943.422695][T17696] ? qdisc_match_from_root+0x16f/0x260 [ 943.422717][T17696] ? __pfx_htb_change_class+0x10/0x10 [ 943.422743][T17696] tc_ctl_tclass+0x5ae/0x1690 [ 943.422768][T17696] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 943.422791][T17696] ? __mutex_lock+0x26d/0x1bd0 [ 943.422814][T17696] ? rtnetlink_rcv_msg+0x371/0xe90 [ 943.422830][T17696] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 943.422868][T17696] ? rtnetlink_rcv_msg+0x359/0xe90 [ 943.422883][T17696] ? rcu_is_watching+0x12/0xc0 [ 943.422904][T17696] ? rtnetlink_rcv_msg+0x359/0xe90 [ 943.422921][T17696] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 943.422943][T17696] rtnetlink_rcv_msg+0x3c9/0xe90 [ 943.422960][T17696] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 943.422979][T17696] ? ref_tracker_free+0x37e/0x6c0 [ 943.422998][T17696] netlink_rcv_skb+0x159/0x420 [ 943.423019][T17696] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 943.423037][T17696] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.423061][T17696] ? netlink_deliver_tap+0x1ae/0xcc0 [ 943.423082][T17696] netlink_unicast+0x585/0x850 [ 943.423103][T17696] ? __pfx_netlink_unicast+0x10/0x10 [ 943.423126][T17696] netlink_sendmsg+0x8b0/0xda0 [ 943.423148][T17696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.423172][T17696] ____sys_sendmsg+0x9e1/0xb70 [ 943.423190][T17696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.423211][T17696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.423236][T17696] ? kstrtouint_from_user+0x13c/0x1d0 [ 943.423261][T17696] ___sys_sendmsg+0x190/0x1e0 [ 943.423281][T17696] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.423301][T17696] ? get_pid_task+0x106/0x250 [ 943.423327][T17696] ? rcu_is_watching+0x12/0xc0 [ 943.423354][T17696] __sys_sendmsg+0x160/0x210 [ 943.423380][T17696] ? __pfx___sys_sendmsg+0x10/0x10 [ 943.423408][T17696] ? rcu_is_watching+0x12/0xc0 [ 943.423430][T17696] do_syscall_64+0x115/0x870 [ 943.423451][T17696] ? clear_bhb_loop+0x40/0x90 [ 943.423470][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.423487][T17696] RIP: 0033:0x7f3f9719ce59 [ 943.423500][T17696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.423517][T17696] RSP: 002b:00007f3f980d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.423535][T17696] RAX: ffffffffffffffda RBX: 00007f3f97415fa0 RCX: 00007f3f9719ce59 [ 943.423546][T17696] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 943.423556][T17696] RBP: 00007f3f980d8090 R08: 0000000000000000 R09: 0000000000000000 [ 943.423567][T17696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.423576][T17696] R13: 00007f3f97416038 R14: 00007f3f97415fa0 R15: 00007ffe18c7bef8 [ 943.423592][T17696] [ 943.885008][T14731] usb 3-1: USB disconnect, device number 28 [ 943.893171][T14731] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 943.900752][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 943.900765][ T29] audit: type=1400 audit(2000000698.674:48409): avc: denied { mount } for pid=17693 comm="syz.6.3079" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 943.931968][ T29] audit: type=1400 audit(2000000698.674:48410): avc: denied { create } for pid=17693 comm="syz.6.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 943.953518][ T29] audit: type=1400 audit(2000000698.693:48411): avc: denied { getopt } for pid=17693 comm="syz.6.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 943.975221][ T29] audit: type=1400 audit(2000000698.693:48412): avc: denied { read write } for pid=17693 comm="syz.6.3079" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 944.010064][ T29] audit: type=1400 audit(2000000698.693:48413): avc: denied { read write open } for pid=17693 comm="syz.6.3079" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 944.042649][ T29] audit: type=1400 audit(2000000698.730:48414): avc: denied { ioctl } for pid=17693 comm="syz.6.3079" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 944.076858][ T29] audit: type=1400 audit(2000000698.730:48415): avc: denied { ioctl } for pid=17693 comm="syz.6.3079" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 944.108684][ T29] audit: type=1400 audit(2000000698.730:48416): avc: denied { ioctl } for pid=17693 comm="syz.6.3079" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 944.159379][ T29] audit: type=1400 audit(2000000698.730:48417): avc: denied { ioctl } for pid=17693 comm="syz.6.3079" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 944.196878][ T29] audit: type=1400 audit(2000000698.758:48418): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 944.228619][T17702] overlayfs: failed to resolve './file0': -2 [ 944.259105][ T5794] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 944.407229][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 944.415125][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 944.423153][ T5794] usb 7-1: Using ep0 maxpacket: 32 [ 944.431781][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 944.444160][ T5794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.453172][T17712] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 944.456039][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 944.488292][T17711] vivid-003: ================= START STATUS ================= [ 944.548566][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 944.583153][ T5794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.592950][ T5794] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 944.627567][ T5794] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 944.639240][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.645207][T17711] vivid-003: Radio HW Seek Mode: Bounded [ 944.657971][ T5794] usb 7-1: config 0 descriptor?? [ 944.680770][T17711] vivid-003: Radio Programmable HW Seek: false [ 944.713998][T17711] vivid-003: RDS Rx I/O Mode: Block I/O [ 944.766886][T17711] vivid-003: Generate RBDS Instead of RDS: false [ 944.780942][T17711] vivid-003: RDS Reception: true [ 944.794129][T17711] vivid-003: RDS Program Type: 0 inactive [ 944.807567][T17711] vivid-003: RDS PS Name: inactive [ 944.820667][T17711] vivid-003: RDS Radio Text: inactive [ 944.832004][T17711] vivid-003: RDS Traffic Announcement: false inactive [ 944.846219][T17711] vivid-003: RDS Traffic Program: false inactive [ 944.896915][T17711] vivid-003: RDS Music: false inactive [ 944.945866][T17711] vivid-003: ================== END STATUS ================== [ 945.167632][ T5794] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0020/input/input47 [ 945.217603][ T5794] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0020/input/input48 [ 945.270530][ T5794] kye 0003:0458:5011.0020: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 945.925611][ T5794] usb 7-1: USB disconnect, device number 23 [ 946.010816][T17708] lo speed is unknown, defaulting to 1000 [ 946.142158][T17739] fido_id[17739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 946.567030][T17749] 8021q: VLANs not supported on ip_vti0 [ 946.668348][T17708] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.683931][T17708] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.697994][T17708] bridge_slave_0: entered allmulticast mode [ 946.772080][T17754] vivid-000: ================= START STATUS ================= [ 946.779790][T17754] vivid-000: Test Pattern: 75% Colorbar [ 946.785614][T17754] vivid-000: Fill Percentage of Frame: 100 [ 946.791473][T17754] vivid-000: Horizontal Movement: No Movement [ 946.797642][T17754] vivid-000: Vertical Movement: No Movement [ 946.803591][T17754] vivid-000: OSD Text Mode: None [ 946.808615][T17754] vivid-000: Show Border: false [ 946.813519][T17754] vivid-000: Show Square: false [ 946.818468][T17754] vivid-000: Sensor Flipped Horizontally: false [ 946.824771][T17754] vivid-000: Sensor Flipped Vertically: false [ 946.830912][T17754] vivid-000: Insert SAV Code in Image: false [ 946.836952][T17754] vivid-000: Insert EAV Code in Image: false [ 946.843668][T17754] vivid-000: Insert Video Guard Band: false [ 946.850121][T17754] vivid-000: Reduced Framerate: false [ 946.855548][T17754] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 003-0 [ 946.862830][T17754] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 946.870780][T17754] vivid-000: Enable Capture Cropping: true [ 946.895744][T17754] vivid-000: Enable Capture Composing: true [ 946.901734][T17754] vivid-000: Enable Capture Scaler: true [ 946.907469][T17754] vivid-000: Timestamp Source: End of Frame [ 946.913425][T17754] vivid-000: Colorspace: SMPTE 170M [ 946.918726][T17754] vivid-000: Transfer Function: Default [ 946.924355][T17754] vivid-000: Y'CbCr Encoding: Default [ 946.929819][T17754] vivid-000: HSV Encoding: Hue 0-179 [ 946.935149][T17754] vivid-000: Quantization: Default [ 946.940349][T17754] vivid-000: Apply Alpha To Red Only: true [ 946.946210][T17754] vivid-000: Standard Aspect Ratio: 4x3 [ 946.952509][T17754] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 946.960797][T17754] vivid-000: DV Timings: 640x480p59 inactive [ 946.966841][T17754] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 946.974231][T17754] vivid-000: Maximum EDID Blocks: 2 [ 946.979525][T17754] vivid-000: Limited RGB Range (16-235): false [ 946.985737][T17754] vivid-000: Rx RGB Quantization Range: Automatic [ 946.992241][T17754] vivid-000: Power Present: 0x00000001 [ 946.997759][T17754] tpg source WxH: 720x576 (Y'CbCr) [ 947.250496][T17754] tpg field: 4 [ 947.253936][T17754] tpg crop: (0,0)/720x64 [ 947.258194][T17754] tpg compose: (0,0)/720x16 [ 947.262739][T17754] tpg colorspace: 1 [ 947.266550][T17754] tpg transfer function: 0/1 [ 947.271145][T17754] tpg Y'CbCr encoding: 0/1 [ 947.275594][T17754] tpg quantization: 0/2 [ 947.279760][T17754] tpg RGB range: 0/2 [ 947.284784][T17754] vivid-000: ================== END STATUS ================== [ 947.649674][ T5604] Bluetooth: hci4: command tx timeout [ 947.696196][T17708] bridge_slave_0: entered promiscuous mode [ 947.708686][T17708] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.715878][T17708] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.723091][T17708] bridge_slave_1: entered allmulticast mode [ 947.732647][T17708] bridge_slave_1: entered promiscuous mode [ 947.787554][T17708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.829424][T17708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.830006][T17760] fuse: Unknown parameter 'group_id00000000000000000000' [ 947.867178][T17759] 8021q: VLANs not supported on ip_vti0 [ 947.909412][T17708] team0: Port device team_slave_0 added [ 947.937846][T17708] team0: Port device team_slave_1 added [ 948.086056][T17708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.099935][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.132011][T17708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.145642][T17708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.152643][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.235965][T17708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.250461][T17773] vivid-000: ================= START STATUS ================= [ 948.270041][T17773] vivid-000: Test Pattern: 75% Colorbar [ 948.276661][T17769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.282799][T17773] vivid-000: Fill Percentage of Frame: 100 [ 948.302596][T17773] vivid-000: Horizontal Movement: No Movement [ 948.320187][T17708] hsr_slave_0: entered promiscuous mode [ 948.331944][T17708] hsr_slave_1: entered promiscuous mode [ 948.342778][T17773] vivid-000: Vertical Movement: No Movement [ 948.350579][T17708] debugfs: 'hsr0' already exists in 'hsr' [ 948.359711][T17708] Cannot create hsr debugfs directory [ 948.376170][T17773] vivid-000: OSD Text Mode: None [ 948.407962][T17773] vivid-000: Show Border: false [ 948.446267][T17773] vivid-000: Show Square: false [ 948.472733][T17773] vivid-000: Sensor Flipped Horizontally: false [ 948.486589][ T5794] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 948.525933][T17773] vivid-000: Sensor Flipped Vertically: false [ 948.576227][T17773] vivid-000: Insert SAV Code in Image: false [ 948.625727][T17708] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 948.637610][ T5794] usb 5-1: device descriptor read/64, error -71 [ 948.640205][T17773] vivid-000: Insert EAV Code in Image: [ 948.651348][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 948.665093][T17778] blktrace: Concurrent blktraces are not allowed on nullb0 [ 948.681571][T17773] false [ 948.695711][T17708] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 948.706367][T17773] vivid-000: Insert Video Guard Band: false [ 948.730178][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 948.740384][T17773] vivid-000: Reduced Framerate: false [ 948.747775][T17708] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 948.757310][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 948.764643][T17773] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 003-0 [ 948.773931][T17708] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 948.784079][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 948.791371][T17773] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 948.804989][T17773] vivid-000: Enable Capture Cropping: true [ 948.811244][T17773] vivid-000: Enable Capture Composing: true [ 948.818736][T17773] vivid-000: Enable Capture Scaler: true [ 948.824693][T17773] vivid-000: Timestamp Source: End of Frame [ 948.832453][T17773] vivid-000: Colorspace: SMPTE 170M [ 948.839399][T17773] vivid-000: Transfer Function: Default [ 948.869744][T17773] vivid-000: Y'CbCr Encoding: Default [ 948.875552][T17773] vivid-000: HSV Encoding: Hue 0-179 [ 948.908983][ T5794] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 948.915810][T17773] vivid-000: Quantization: Default [ 948.941756][T16466] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 948.957209][T17773] vivid-000: Apply Alpha To Red Only: true [ 949.000381][T17773] vivid-000: Standard Aspect Ratio: 4x3 [ 949.013860][T17708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.037025][T17773] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 949.060246][ T5794] usb 5-1: device descriptor read/64, error -71 [ 949.063021][T17708] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.083439][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.090527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.092916][T17773] vivid-000: DV Timings: 640x480p59 inactive [ 949.104397][T17773] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 949.112020][T17773] vivid-000: Maximum EDID Blocks: 2 [ 949.151833][T16466] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.163752][T14979] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.170199][T16466] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.170853][T14979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.181355][T17773] vivid-000: Limited RGB Range (16-235): false [ 949.199063][T17773] vivid-000: Rx RGB Quantization Range: Automatic [ 949.203769][ T5794] usb usb5-port1: attempt power cycle [ 949.225654][T16466] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 949.246733][T17773] vivid-000: Power Present: 0x00000001 [ 949.252990][T16466] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.261022][T17773] tpg source WxH: 720x576 (Y'CbCr) [ 949.261036][T17773] tpg field: 4 [ 949.261044][T17773] tpg crop: (0,0)/720x64 [ 949.261056][T17773] tpg compose: (0,0)/720x16 [ 949.305368][T16466] usb 8-1: Product: syz [ 949.310669][T17773] tpg colorspace: 1 [ 949.316055][T17773] tpg transfer function: 0/1 [ 949.322288][T16466] usb 8-1: Manufacturer: syz [ 949.329825][T17773] tpg Y'CbCr encoding: 0/1 [ 949.341514][T16466] usb 8-1: SerialNumber: syz [ 949.341652][T17773] tpg quantization: 0/2 [ 949.364055][ T29] kauditd_printk_skb: 1137 callbacks suppressed [ 949.364070][ T29] audit: type=1400 audit(2000000703.722:49085): avc: denied { ioctl } for pid=17777 comm="syz.7.3098" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.395112][T17773] tpg RGB range: 0/2 [ 949.407691][T16466] usb 8-1: 0:1 : does not exist [ 949.414659][ T29] audit: type=1400 audit(2000000703.759:49086): avc: denied { ioctl } for pid=17777 comm="syz.7.3098" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.426339][T17773] vivid-000: ================== END STATUS ================== [ 949.444414][ T29] audit: type=1400 audit(2000000703.759:49087): avc: denied { ioctl } for pid=17777 comm="syz.7.3098" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.493768][ T29] audit: type=1400 audit(2000000703.759:49088): avc: denied { module_request } for pid=17708 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 949.547743][ T29] audit: type=1400 audit(2000000703.869:49089): avc: denied { sys_module } for pid=17708 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 949.591433][ T5794] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 949.604720][ T29] audit: type=1400 audit(2000000703.869:49090): avc: denied { module_request } for pid=17708 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 949.639308][ T5794] usb 5-1: device descriptor read/8, error -71 [ 949.641937][T16466] usb 8-1: 3:0: failed to get current value for ch 0 (-32) [ 949.687813][T16466] usb 8-1: unit 0 not found! [ 949.714868][ T29] audit: type=1400 audit(2000000703.879:49091): avc: denied { ioctl } for pid=17770 comm="syz.4.3096" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.763408][T16466] usb 8-1: USB disconnect, device number 23 [ 949.788725][ T29] audit: type=1400 audit(2000000703.934:49092): avc: denied { module_request } for pid=17708 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 949.832255][ T29] audit: type=1400 audit(2000000703.980:49093): avc: denied { ioctl } for pid=17770 comm="syz.4.3096" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.850089][ T5596] udevd[5596]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.863672][ T29] audit: type=1400 audit(2000000703.980:49094): avc: denied { ioctl } for pid=17777 comm="syz.7.3098" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.919511][ T5794] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 949.927196][T16783] Bluetooth: hci6: command 0x0406 tx timeout [ 949.933242][T16783] Bluetooth: hci4: command tx timeout [ 949.961843][ T5794] usb 5-1: device descriptor read/8, error -71 [ 950.079715][ T5794] usb usb5-port1: unable to enumerate USB device [ 950.227101][T17708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.546088][T17807] 8021q: VLANs not supported on ip_vti0 [ 950.577576][T17801] netdevsim netdevsim7: Firmware load for '../file0/file0' refused, path contains '..' component [ 950.802589][T17813] vivid-000: ================= START STATUS ================= [ 950.810342][T17813] vivid-000: Test Pattern: 75% Colorbar [ 950.815969][T17813] vivid-000: Fill Percentage of Frame: 100 [ 950.821842][T17813] vivid-000: Horizontal Movement: No Movement [ 950.828048][T17813] vivid-000: Vertical Movement: No Movement [ 950.834627][T17813] vivid-000: OSD Text Mode: None [ 950.840127][T17813] vivid-000: Show Border: false [ 950.845027][T17813] vivid-000: Show Square: false [ 950.850026][T17813] vivid-000: Sensor Flipped Horizontally: false [ 950.856331][T17813] vivid-000: Sensor Flipped Vertically: false [ 950.862841][T17813] vivid-000: Insert SAV Code in Image: false [ 950.868876][T17813] vivid-000: Insert EAV Code in Image: false [ 950.875052][T17813] vivid-000: Insert Video Guard Band: false [ 950.881054][T17813] vivid-000: Reduced Framerate: false [ 950.886481][T17813] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 003-0 [ 950.893783][T17813] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 950.901734][T17813] vivid-000: Enable Capture Cropping: true [ 950.926242][T17813] vivid-000: Enable Capture Composing: true [ 950.932236][T17813] vivid-000: Enable Capture Scaler: true [ 950.937978][T17813] vivid-000: Timestamp Source: End of Frame [ 950.944545][T17813] vivid-000: Colorspace: SMPTE 170M [ 950.950411][T17813] vivid-000: Transfer Function: Default [ 950.956029][T17813] vivid-000: Y'CbCr Encoding: Default [ 950.961528][T17813] vivid-000: HSV Encoding: Hue 0-179 [ 950.966863][T17813] vivid-000: Quantization: Default [ 950.972051][T17813] vivid-000: Apply Alpha To Red Only: true [ 950.977915][T17813] vivid-000: Standard Aspect Ratio: 4x3 [ 950.983543][T17813] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 950.991357][T17813] vivid-000: DV Timings: 640x480p59 inactive [ 950.997413][T17813] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 951.004866][T17813] vivid-000: Maximum EDID Blocks: 2 [ 951.010125][T17813] vivid-000: Limited RGB Range (16-235): false [ 951.016370][T17813] vivid-000: Rx RGB Quantization Range: Automatic [ 951.022860][T17813] vivid-000: Power Present: 0x00000001 [ 951.028377][T17813] tpg source WxH: 720x576 (Y'CbCr) [ 951.217047][T17813] tpg field: 4 [ 951.220465][T17813] tpg crop: (0,0)/720x64 [ 951.224831][T17813] tpg compose: (0,0)/720x16 [ 951.229357][T17813] tpg colorspace: 1 [ 951.233161][T17813] tpg transfer function: 0/1 [ 951.237751][T17813] tpg Y'CbCr encoding: 0/1 [ 951.242292][T17813] tpg quantization: 0/2 [ 951.246448][T17813] tpg RGB range: 0/2 [ 951.250378][T17813] vivid-000: ================== END STATUS ================== [ 951.735532][T17708] veth0_vlan: entered promiscuous mode [ 951.762963][T17708] veth1_vlan: entered promiscuous mode [ 951.827558][T17708] veth0_macvtap: entered promiscuous mode [ 951.839964][T17708] veth1_macvtap: entered promiscuous mode [ 951.856742][ T5711] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 951.873819][T17708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.886013][T17708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.898434][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.907990][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.918359][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.928108][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.974895][T13438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.991493][T13438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.008828][ T5732] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 952.021674][T14978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.029642][T14978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.047473][ T5711] usb 8-1: unable to get BOS descriptor or descriptor too short [ 952.061029][ T5711] usb 8-1: not running at top speed; connect to a high speed hub [ 952.072370][ T5711] usb 8-1: config 194 has an invalid interface number: 4 but max is 0 [ 952.082054][ T5711] usb 8-1: config 194 has no interface number 0 [ 952.088467][ T5711] usb 8-1: config 194 interface 4 has no altsetting 0 [ 952.105644][T13925] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 952.108682][ T5711] usb 8-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 952.149046][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.157112][T17820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 952.163921][T16783] Bluetooth: hci4: command tx timeout [ 952.170140][ T5711] usb 8-1: Product: syz [ 952.179327][ T5711] usb 8-1: Manufacturer: syz [ 952.194263][ T5711] usb 8-1: SerialNumber: syz [ 952.203658][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 952.213173][ T5732] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.235353][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 952.256221][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 952.280805][ T5732] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 952.292252][T13925] usb 7-1: Using ep0 maxpacket: 32 [ 952.306340][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.315159][T13925] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 952.333585][T13925] usb 7-1: config 2 has no interface number 0 [ 952.341873][ T5732] usb 5-1: config 0 descriptor?? [ 952.354927][T13925] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 952.368309][ T5732] hub 5-1:0.0: USB hub found [ 952.376130][T13925] usb 7-1: config 2 interface 88 has no altsetting 0 [ 952.397124][T13925] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 952.413611][T13925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 952.424512][T13925] usb 7-1: Product: syz [ 952.428717][T13925] usb 7-1: Manufacturer: syz [ 952.434857][T13925] usb 7-1: SerialNumber: syz [ 952.457054][T17818] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 952.492865][T17812] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3102'. [ 952.513614][T17824] tipc: Started in network mode [ 952.517985][ T5703] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 952.518818][T17824] tipc: Node identity 4, cluster identity 4711 [ 952.532444][T17824] tipc: Node number set to 4 [ 952.568487][T17826] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3102'. [ 952.582030][T17826] netlink: 'syz.7.3102': attribute type 1 has an invalid length. [ 952.597179][ T5732] hub 5-1:0.0: 1 port detected [ 952.610205][T17826] bond1: entered promiscuous mode [ 952.615537][T17826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 952.640407][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3102'. [ 952.656712][T17826] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 952.683255][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 952.693810][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.705869][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 952.717043][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 952.726343][T17818] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 952.728128][ T5703] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 952.743284][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.754837][ T5703] usb 3-1: config 0 descriptor?? [ 952.764293][ T5703] hub 3-1:0.0: USB hub found [ 952.944777][ T30] INFO: task syz.0.2691:15819 blocked for more than 143 seconds. [ 952.954625][ T30] Tainted: G L syzkaller #0 [ 952.961163][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 952.975167][ T30] task:syz.0.2691 state:D stack:26648 pid:15819 tgid:15815 ppid:5607 task_flags:0x400140 flags:0x00080002 [ 952.987240][ T30] Call Trace: [ 952.990548][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 952.993496][ T30] __schedule+0x125c/0x6730 [ 953.010285][ T30] ? __pfx___schedule+0x10/0x10 [ 953.025468][ T5703] hub 3-1:0.0: 1 port detected [ 953.026789][ T30] ? rcu_is_watching+0x12/0xc0 [ 953.046797][ T30] ? schedule+0x2bf/0x390 [ 953.070420][ T30] ? lock_release+0x24d/0x310 [ 953.098579][ T30] schedule+0xdd/0x390 [ 953.116076][ T30] schedule_timeout+0x1b2/0x280 [ 953.133599][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 953.151790][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 953.169926][ T30] ? rcu_is_watching+0x12/0xc0 [ 953.183104][ T30] ? rcu_is_watching+0x12/0xc0 [ 953.202125][ T30] __wait_for_common+0x2e7/0x4c0 [ 953.215464][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 953.224222][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 953.229726][ T30] ? __flush_work+0x5fe/0xcb0 [ 953.235041][ T30] ? __flush_work+0x4ca/0xcb0 [ 953.239765][ T30] ? rcu_is_watching+0x12/0xc0 [ 953.244663][ T30] ? __flush_work+0x5fe/0xcb0 [ 953.249365][ T30] ? lock_release+0x24d/0x310 [ 953.254033][ T30] ? __flush_work+0x4ca/0xcb0 [ 953.258719][ T30] __flush_work+0x7c7/0xcb0 [ 953.263229][ T30] ? __pfx___flush_work+0x10/0x10 [ 953.268332][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 953.273631][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 953.279494][ T30] ? __pfx___might_resched+0x10/0x10 [ 953.284804][ T30] ? rcu_is_watching+0x12/0xc0 [ 953.289778][ T30] p9_fd_close+0x299/0x5a0 [ 953.294219][ T30] p9_client_create+0x678/0xd40 [ 953.299087][ T30] ? __pfx_p9_client_create+0x10/0x10 [ 953.304475][ T30] ? lockdep_init_map_type+0x5c/0x250 [ 953.309873][ T30] ? __raw_spin_lock_init+0x3a/0x110 [ 953.315169][ T30] v9fs_session_init+0x3c/0xd20 [ 953.320047][ T30] ? kasan_save_track+0x14/0x30 [ 953.324911][ T30] v9fs_get_tree+0xb8/0xb50 [ 953.329429][ T30] ? rcu_is_watching+0x12/0xc0 [ 953.334266][ T30] ? __pfx_v9fs_get_tree+0x10/0x10 [ 953.339395][ T30] ? bpf_lsm_capable+0x9/0x10 [ 953.344161][ T30] ? security_capable+0x80/0x260 [ 953.349112][ T30] vfs_get_tree+0x92/0x320 [ 953.353625][ T30] path_mount+0x7d0/0x23d0 [ 953.358070][ T30] ? __pfx_path_mount+0x10/0x10 [ 953.362964][ T30] ? putname+0xb1/0x110 [ 953.367138][ T30] ? kmem_cache_free+0x127/0x6b0 [ 953.372086][ T30] ? __x64_sys_mount+0x293/0x310 [ 953.377463][ T30] __x64_sys_mount+0x293/0x310 [ 953.382253][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 953.388040][ T30] ? rcu_is_watching+0x12/0xc0 [ 953.392830][ T30] do_syscall_64+0x115/0x870 [ 953.397465][ T30] ? clear_bhb_loop+0x40/0x90 [ 953.402156][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.408064][ T30] RIP: 0033:0x7f7ef499ce59 [ 953.412484][ T30] RSP: 002b:00007f7ef5818028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 953.420942][ T30] RAX: ffffffffffffffda RBX: 00007f7ef4c16090 RCX: 00007f7ef499ce59 [ 953.428942][ T30] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 953.436920][ T30] RBP: 00007f7ef4a32d6f R08: 0000200000000300 R09: 0000000000000000 [ 953.444915][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.452902][ T30] R13: 00007f7ef4c16128 R14: 00007f7ef4c16090 R15: 00007ffc87e03f38 [ 953.461000][ T30] [ 953.464086][ T30] INFO: lockdep is turned off. [ 953.468902][ T30] NMI backtrace for cpu 0 [ 953.468918][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 953.468941][ T30] Tainted: [L]=SOFTLOCKUP [ 953.468947][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 953.468956][ T30] Call Trace: [ 953.468962][ T30] [ 953.468969][ T30] dump_stack_lvl+0x100/0x190 [ 953.468995][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 953.469015][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 953.469035][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 953.469054][ T30] sys_info+0x141/0x190 [ 953.469078][ T30] watchdog+0xcb1/0x1030 [ 953.469095][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 953.469116][ T30] ? __pfx_watchdog+0x10/0x10 [ 953.469132][ T30] ? __kthread_parkme+0x18c/0x230 [ 953.469152][ T30] ? kthread+0x13a/0x450 [ 953.469172][ T30] ? __pfx_watchdog+0x10/0x10 [ 953.469186][ T30] kthread+0x370/0x450 [ 953.469206][ T30] ? __pfx_kthread+0x10/0x10 [ 953.469228][ T30] ret_from_fork+0x72b/0xd50 [ 953.469247][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 953.469266][ T30] ? __switch_to+0x800/0x10f0 [ 953.469291][ T30] ? __pfx_kthread+0x10/0x10 [ 953.469314][ T30] ret_from_fork_asm+0x1a/0x30 [ 953.469341][ T30] [ 953.469366][ T30] Sending NMI from CPU 0 to CPUs 1: [ 953.601405][ C1] NMI backtrace for cpu 1 [ 953.601422][ C1] CPU: 1 UID: 0 PID: 14683 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.601445][ C1] Tainted: [L]=SOFTLOCKUP [ 953.601450][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 953.601460][ C1] Workqueue: mld mld_dad_work [ 953.601483][ C1] RIP: 0010:__find_rr_leaf+0x186/0x1040 [ 953.601503][ C1] Code: 0d 00 00 4c 8b bb c8 00 00 00 49 8d bf c0 00 00 00 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 c1 0d 00 00 4d 8b bf c0 00 00 00 c5 99 50 01 31 ff 89 c6 89 44 24 38 e8 b8 62 c6 f7 8b 44 24 38 [ 953.601517][ C1] RSP: 0018:ffffc90000a084a8 EFLAGS: 00000246 [ 953.601530][ C1] RAX: 1ffff110044fc018 RBX: ffff8880760b3400 RCX: ffffffff8a4307f6 [ 953.601541][ C1] RDX: ffff88802e348000 RSI: ffffffff8a430804 RDI: ffff8880227e00c0 [ 953.601550][ C1] RBP: ffff8880760b3464 R08: 0000000000000001 R09: 0000000000000000 [ 953.601559][ C1] R10: 0000000000000000 R11: ffffc90000a08ff8 R12: 0000000000000001 [ 953.601569][ C1] R13: dffffc0000000000 R14: ffff8880760b34df R15: ffff888078943000 [ 953.601579][ C1] FS: 0000000000000000(0000) GS:ffff888124432000(0000) knlGS:0000000000000000 [ 953.601593][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.601602][ C1] CR2: 0000001b2f9d8ff8 CR3: 000000002e50f000 CR4: 00000000003526f0 [ 953.601611][ C1] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff [ 953.601620][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 953.601629][ C1] Call Trace: [ 953.601634][ C1] [ 953.601641][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 953.601659][ C1] ? fib6_node_lookup+0x13b/0x190 [ 953.601677][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 953.601692][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.601710][ C1] ? lock_release+0x24d/0x310 [ 953.601725][ C1] fib6_table_lookup+0x50f/0xa10 [ 953.601747][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 953.601764][ C1] ? rcu_is_cpu_rrupt_from_idle+0x1a0/0x270 [ 953.601781][ C1] ? lock_acquire+0x301/0x370 [ 953.601794][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.601812][ C1] ip6_pol_route+0x1d5/0x1310 [ 953.601832][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 953.601848][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 953.601865][ C1] ? ip6t_do_table+0xbed/0x1c90 [ 953.601880][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 953.601895][ C1] ? ip6t_do_table+0xc1d/0x1c90 [ 953.601914][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 953.601931][ C1] fib6_rule_lookup+0x52f/0x720 [ 953.601949][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 953.601966][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 953.601983][ C1] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 953.602004][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 953.602023][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 953.602045][ C1] ip6_route_input+0x662/0xc50 [ 953.602064][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 953.602082][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 953.602096][ C1] ? nf_hook.constprop.0+0x2d9/0x750 [ 953.602116][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.602134][ C1] ? nf_hook.constprop.0+0x2e3/0x750 [ 953.602152][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 953.602171][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 953.602192][ C1] ip6_rcv_finish_core.isra.0+0x1b1/0x1260 [ 953.602214][ C1] ipv6_rcv+0x1e8/0x3d0 [ 953.602232][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 953.602250][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 953.602269][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 953.602287][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.602304][ C1] ? lock_acquire+0x301/0x370 [ 953.602321][ C1] ? process_backlog+0x32a/0x1580 [ 953.602338][ C1] ? process_backlog+0x32a/0x1580 [ 953.602354][ C1] __netif_receive_skb+0x1f/0x120 [ 953.602371][ C1] process_backlog+0x37a/0x1580 [ 953.602389][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 953.602409][ C1] net_rx_action+0xa40/0xf20 [ 953.602427][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 953.602443][ C1] ? clockevents_shutdown+0x190/0x1f0 [ 953.602460][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 953.602476][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 953.602491][ C1] ? sched_clock+0x38/0x60 [ 953.602504][ C1] ? sched_clock_cpu+0x6c/0x570 [ 953.602527][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.602546][ C1] handle_softirqs+0x1ea/0x9b0 [ 953.602560][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 953.602575][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 953.602588][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 953.602607][ C1] ? __dev_queue_xmit+0x9f0/0x4940 [ 953.602623][ C1] do_softirq+0xac/0xe0 [ 953.602636][ C1] [ 953.602641][ C1] [ 953.602646][ C1] __local_bh_enable_ip+0xf8/0x120 [ 953.602659][ C1] ? __dev_queue_xmit+0x9f0/0x4940 [ 953.602675][ C1] __dev_queue_xmit+0xa05/0x4940 [ 953.602694][ C1] ? ip6mr_fib_lookup+0x133/0x1a0 [ 953.602711][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 953.602726][ C1] ? ip6t_do_table+0xbed/0x1c90 [ 953.602744][ C1] ? ip6t_do_table+0xc1d/0x1c90 [ 953.602761][ C1] ? mroute6_is_socket+0x1db/0x260 [ 953.602778][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.602793][ C1] ? ipv6_chk_mcast_addr+0x2b0/0x9a0 [ 953.602806][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.602823][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.602840][ C1] ? __ip6_finish_output+0x357/0xdf0 [ 953.602858][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.602874][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.602891][ C1] ip6_finish_output2+0xfd4/0x1ce0 [ 953.602911][ C1] __ip6_finish_output+0x357/0xdf0 [ 953.602930][ C1] ip6_output+0x2aa/0xa60 [ 953.602947][ C1] ? __pfx_ip6_output+0x10/0x10 [ 953.602965][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 953.602985][ C1] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 953.603003][ C1] ? rcu_is_watching+0x12/0xc0 [ 953.603018][ C1] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 953.603036][ C1] ? lock_release+0x24d/0x310 [ 953.603049][ C1] ? __pfx_ip6_output+0x10/0x10 [ 953.603065][ C1] NF_HOOK.constprop.0+0x115/0x5a0 [ 953.603084][ C1] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 953.603102][ C1] ? icmp6_dst_alloc+0x33c/0x4f0 [ 953.603123][ C1] ? __pfx_dst_output+0x10/0x10 [ 953.603142][ C1] mld_sendpack+0x8f7/0xec0 [ 953.603161][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 953.603182][ C1] ? mld_in_v1_mode+0x2b2/0x3a0 [ 953.603198][ C1] ? __pfx_mld_in_v1_mode+0x10/0x10 [ 953.603215][ C1] mld_send_initial_cr+0x219/0x320 [ 953.603235][ C1] mld_dad_work+0x32/0x1f0 [ 953.603253][ C1] process_one_work+0xa23/0x1940 [ 953.603277][ C1] ? __pfx_process_one_work+0x10/0x10 [ 953.603298][ C1] ? __pfx_mld_dad_work+0x10/0x10 [ 953.603322][ C1] worker_thread+0x5ef/0xe50 [ 953.603342][ C1] ? __pfx_worker_thread+0x10/0x10 [ 953.603361][ C1] ? kthread+0x13a/0x450 [ 953.603378][ C1] ? __pfx_worker_thread+0x10/0x10 [ 953.603396][ C1] kthread+0x370/0x450 [ 953.603414][ C1] ? __pfx_kthread+0x10/0x10 [ 953.603432][ C1] ret_from_fork+0x72b/0xd50 [ 953.603448][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 953.603463][ C1] ? __switch_to+0x800/0x10f0 [ 953.603481][ C1] ? __pfx_kthread+0x10/0x10 [ 953.603498][ C1] ret_from_fork_asm+0x1a/0x30 [ 953.603520][ C1] [ 954.159474][ T5703] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 954.171475][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 954.171495][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 954.171517][ T30] Tainted: [L]=SOFTLOCKUP [ 954.171523][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 954.171532][ T30] Call Trace: [ 954.171538][ T30] [ 954.171545][ T30] dump_stack_lvl+0x100/0x190 [ 954.171565][ T30] vpanic+0x552/0x970 [ 954.171582][ T30] ? __pfx_vpanic+0x10/0x10 [ 954.171598][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 954.171616][ T30] panic+0xd1/0xe0 [ 954.171630][ T30] ? __pfx_panic+0x10/0x10 [ 954.171645][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 954.171660][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 954.171676][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 954.171691][ T30] ? watchdog.cold+0x1ec/0x234 [ 954.171708][ T30] ? watchdog+0xcc1/0x1030 [ 954.171723][ T30] watchdog.cold+0x1fd/0x234 [ 954.171741][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 954.171760][ T30] ? __pfx_watchdog+0x10/0x10 [ 954.171774][ T30] ? __kthread_parkme+0x18c/0x230 [ 954.171794][ T30] ? kthread+0x13a/0x450 [ 954.171818][ T30] ? __pfx_watchdog+0x10/0x10 [ 954.171832][ T30] kthread+0x370/0x450 [ 954.171851][ T30] ? __pfx_kthread+0x10/0x10 [ 954.171872][ T30] ret_from_fork+0x72b/0xd50 [ 954.171891][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 954.171908][ T30] ? __switch_to+0x800/0x10f0 [ 954.171930][ T30] ? __pfx_kthread+0x10/0x10 [ 954.171951][ T30] ret_from_fork_asm+0x1a/0x30 [ 954.171975][ T30] [ 954.175712][ T30] Kernel Offset: disabled